138.68.80.217 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	port 23	2020-08-14 14:33:03

Comments on same subnet:

IP	Type	Details	Datetime
138.68.80.235	attackbots	138.68.80.235 - - [05/Oct/2020:07:51:33 -0700] "GET /wp-login.php HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-06 06:43:36
138.68.80.235	attack	138.68.80.235 - - [05/Oct/2020:07:51:33 -0700] "GET /wp-login.php HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-05 22:52:10
138.68.80.235	attack	hacking	2020-10-05 14:46:56
138.68.80.235	attack	138.68.80.235 - - [29/Sep/2020:17:56:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:17:57:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:17:57:00 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 04:31:31
138.68.80.235	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-29 20:39:51
138.68.80.235	attackspam	138.68.80.235 - - [29/Sep/2020:03:56:38 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:03:56:40 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:03:56:41 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-29 12:48:53
138.68.80.235	attackbotsspam	C1,WP GET /suche/wp-login.php	2020-09-29 06:51:54
138.68.80.235	attack	xmlrpc attack	2020-09-28 23:19:46
138.68.80.235	attack	xmlrpc attack	2020-09-28 15:23:17
138.68.80.235	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-10 00:39:17
138.68.80.235	attackspambots	Automatic report generated by Wazuh	2020-08-06 20:25:50
138.68.80.235	attackspambots	[03/Aug/2020:19:30:47 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-04 03:16:18
138.68.80.235	attackbotsspam	xmlrpc attack	2020-07-31 07:48:16
138.68.80.235	attack	Automatic report - XMLRPC Attack	2020-06-23 19:32:33
138.68.80.235	attackspam	Automatic report - XMLRPC Attack	2020-06-11 19:29:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.80.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58294
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.80.217.			IN	A

;; AUTHORITY SECTION:
.			207	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020081400 1800 900 604800 86400

;; Query time: 77 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Aug 14 14:32:58 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 217.80.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 217.80.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
217.182.95.16	attack	Invalid user iosep from 217.182.95.16 port 37372	2020-01-01 07:01:28
112.85.42.180	attack	Dec 31 23:12:25 sshgateway sshd\[30624\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Dec 31 23:12:27 sshgateway sshd\[30624\]: Failed password for root from 112.85.42.180 port 19747 ssh2 Dec 31 23:12:40 sshgateway sshd\[30624\]: error: maximum authentication attempts exceeded for root from 112.85.42.180 port 19747 ssh2 \[preauth\]	2020-01-01 07:17:24
182.61.23.89	attackbots	Dec 31 23:53:06 dedicated sshd[9909]: Invalid user test from 182.61.23.89 port 56214 Dec 31 23:53:08 dedicated sshd[9909]: Failed password for invalid user test from 182.61.23.89 port 56214 ssh2 Dec 31 23:53:06 dedicated sshd[9909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.23.89 Dec 31 23:53:06 dedicated sshd[9909]: Invalid user test from 182.61.23.89 port 56214 Dec 31 23:53:08 dedicated sshd[9909]: Failed password for invalid user test from 182.61.23.89 port 56214 ssh2	2020-01-01 07:10:23
112.35.76.1	attackbots	Dec 31 22:59:26 MK-Soft-VM7 sshd[32000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.35.76.1 Dec 31 22:59:29 MK-Soft-VM7 sshd[32000]: Failed password for invalid user quandt from 112.35.76.1 port 48506 ssh2 ...	2020-01-01 06:52:15
63.80.184.123	attackbotsspam	Dec 31 23:52:29 exim[19611]: [1\51] 1imQNH-00056J-H3 H=merciful.sapuxfiori.com (merciful.homedatxanh.com) [63.80.184.123] F= rejected after DATA: This message scored 103.7 spam points.	2020-01-01 07:16:17
91.210.111.36	attackspambots	Automatic report - Port Scan Attack	2020-01-01 07:17:53
124.134.254.27	attackspam	firewall-block, port(s): 23/tcp	2020-01-01 07:09:57
212.12.172.155	attackbots	Dec 31 19:50:24 firewall sshd[29399]: Invalid user www from 212.12.172.155 Dec 31 19:50:26 firewall sshd[29399]: Failed password for invalid user www from 212.12.172.155 port 58808 ssh2 Dec 31 19:53:25 firewall sshd[29504]: Invalid user dallas from 212.12.172.155 ...	2020-01-01 06:59:52
165.22.182.168	attack	2019-12-31T23:03:16.089860shield sshd\[10898\]: Invalid user mysql from 165.22.182.168 port 54506 2019-12-31T23:03:16.094670shield sshd\[10898\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168 2019-12-31T23:03:17.761891shield sshd\[10898\]: Failed password for invalid user mysql from 165.22.182.168 port 54506 ssh2 2019-12-31T23:05:46.465168shield sshd\[11849\]: Invalid user villoria from 165.22.182.168 port 56944 2019-12-31T23:05:46.470067shield sshd\[11849\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.182.168	2020-01-01 07:18:25
58.96.114.106	attack	Invalid user yatovitz from 58.96.114.106 port 36692	2020-01-01 07:18:46
121.161.254.198	attackspambots	" "	2020-01-01 07:09:06
104.244.79.181	attackspambots	Dec 31 19:11:36 : SSH login attempts with invalid user	2020-01-01 07:15:07
112.85.42.176	attack	Dec 31 23:55:31 silence02 sshd[15006]: Failed password for root from 112.85.42.176 port 8359 ssh2 Dec 31 23:55:45 silence02 sshd[15006]: Failed password for root from 112.85.42.176 port 8359 ssh2 Dec 31 23:55:45 silence02 sshd[15006]: error: maximum authentication attempts exceeded for root from 112.85.42.176 port 8359 ssh2 [preauth]	2020-01-01 06:58:19
54.38.23.158	attack	Telnet Server BruteForce Attack	2020-01-01 07:01:03
185.53.88.21	attackspambots	\[2019-12-31 17:27:05\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T17:27:05.615-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="800972595168471",SessionID="0x7f0fb462f398",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/50211",ACLName="no_extension_match" \[2019-12-31 17:27:32\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T17:27:32.751-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="1733500972599924215",SessionID="0x7f0fb4aabfc8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/56029",ACLName="no_extension_match" \[2019-12-31 17:28:29\] SECURITY\[2857\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-12-31T17:28:29.697-0500",Severity="Error",Service="SIP",EventVersion="1",AccountID="700972595168471",SessionID="0x7f0fb4a5a908",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.21/49443",ACLName="no_ex	2020-01-01 06:50:00

Recently Reported IPs

117.211.61.116	182.23.17.246	115.217.253.115	222.240.1.20
85.105.181.203	94.1.14.2	42.115.140.229	113.87.20.131
232.198.219.100	67.143.176.189	198.159.247.160	157.39.235.58
179.209.152.235	16.141.149.159	35.17.193.196	29.96.166.78
75.100.173.36	175.72.132.201	251.196.238.197	135.110.67.131