138.68.71.250 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.71.18	attackspambots	Sep 28 01:37:21 pl2server sshd[26678]: Invalid user alex from 138.68.71.18 port 38504 Sep 28 01:37:21 pl2server sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 Sep 28 01:37:22 pl2server sshd[26678]: Failed password for invalid user alex from 138.68.71.18 port 38504 ssh2 Sep 28 01:37:22 pl2server sshd[26678]: Received disconnect from 138.68.71.18 port 38504:11: Bye Bye [preauth] Sep 28 01:37:22 pl2server sshd[26678]: Disconnected from 138.68.71.18 port 38504 [preauth] Sep 28 01:51:34 pl2server sshd[30416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 user=www-data Sep 28 01:51:36 pl2server sshd[30416]: Failed password for www-data from 138.68.71.18 port 44968 ssh2 Sep 28 01:51:36 pl2server sshd[30416]: Received disconnect from 138.68.71.18 port 44968:11: Bye Bye [preauth] Sep 28 01:51:36 pl2server sshd[30416]: Disconnected from 138.68.71.18 port 4496........ -------------------------------	2020-09-30 09:26:07
138.68.71.18	attackbots	Sep 28 01:37:21 pl2server sshd[26678]: Invalid user alex from 138.68.71.18 port 38504 Sep 28 01:37:21 pl2server sshd[26678]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 Sep 28 01:37:22 pl2server sshd[26678]: Failed password for invalid user alex from 138.68.71.18 port 38504 ssh2 Sep 28 01:37:22 pl2server sshd[26678]: Received disconnect from 138.68.71.18 port 38504:11: Bye Bye [preauth] Sep 28 01:37:22 pl2server sshd[26678]: Disconnected from 138.68.71.18 port 38504 [preauth] Sep 28 01:51:34 pl2server sshd[30416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.71.18 user=www-data Sep 28 01:51:36 pl2server sshd[30416]: Failed password for www-data from 138.68.71.18 port 44968 ssh2 Sep 28 01:51:36 pl2server sshd[30416]: Received disconnect from 138.68.71.18 port 44968:11: Bye Bye [preauth] Sep 28 01:51:36 pl2server sshd[30416]: Disconnected from 138.68.71.18 port 4496........ -------------------------------	2020-09-30 02:17:00
138.68.71.18	attack	Sep 29 11:15:01 l03 sshd[19472]: Invalid user dave from 138.68.71.18 port 37666 ...	2020-09-29 18:19:16
138.68.71.18	attackbots	5x Failed Password	2020-09-26 03:09:10
138.68.71.18	attackspambots	Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)	2020-09-25 18:57:01
138.68.71.188	attackspambots	Exploited Host.	2020-07-26 02:40:16
138.68.71.174	attack	[Thu Jun 04 08:31:15.929570 2020] [php7:error] [pid 12674] [client 138.68.71.174:49980] script /Library/Server/Web/Data/Sites/omfocused.com/wp-login.php not found or unable to stat	2020-06-05 01:02:28
138.68.71.174	attackspambots	CMS (WordPress or Joomla) login attempt.	2020-06-02 00:17:57
138.68.71.188	attack	May 7 07:09:10 h2829583 sshd[15812]: Failed password for root from 138.68.71.188 port 46358 ssh2	2020-05-07 13:09:36
138.68.71.174	attackspam	2020-04-29T10:25:46.993070+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174 2020-04-29T10:25:45.652329+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174 2020-04-29T10:25:45.650309+00:00 [f2b-wordpress-hard-ddos] : Authentication attempt user [munged] from 138.68.71.174	2020-04-29 18:30:04
138.68.71.174	attack	138.68.71.174 - - [24/Apr/2020:14:03:32 +0200] "GET /wp-login.php HTTP/1.1" 200 5982 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.71.174 - - [24/Apr/2020:14:03:35 +0200] "POST /wp-login.php HTTP/1.1" 200 6174 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.71.174 - - [24/Apr/2020:14:03:35 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-25 01:23:52
138.68.71.174	attackspam	Automatic report - XMLRPC Attack	2020-03-12 14:42:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.71.250
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63827
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.71.250.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020500 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 22:19:51 CST 2025
;; MSG SIZE  rcvd: 106

