138.68.80.51 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
138.68.80.235	attackbots	138.68.80.235 - - [05/Oct/2020:07:51:33 -0700] "GET /wp-login.php HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-06 06:43:36
138.68.80.235	attack	138.68.80.235 - - [05/Oct/2020:07:51:33 -0700] "GET /wp-login.php HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-05 22:52:10
138.68.80.235	attack	hacking	2020-10-05 14:46:56
138.68.80.235	attack	138.68.80.235 - - [29/Sep/2020:17:56:59 +0100] "POST /wp-login.php HTTP/1.1" 200 2243 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:17:57:00 +0100] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:17:57:00 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-30 04:31:31
138.68.80.235	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-29 20:39:51
138.68.80.235	attackspam	138.68.80.235 - - [29/Sep/2020:03:56:38 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:03:56:40 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.80.235 - - [29/Sep/2020:03:56:41 +0100] "POST /wp-login.php HTTP/1.1" 401 3568 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-29 12:48:53
138.68.80.235	attackbotsspam	C1,WP GET /suche/wp-login.php	2020-09-29 06:51:54
138.68.80.235	attack	xmlrpc attack	2020-09-28 23:19:46
138.68.80.235	attack	xmlrpc attack	2020-09-28 15:23:17
138.68.80.235	attackspam	CMS (WordPress or Joomla) login attempt.	2020-09-10 00:39:17
138.68.80.217	attackbotsspam	port 23	2020-08-14 14:33:03
138.68.80.235	attackspambots	Automatic report generated by Wazuh	2020-08-06 20:25:50
138.68.80.235	attackspambots	[03/Aug/2020:19:30:47 +0200] Web-Request: "GET /wp-login.php", User-Agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-04 03:16:18
138.68.80.235	attackbotsspam	xmlrpc attack	2020-07-31 07:48:16
138.68.80.235	attack	Automatic report - XMLRPC Attack	2020-06-23 19:32:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.80.51
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18010
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.80.51.			IN	A

