Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
fire
2019-08-09 13:52:14
Comments on same subnet:
IP Type Details Datetime
138.68.53.14 attackspambots
Jan 14 12:21:18 ns41 sshd[7553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.14
2020-01-14 19:34:00
138.68.53.163 attack
Nov 29 13:49:35 kapalua sshd\[4053\]: Invalid user guest from 138.68.53.163
Nov 29 13:49:35 kapalua sshd\[4053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Nov 29 13:49:37 kapalua sshd\[4053\]: Failed password for invalid user guest from 138.68.53.163 port 57754 ssh2
Nov 29 13:52:58 kapalua sshd\[4332\]: Invalid user skef from 138.68.53.163
Nov 29 13:52:58 kapalua sshd\[4332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-30 07:55:57
138.68.53.163 attackbotsspam
Nov 19 11:08:12 firewall sshd[22424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=bin
Nov 19 11:08:14 firewall sshd[22424]: Failed password for bin from 138.68.53.163 port 45642 ssh2
Nov 19 11:11:35 firewall sshd[22499]: Invalid user test from 138.68.53.163
...
2019-11-19 23:11:49
138.68.53.163 attack
$f2bV_matches
2019-11-13 15:25:13
138.68.53.163 attack
Nov 13 00:38:03 MK-Soft-VM6 sshd[22853]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163 
Nov 13 00:38:05 MK-Soft-VM6 sshd[22853]: Failed password for invalid user charn from 138.68.53.163 port 44284 ssh2
...
2019-11-13 08:07:44
138.68.53.163 attackspambots
SSH Brute-Force reported by Fail2Ban
2019-11-12 20:54:35
138.68.53.163 attack
SSH Bruteforce attack
2019-11-12 05:21:37
138.68.53.163 attackbots
Nov 10 18:20:48 dedicated sshd[18172]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov 10 18:20:50 dedicated sshd[18172]: Failed password for root from 138.68.53.163 port 34026 ssh2
2019-11-11 03:03:44
138.68.53.163 attack
2019-11-06T08:26:16.457403tmaserv sshd\[13206\]: Invalid user admin from 138.68.53.163 port 58870
2019-11-06T08:26:16.463772tmaserv sshd\[13206\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:26:18.715645tmaserv sshd\[13206\]: Failed password for invalid user admin from 138.68.53.163 port 58870 ssh2
2019-11-06T08:42:28.331216tmaserv sshd\[13887\]: Invalid user backup from 138.68.53.163 port 53436
2019-11-06T08:42:28.337388tmaserv sshd\[13887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
2019-11-06T08:42:30.363268tmaserv sshd\[13887\]: Failed password for invalid user backup from 138.68.53.163 port 53436 ssh2
...
2019-11-06 15:50:32
138.68.53.163 attack
Nov  5 18:58:40 localhost sshd\[4322\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=root
Nov  5 18:58:41 localhost sshd\[4322\]: Failed password for root from 138.68.53.163 port 60916 ssh2
Nov  5 19:01:59 localhost sshd\[4605\]: User dev from 138.68.53.163 not allowed because listed in DenyUsers
2019-11-06 05:51:31
138.68.53.163 attackbots
2019-10-25T00:14:15.994142scmdmz1 sshd\[26420\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163  user=admin
2019-10-25T00:14:17.277932scmdmz1 sshd\[26420\]: Failed password for admin from 138.68.53.163 port 55034 ssh2
2019-10-25T00:17:40.822839scmdmz1 sshd\[26678\]: Invalid user art from 138.68.53.163 port 37124
...
2019-10-25 06:35:12
138.68.53.163 attackbots
5x Failed Password
2019-10-21 16:18:16
138.68.53.163 attack
Oct 18 09:32:54 sauna sshd[36847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Oct 18 09:32:56 sauna sshd[36847]: Failed password for invalid user zhh1127 from 138.68.53.163 port 54400 ssh2
...
2019-10-18 15:31:38
138.68.53.163 attackbotsspam
Automatic report - Banned IP Access
2019-10-16 03:56:19
138.68.53.163 attackbots
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:08 MainVPS sshd[14099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.53.163
Sep 29 21:21:08 MainVPS sshd[14099]: Invalid user login from 138.68.53.163 port 50806
Sep 29 21:21:11 MainVPS sshd[14099]: Failed password for invalid user login from 138.68.53.163 port 50806 ssh2
Sep 29 21:24:53 MainVPS sshd[14377]: Invalid user dilna from 138.68.53.163 port 34232
...
2019-09-30 04:28:04
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.53.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61283
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.53.75.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 14:40:44 +08 2019
;; MSG SIZE  rcvd: 116

