138.68.248.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Automatic report - Banned IP Access	2019-08-11 05:03:58

Comments on same subnet:

IP	Type	Details	Datetime
138.68.248.80	attackbotsspam	Invalid user minecraft from 138.68.248.80 port 40102	2020-09-29 05:29:19
138.68.248.80	attack	2020-09-28T11:25:45.097195vps-d63064a2 sshd[16738]: Invalid user adi from 138.68.248.80 port 49768 2020-09-28T11:25:47.228216vps-d63064a2 sshd[16738]: Failed password for invalid user adi from 138.68.248.80 port 49768 ssh2 2020-09-28T11:31:18.644362vps-d63064a2 sshd[16822]: Invalid user jessica from 138.68.248.80 port 59084 2020-09-28T11:31:18.654134vps-d63064a2 sshd[16822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 2020-09-28T11:31:18.644362vps-d63064a2 sshd[16822]: Invalid user jessica from 138.68.248.80 port 59084 2020-09-28T11:31:20.824607vps-d63064a2 sshd[16822]: Failed password for invalid user jessica from 138.68.248.80 port 59084 ssh2 ...	2020-09-28 21:49:21
138.68.248.80	attackbots	SSH bruteforce	2020-09-28 13:56:16
138.68.248.80	attackbotsspam	Invalid user ftpuser from 138.68.248.80 port 60418	2020-09-19 21:41:57
138.68.248.80	attack	$f2bV_matches	2020-09-19 13:35:27
138.68.248.80	attackbots	Sep 18 21:59:45 melroy-server sshd[28584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 Sep 18 21:59:47 melroy-server sshd[28584]: Failed password for invalid user appuser from 138.68.248.80 port 33412 ssh2 ...	2020-09-19 05:14:14
138.68.248.80	attack	(sshd) Failed SSH login from 138.68.248.80 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 15 07:21:28 optimus sshd[28971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 07:21:30 optimus sshd[28971]: Failed password for root from 138.68.248.80 port 49030 ssh2 Sep 15 07:23:28 optimus sshd[29775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 07:23:30 optimus sshd[29775]: Failed password for root from 138.68.248.80 port 52604 ssh2 Sep 15 07:25:27 optimus sshd[30481]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root	2020-09-15 21:27:03
138.68.248.80	attackbots	Sep 15 00:40:11 roki-contabo sshd\[11479\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 00:40:13 roki-contabo sshd\[11479\]: Failed password for root from 138.68.248.80 port 58976 ssh2 Sep 15 00:46:44 roki-contabo sshd\[11509\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root Sep 15 00:46:46 roki-contabo sshd\[11509\]: Failed password for root from 138.68.248.80 port 57764 ssh2 Sep 15 00:49:40 roki-contabo sshd\[11535\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.248.80 user=root ...	2020-09-15 13:25:27
138.68.248.239	attackspam	3389BruteforceFW23	2019-12-28 06:21:50
138.68.248.239	attackbots	2019-12-12T14:37:49Z - RDP login failed multiple times. (138.68.248.239)	2019-12-13 04:03:21

