138.68.71.139 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.71.18	attackspambots	Sep 28 01:37:21 pl2server sshd[26678]: Invalid user alex from 138.68.71.18 port 38504 Sep 28 01:37:21 pl2server sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 Sep 28 01:37:22 pl2server sshd[26678]: Failed password for invalid user alex from 138.68.71.18 port 38504 ssh2 Sep 28 01:37:22 pl2server sshd[26678]: Received disconnect from 138.68.71.18 port 38504:11: Bye Bye [preauth] Sep 28 01:37:22 pl2server sshd[26678]: Disconnected from 138.68.71.18 port 38504 [preauth] Sep 28 01:51:34 pl2server sshd[30416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 user=www-data Sep 28 01:51:36 pl2server sshd[30416]: Failed password for www-data from 138.68.71.18 port 44968 ssh2 Sep 28 01:51:36 pl2server sshd[30416]: Received disconnect from 138.68.71.18 port 44968:11: Bye Bye [preauth] Sep 28 01:51:36 pl2server sshd[30416]: Disconnected from 138.68.71.18 port 4496........ -------------------------------	2020-09-30 09:26:07
138.68.71.18	attackbots	Sep 28 01:37:21 pl2server sshd[26678]: Invalid user alex from 138.68.71.18 port 38504 Sep 28 01:37:21 pl2server sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 Sep 28 01:37:22 pl2server sshd[26678]: Failed password for invalid user alex from 138.68.71.18 port 38504 ssh2 Sep 28 01:37:22 pl2server sshd[26678]: Received disconnect from 138.68.71.18 port 38504:11: Bye Bye [preauth] Sep 28 01:37:22 pl2server sshd[26678]: Disconnected from 138.68.71.18 port 38504 [preauth] Sep 28 01:51:34 pl2server sshd[30416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 user=www-data Sep 28 01:51:36 pl2server sshd[30416]: Failed password for www-data from 138.68.71.18 port 44968 ssh2 Sep 28 01:51:36 pl2server sshd[30416]: Received disconnect from 138.68.71.18 port 44968:11: Bye Bye [preauth] Sep 28 01:51:36 pl2server sshd[30416]: Disconnected from 138.68.71.18 port 4496........ -------------------------------	2020-09-30 02:17:00
138.68.71.18	attack	Sep 29 11:15:01 l03 sshd[19472]: Invalid user dave from 138.68.71.18 port 37666 ...	2020-09-29 18:19:16
138.68.71.18	attackbots	5x Failed Password	2020-09-26 03:09:10
138.68.71.18	attackspambots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-25 18:57:01
138.68.71.188	attackspambots	Exploited Host.	2020-07-26 02:40:16
138.68.71.174	attack	[Thu Jun 04 08:31:15.929570 2020] [php7:error] [pid 12674] [client 138.68.71.174:49980] script /Library/Server/Web/Data/Sites/omfocused.com/wp-login.php not found or unable to stat	2020-06-05 01:02:28
138.68.71.174	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-06-02 00:17:57
138.68.71.188	attack	May 7 07:09:10 h2829583 sshd[15812]: Failed password for root from 138.68.71.188 port 46358 ssh2	2020-05-07 13:09:36
138.68.71.174	attackspam	2020-04-29T10:25:46.993070+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174 2020-04-29T10:25:45.652329+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174 2020-04-29T10:25:45.650309+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174	2020-04-29 18:30:04
138.68.71.174	attack	138.68.71.174 - - [24/Apr/2020:14:03:32 +0200] "GET /wp-login.php HTTP/1.1" 200 5982 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.71.174 - - [24/Apr/2020:14:03:35 +0200] "POST /wp-login.php HTTP/1.1" 200 6174 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.71.174 - - [24/Apr/2020:14:03:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-25 01:23:52
138.68.71.174	attackspam	Automatic report - XMLRPC Attack	2020-03-12 14:42:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.71.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6000
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.71.139.			IN	A