Host info
Host 75.53.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 75.53.68.138.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
125.164.85.47 attackspam
20/1/19@08:40:55: FAIL: Alarm-Network address from=125.164.85.47
20/1/19@08:40:55: FAIL: Alarm-Network address from=125.164.85.47
...
2020-01-20 03:47:35
89.232.76.238 attackbotsspam
Unauthorized connection attempt detected from IP address 89.232.76.238 to port 8080 [J]
2020-01-20 03:56:58
121.148.198.136 attackbotsspam
Unauthorized connection attempt detected from IP address 121.148.198.136 to port 81 [J]
2020-01-20 04:09:00
216.144.252.106 attackspam
[2020-01-19 14:37:39] NOTICE[2175] chan_sip.c: Registration from '"2005" ' failed for '216.144.252.106:5332' - Wrong password
[2020-01-19 14:37:39] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-19T14:37:39.351-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f5ac48ee978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/216.144.252.106/5332",Challenge="51a5df2c",ReceivedChallenge="51a5df2c",ReceivedHash="8da80f30bfc605b7d5d030e5c05fa675"
[2020-01-19 14:37:39] NOTICE[2175] chan_sip.c: Registration from '"2005" ' failed for '216.144.252.106:5332' - Wrong password
[2020-01-19 14:37:39] SECURITY[2212] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-01-19T14:37:39.445-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2005",SessionID="0x7f5ac4718f88",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/
...
2020-01-20 03:54:12
122.55.51.146 attack
Honeypot attack, port: 445, PTR: 122.55.51.146.pldt.net.
2020-01-20 03:52:22
92.19.175.114 attack
Honeypot attack, port: 81, PTR: host-92-19-175-114.as13285.net.
2020-01-20 03:53:41
50.204.227.109 attackbotsspam
Unauthorised access (Jan 19) SRC=50.204.227.109 LEN=40 TTL=237 ID=59939 TCP DPT=1433 WINDOW=1024 SYN
2020-01-20 03:56:14
76.91.40.143 attackspam
Unauthorized connection attempt detected from IP address 76.91.40.143 to port 81 [J]
2020-01-20 03:53:19
210.56.60.135 attackspambots
Unauthorized connection attempt detected from IP address 210.56.60.135 to port 445 [T]
2020-01-20 04:02:14
14.135.120.4 attackbots
01/19/2020-08:39:55.107580 14.135.120.4 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-01-20 03:45:26
167.71.242.140 attack
Jan 19 20:28:52 ncomp sshd[16575]: Invalid user testing from 167.71.242.140
Jan 19 20:28:52 ncomp sshd[16575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.242.140
Jan 19 20:28:52 ncomp sshd[16575]: Invalid user testing from 167.71.242.140
Jan 19 20:28:54 ncomp sshd[16575]: Failed password for invalid user testing from 167.71.242.140 port 34888 ssh2
2020-01-20 03:45:56
49.88.112.66 attackspambots
Jan 19 16:32:41 firewall sshd[8488]: Failed password for root from 49.88.112.66 port 31773 ssh2
Jan 19 16:32:43 firewall sshd[8488]: Failed password for root from 49.88.112.66 port 31773 ssh2
Jan 19 16:32:46 firewall sshd[8488]: Failed password for root from 49.88.112.66 port 31773 ssh2
...
2020-01-20 04:06:40
36.67.59.179 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-20 03:41:35
121.181.120.99 attackbots
Unauthorized connection attempt detected from IP address 121.181.120.99 to port 23 [J]
2020-01-20 04:12:17
174.127.166.197 attackbotsspam
Unauthorized connection attempt detected from IP address 174.127.166.197 to port 5555 [J]
2020-01-20 03:41:19

Recently Reported IPs

96.73.184.114 180.76.134.150 54.236.241.41 36.89.231.253
103.16.104.54 212.145.227.246 39.98.246.15 101.91.62.11
37.137.19.70 192.210.199.26 134.249.59.201 50.93.204.138
119.204.246.89 36.71.233.226 162.246.212.108 94.191.47.85
87.248.168.152 90.177.227.176 185.229.243.57 178.33.104.134