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.248.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65108
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.248.68.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019080200 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Fri Aug 02 21:07:20 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 68.248.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 68.248.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
213.212.255.140	attackspambots	Mar 4 06:29:49 ns381471 sshd[23726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.212.255.140 Mar 4 06:29:51 ns381471 sshd[23726]: Failed password for invalid user mc from 213.212.255.140 port 38897 ssh2	2020-03-04 13:57:17
185.176.27.246	attackbotsspam	03/03/2020-23:59:35.575184 185.176.27.246 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2020-03-04 14:04:04
125.215.207.40	attackbotsspam	Mar 4 09:59:40 gw1 sshd[24055]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.215.207.40 Mar 4 09:59:42 gw1 sshd[24055]: Failed password for invalid user odoo from 125.215.207.40 port 33342 ssh2 ...	2020-03-04 13:56:20
132.232.137.62	attackbotsspam	Mar 4 REMOVED sshd\[21798\]: Invalid user www from 132.232.137.62 Mar 4 REMOVED sshd\[21913\]: Invalid user mysql from 132.232.137.62 Mar 4 REMOVED sshd\[22050\]: Invalid user postgres from 132.232.137.62	2020-03-04 13:30:09
62.234.31.201	attack	(sshd) Failed SSH login from 62.234.31.201 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 4 05:39:40 amsweb01 sshd[2611]: Invalid user ubuntu from 62.234.31.201 port 58698 Mar 4 05:39:42 amsweb01 sshd[2611]: Failed password for invalid user ubuntu from 62.234.31.201 port 58698 ssh2 Mar 4 05:50:12 amsweb01 sshd[3641]: Invalid user squid from 62.234.31.201 port 47522 Mar 4 05:50:14 amsweb01 sshd[3641]: Failed password for invalid user squid from 62.234.31.201 port 47522 ssh2 Mar 4 05:59:31 amsweb01 sshd[4726]: Invalid user testuser from 62.234.31.201 port 36268	2020-03-04 14:04:31
187.217.199.20	attack	2020-03-04T05:42:32.612371shield sshd\[17056\]: Invalid user sake from 187.217.199.20 port 37478 2020-03-04T05:42:32.618096shield sshd\[17056\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.217.199.20 2020-03-04T05:42:34.583921shield sshd\[17056\]: Failed password for invalid user sake from 187.217.199.20 port 37478 ssh2 2020-03-04T05:51:17.155759shield sshd\[18297\]: Invalid user patrycja from 187.217.199.20 port 55060 2020-03-04T05:51:17.161884shield sshd\[18297\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.217.199.20	2020-03-04 13:58:10
112.64.34.165	attackspambots	Mar 4 06:43:45 localhost sshd\[32726\]: Invalid user tsadmin from 112.64.34.165 port 47656 Mar 4 06:43:45 localhost sshd\[32726\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.34.165 Mar 4 06:43:47 localhost sshd\[32726\]: Failed password for invalid user tsadmin from 112.64.34.165 port 47656 ssh2	2020-03-04 13:44:27
37.49.226.137	attack	Mar 4 05:59:51 debian-2gb-nbg1-2 kernel: \[5557167.479614\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=37.49.226.137 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=54321 PROTO=TCP SPT=42910 DPT=5500 WINDOW=65535 RES=0x00 SYN URGP=0	2020-03-04 13:50:15
92.27.196.33	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-04 13:46:27
222.186.180.17	attackspam	Mar 3 19:30:48 web9 sshd\[7856\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Mar 3 19:30:50 web9 sshd\[7856\]: Failed password for root from 222.186.180.17 port 27656 ssh2 Mar 3 19:31:08 web9 sshd\[7910\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root Mar 3 19:31:10 web9 sshd\[7910\]: Failed password for root from 222.186.180.17 port 22876 ssh2 Mar 3 19:31:38 web9 sshd\[7959\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.17 user=root	2020-03-04 13:32:11
183.80.243.62	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 04-03-2020 05:00:10.	2020-03-04 13:21:55
129.226.50.78	attackspam	Mar 4 05:59:52 DAAP sshd[25977]: Invalid user radio from 129.226.50.78 port 39962 ...	2020-03-04 13:49:15
123.11.215.90	attackspambots	Mar 4 05:59:55 grey postfix/smtpd\[8561\]: NOQUEUE: reject: RCPT from unknown\[123.11.215.90\]: 554 5.7.1 Service unavailable\; Client host \[123.11.215.90\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[123.11.215.90\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-03-04 13:47:49
106.12.109.173	attackbots	Mar 4 10:51:02 gw1 sshd[27060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.109.173 Mar 4 10:51:03 gw1 sshd[27060]: Failed password for invalid user andy from 106.12.109.173 port 32962 ssh2 ...	2020-03-04 14:05:58
92.254.232.117	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-03-04 13:49:47

Recently Reported IPs

167.202.245.12	5.189.154.45	10.93.24.175	190.242.150.3
185.148.243.177	148.35.202.50	121.23.26.18	129.205.112.232
26.36.62.127	206.189.40.35	176.79.14.69	52.97.216.10
104.248.237.226	76.215.135.79	128.160.204.38	5.148.179.38
13.180.6.239	185.219.135.105	182.73.250.58	171.88.42.228