;; AUTHORITY SECTION:
.			217	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022091401 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 15 05:05:25 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 51.80.68.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 51.80.68.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.52.121.64	attackbotsspam	Jan 1 09:00:12 dedicated sshd[31459]: Invalid user weinz from 106.52.121.64 port 60340	2020-01-01 17:13:31
46.229.168.131	attackbotsspam	Malicious Traffic/Form Submission	2020-01-01 17:05:16
45.95.35.116	attackbotsspam	Jan 1 07:24:22 exim[30421]: [1\52] 1imXQa-0007uf-UY H=(quiet.ppspot.com) [45.95.35.116] F= rejected after DATA: This message scored 101.3 spam points.	2020-01-01 17:34:20
106.13.52.234	attackbots	Jan 1 07:46:33 srv-ubuntu-dev3 sshd[19565]: Invalid user user from 106.13.52.234 Jan 1 07:46:33 srv-ubuntu-dev3 sshd[19565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.234 Jan 1 07:46:33 srv-ubuntu-dev3 sshd[19565]: Invalid user user from 106.13.52.234 Jan 1 07:46:35 srv-ubuntu-dev3 sshd[19565]: Failed password for invalid user user from 106.13.52.234 port 33080 ssh2 Jan 1 07:49:16 srv-ubuntu-dev3 sshd[19768]: Invalid user web from 106.13.52.234 Jan 1 07:49:16 srv-ubuntu-dev3 sshd[19768]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.234 Jan 1 07:49:16 srv-ubuntu-dev3 sshd[19768]: Invalid user web from 106.13.52.234 Jan 1 07:49:17 srv-ubuntu-dev3 sshd[19768]: Failed password for invalid user web from 106.13.52.234 port 54484 ssh2 Jan 1 07:51:57 srv-ubuntu-dev3 sshd[19988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.52.23 ...	2020-01-01 17:11:07
157.230.251.115	attackspam	Jan 1 09:25:53 pornomens sshd\[32382\]: Invalid user ident from 157.230.251.115 port 55334 Jan 1 09:25:53 pornomens sshd\[32382\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.251.115 Jan 1 09:25:55 pornomens sshd\[32382\]: Failed password for invalid user ident from 157.230.251.115 port 55334 ssh2 ...	2020-01-01 17:07:17
190.123.210.228	attackspam	Automatic report - Banned IP Access	2020-01-01 17:42:47
203.137.182.54	attackspambots	Jan 1 09:04:13 vh1 sshd[25983]: Did not receive identification string from 203.137.182.54 Jan 1 09:06:48 vh1 sshd[26023]: Did not receive identification string from 203.137.182.54 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=203.137.182.54	2020-01-01 17:30:57
45.55.15.134	attackbots	Jan 1 09:53:12 MK-Soft-VM7 sshd[12307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.15.134 Jan 1 09:53:14 MK-Soft-VM7 sshd[12307]: Failed password for invalid user anari from 45.55.15.134 port 48301 ssh2 ...	2020-01-01 17:28:15
182.90.221.198	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-01-01 17:19:31
218.92.0.205	attack	2020-01-01T04:24:49.209560xentho-1 sshd[353527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.205 user=root 2020-01-01T04:24:51.556104xentho-1 sshd[353527]: Failed password for root from 218.92.0.205 port 58441 ssh2 2020-01-01T04:24:54.049447xentho-1 sshd[353527]: Failed password for root from 218.92.0.205 port 58441 ssh2 2020-01-01T04:24:49.209560xentho-1 sshd[353527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.205 user=root 2020-01-01T04:24:51.556104xentho-1 sshd[353527]: Failed password for root from 218.92.0.205 port 58441 ssh2 2020-01-01T04:24:54.049447xentho-1 sshd[353527]: Failed password for root from 218.92.0.205 port 58441 ssh2 2020-01-01T04:24:49.209560xentho-1 sshd[353527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.205 user=root 2020-01-01T04:24:51.556104xentho-1 sshd[353527]: Failed password for root from 218.92 ...	2020-01-01 17:34:56
79.124.8.3	attackbotsspam	Host Scan	2020-01-01 17:08:09
216.218.206.107	attackspambots	01/01/2020-03:19:24.866545 216.218.206.107 Protocol: 17 GPL RPC portmap listing UDP 111	2020-01-01 17:16:14
137.59.0.6	attack	Jan 1 09:51:03 markkoudstaal sshd[20436]: Failed password for root from 137.59.0.6 port 56266 ssh2 Jan 1 09:54:24 markkoudstaal sshd[20699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.59.0.6 Jan 1 09:54:26 markkoudstaal sshd[20699]: Failed password for invalid user auvray from 137.59.0.6 port 41045 ssh2	2020-01-01 17:24:17
189.126.183.12	attackbots	Dec 31 19:43:01 xxxxxxx0 sshd[10127]: Invalid user data from 189.126.183.12 port 25323 Dec 31 19:43:01 xxxxxxx0 sshd[10129]: Invalid user data from 189.126.183.12 port 16759 Dec 31 19:43:01 xxxxxxx0 sshd[10126]: Invalid user data from 189.126.183.12 port 40478 Dec 31 19:43:01 xxxxxxx0 sshd[10131]: Invalid user data from 189.126.183.12 port 52642 Dec 31 19:43:01 xxxxxxx0 sshd[10128]: Invalid user data from 189.126.183.12 port 64704 Dec 31 19:43:01 xxxxxxx0 sshd[10130]: Invalid user data from 189.126.183.12 port 14952 Dec 31 19:43:01 xxxxxxx0 sshd[10132]: Invalid user data from 189.126.183.12 port 49788 Dec 31 19:43:01 xxxxxxx0 sshd[10129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.126.183.12 Dec 31 19:43:01 xxxxxxx0 sshd[10131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.126.183.12 Dec 31 19:43:01 xxxxxxx0 sshd[10128]: pam_unix(sshd:auth): authentication failure; logname= ui........ ------------------------------	2020-01-01 17:27:28
180.76.244.97	attackbots	$f2bV_matches	2020-01-01 17:22:07

Recently Reported IPs

103.107.183.78	93.70.89.206	156.239.49.170	154.201.33.146
154.201.41.252	185.93.32.63	23.254.8.53	192.177.93.11
185.93.32.201	185.93.32.5	45.95.55.53	82.127.174.213
202.154.21.114	121.126.221.13	103.11.106.33	65.108.65.49
103.81.13.66	37.19.199.195	85.105.108.228	172.251.1.85