;; AUTHORITY SECTION:
.			298	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 04:04:33 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 139.71.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 139.71.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.222.109.84	attack	Unauthorized connection attempt from IP address 77.222.109.84 on Port 445(SMB)	2020-06-26 08:47:05
70.55.59.249	attack	TCP (SYN) 70.55.59.249:48730 -> port 22, len 60	2020-06-26 09:03:08
111.75.210.58	attackbotsspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-26 08:20:21
189.43.102.34	attack	2020-06-25T17:30:37.337183suse-nuc sshd[22744]: User root from 189.43.102.34 not allowed because listed in DenyUsers ...	2020-06-26 08:51:42
189.90.66.5	attackbotsspam	SSH-BruteForce	2020-06-26 09:07:45
45.228.32.58	attack	Unauthorized connection attempt from IP address 45.228.32.58 on Port 445(SMB)	2020-06-26 08:17:08
92.32.126.111	attackspambots	Invalid user cmc from 92.32.126.111 port 34476	2020-06-26 08:39:04
62.234.130.87	attackbots	SSH Brute-Force attacks	2020-06-26 08:26:01
218.92.0.191	attack	Jun 26 03:03:23 dcd-gentoo sshd[30559]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups Jun 26 03:03:25 dcd-gentoo sshd[30559]: error: PAM: Authentication failure for illegal user root from 218.92.0.191 Jun 26 03:03:25 dcd-gentoo sshd[30559]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 49366 ssh2 ...	2020-06-26 09:06:13
89.223.31.218	attackspambots	2020-06-25T21:31:43.752466shield sshd\[26924\]: Invalid user xman from 89.223.31.218 port 56484 2020-06-25T21:31:43.756084shield sshd\[26924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244967.simplecloud.ru 2020-06-25T21:31:45.885862shield sshd\[26924\]: Failed password for invalid user xman from 89.223.31.218 port 56484 ssh2 2020-06-25T21:35:50.609221shield sshd\[27419\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=244967.simplecloud.ru user=root 2020-06-25T21:35:52.649373shield sshd\[27419\]: Failed password for root from 89.223.31.218 port 56114 ssh2	2020-06-26 08:25:11
222.186.30.57	attackbots	Jun 26 02:32:47 eventyay sshd[23319]: Failed password for root from 222.186.30.57 port 49870 ssh2 Jun 26 02:32:49 eventyay sshd[23319]: Failed password for root from 222.186.30.57 port 49870 ssh2 Jun 26 02:32:51 eventyay sshd[23319]: Failed password for root from 222.186.30.57 port 49870 ssh2 ...	2020-06-26 08:36:38
78.134.99.105	attackspam	Jun 25 23:06:10 abendstille sshd\[30837\]: Invalid user qxn from 78.134.99.105 Jun 25 23:06:10 abendstille sshd\[30837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.134.99.105 Jun 25 23:06:12 abendstille sshd\[30837\]: Failed password for invalid user qxn from 78.134.99.105 port 52864 ssh2 Jun 25 23:06:35 abendstille sshd\[31306\]: Invalid user manuel from 78.134.99.105 Jun 25 23:06:35 abendstille sshd\[31306\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.134.99.105 ...	2020-06-26 08:46:47
111.230.221.203	attackspambots	Brute-force attempt banned	2020-06-26 08:38:01
80.82.77.240	attackbots	This IP is associated with RDP abuse. It was found in a paste by https://twitter.com/RdpSnitch - https://pastebin.com/fRjuhG72 For more information, or to report interesting/incorrect findings, contact us - bot@tines.io	2020-06-26 09:09:35
190.201.67.97	attackspambots	Unauthorized connection attempt from IP address 190.201.67.97 on Port 445(SMB)	2020-06-26 08:59:52

Recently Reported IPs

138.68.66.43	138.68.71.132	138.68.75.9	138.68.73.116
138.68.7.101	138.68.76.251	138.68.8.41	138.68.82.240
138.68.84.201	139.0.10.59	139.129.172.167	8.43.85.13
139.0.10.62	139.129.187.244	139.129.158.243	139.129.148.166
139.129.186.245	139.112.122.19	139.112.129.40	139.129.186.213