Host info

Host 250.71.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 250.71.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
202.55.175.236	attackspam	Jul 26 21:45:16 rocket sshd[3910]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.55.175.236 Jul 26 21:45:17 rocket sshd[3910]: Failed password for invalid user nmt from 202.55.175.236 port 36778 ssh2 ...	2020-07-27 05:00:23
128.199.62.182	attack	Invalid user sb from 128.199.62.182 port 39482	2020-07-27 05:18:59
106.13.4.132	attackbots	Jul 27 00:16:29 ift sshd\[63144\]: Invalid user jht from 106.13.4.132Jul 27 00:16:30 ift sshd\[63144\]: Failed password for invalid user jht from 106.13.4.132 port 50306 ssh2Jul 27 00:17:58 ift sshd\[63345\]: Invalid user tommy from 106.13.4.132Jul 27 00:18:00 ift sshd\[63345\]: Failed password for invalid user tommy from 106.13.4.132 port 45054 ssh2Jul 27 00:19:31 ift sshd\[63409\]: Invalid user guest1 from 106.13.4.132 ...	2020-07-27 05:37:04
189.203.139.37	attackbots	Jul 26 14:15:25 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 22 secs): user=, method=PLAIN, rip=189.203.139.37, lip=185.198.26.142, TLS, session= ...	2020-07-27 05:06:15
188.163.52.252	attack	Jul 26 22:15:05 debian-2gb-nbg1-2 kernel: \[18053013.958224\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=188.163.52.252 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=1816 PROTO=TCP SPT=14936 DPT=44444 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-27 05:35:46
24.72.143.249	attack	WordPress brute force	2020-07-27 05:33:12
142.93.212.10	attackbots	Invalid user natasha from 142.93.212.10 port 50176	2020-07-27 05:20:07
141.98.9.157	attack	Failed password for invalid user from 141.98.9.157 port 44397 ssh2	2020-07-27 05:03:35
118.89.66.42	attackbotsspam	$f2bV_matches	2020-07-27 05:27:12
142.44.185.242	attackspam	Jul 26 23:16:09 jane sshd[19643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.44.185.242 Jul 26 23:16:11 jane sshd[19643]: Failed password for invalid user aiello from 142.44.185.242 port 57848 ssh2 ...	2020-07-27 05:36:13
179.107.34.178	attack	Invalid user terraria from 179.107.34.178 port 32539	2020-07-27 05:19:41
84.113.214.170	attackbotsspam	Jul 26 14:01:54 dignus sshd[16468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.113.214.170 Jul 26 14:01:56 dignus sshd[16468]: Failed password for invalid user gaowen from 84.113.214.170 port 55462 ssh2 Jul 26 14:05:03 dignus sshd[16981]: Invalid user mythtv from 84.113.214.170 port 46678 Jul 26 14:05:03 dignus sshd[16981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.113.214.170 Jul 26 14:05:05 dignus sshd[16981]: Failed password for invalid user mythtv from 84.113.214.170 port 46678 ssh2 ...	2020-07-27 05:27:55
185.132.53.200	attack	" "	2020-07-27 05:14:04
187.237.91.218	attack	Jul 26 23:15:21 nextcloud sshd\[5027\]: Invalid user ljl from 187.237.91.218 Jul 26 23:15:21 nextcloud sshd\[5027\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.237.91.218 Jul 26 23:15:22 nextcloud sshd\[5027\]: Failed password for invalid user ljl from 187.237.91.218 port 35966 ssh2	2020-07-27 05:18:44
94.25.224.193	attackbotsspam	Unauthorized connection attempt from IP address 94.25.224.193 on Port 445(SMB)	2020-07-27 05:19:24

Recently Reported IPs

163.107.166.31	195.15.229.222	99.161.98.116	187.181.27.74
214.106.108.2	255.54.227.86	126.111.55.196	79.188.71.251
108.70.37.124	245.146.204.201	104.196.212.89	48.166.119.4
189.81.161.209	55.131.28.155	37.184.187.148	254.20.189.150
245.78.60.128	186.5.118.127	5.217.160.202	209.37.112.54