69.138.8.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
69.138.85.14	attackspam	port scan and connect, tcp 23 (telnet)	2019-10-06 18:05:28
69.138.80.162	attackspam	Jul 27 04:32:34 dallas01 sshd[23764]: Failed password for root from 69.138.80.162 port 49776 ssh2 Jul 27 04:37:00 dallas01 sshd[24411]: Failed password for root from 69.138.80.162 port 43802 ssh2 Jul 27 04:41:46 dallas01 sshd[25369]: Failed password for root from 69.138.80.162 port 37824 ssh2	2019-08-01 20:52:35
69.138.80.162	attackbots	Jun 26 06:44:49 hosting sshd[16543]: Invalid user jira from 69.138.80.162 port 49162 Jun 26 06:44:49 hosting sshd[16543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=c-69-138-80-162.hsd1.va.comcast.net Jun 26 06:44:49 hosting sshd[16543]: Invalid user jira from 69.138.80.162 port 49162 Jun 26 06:44:51 hosting sshd[16543]: Failed password for invalid user jira from 69.138.80.162 port 49162 ssh2 Jun 26 06:46:35 hosting sshd[16794]: Invalid user amit from 69.138.80.162 port 40044 ...	2019-06-26 17:49:56
69.138.80.162	attack	Automatic report - Web App Attack	2019-06-21 17:14:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 69.138.8.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5756
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;69.138.8.11.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025020302 1800 900 604800 86400

;; Query time: 12 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 04 10:38:43 CST 2025
;; MSG SIZE  rcvd: 104

Host info

11.8.138.69.in-addr.arpa domain name pointer c-69-138-8-11.hsd1.md.comcast.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.8.138.69.in-addr.arpa	name = c-69-138-8-11.hsd1.md.comcast.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
111.231.55.74	attackspambots	(sshd) Failed SSH login from 111.231.55.74 (CN/China/-): 5 in the last 3600 secs	2020-05-31 18:18:10
182.253.68.122	attackbotsspam	May 31 11:48:36 eventyay sshd[21345]: Failed password for root from 182.253.68.122 port 36680 ssh2 May 31 11:52:45 eventyay sshd[21458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.253.68.122 May 31 11:52:48 eventyay sshd[21458]: Failed password for invalid user student from 182.253.68.122 port 41922 ssh2 ...	2020-05-31 18:04:00
152.0.86.25	attack	May 31 04:01:29 ovpn sshd[2368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.0.86.25 user=r.r May 31 04:01:31 ovpn sshd[2368]: Failed password for r.r from 152.0.86.25 port 39530 ssh2 May 31 04:01:31 ovpn sshd[2368]: Received disconnect from 152.0.86.25 port 39530:11: Bye Bye [preauth] May 31 04:01:31 ovpn sshd[2368]: Disconnected from 152.0.86.25 port 39530 [preauth] May 31 04:17:59 ovpn sshd[6354]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.0.86.25 user=r.r May 31 04:18:01 ovpn sshd[6354]: Failed password for r.r from 152.0.86.25 port 55200 ssh2 May 31 04:18:03 ovpn sshd[6354]: Received disconnect from 152.0.86.25 port 55200:11: Bye Bye [preauth] May 31 04:18:03 ovpn sshd[6354]: Disconnected from 152.0.86.25 port 55200 [preauth] May 31 04:24:29 ovpn sshd[23993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.0.86.25 user=r.r M........ ------------------------------	2020-05-31 18:07:51
171.220.241.115	attackspambots	Invalid user admin from 171.220.241.115 port 41302	2020-05-31 17:45:23
211.193.58.173	attackspambots	prod11 ...	2020-05-31 18:15:15
1.165.179.53	attackspambots	TCP (SYN) 1.165.179.53:44675 -> port 23, len 40	2020-05-31 18:14:17
162.144.148.6	attackspam	2020-05-31T09:11:39+02:00 exim[26368]: [1\92] 1jfI89-0006rI-OC H=(162-144-148-6.webhostbox.net) [162.144.148.6] X=TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256 CV=no F= rejected after DATA: This message scored 12.6 spam points.	2020-05-31 18:25:47
192.162.244.194	attack	email spam	2020-05-31 17:46:17
5.133.146.167	attackspambots	Hits on port : 445	2020-05-31 17:51:28
212.129.23.120	attack	[2020-05-31 04:54:42] NOTICE[1157] chan_sip.c: Registration from '"166"' failed for '212.129.23.120:45932' - Wrong password [2020-05-31 04:54:42] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T04:54:42.446-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="166",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.129.23.120/45932",Challenge="1b08bf46",ReceivedChallenge="1b08bf46",ReceivedHash="9a351d1db14a5c7223c512f0e6b4c4a3" [2020-05-31 04:54:42] NOTICE[1157] chan_sip.c: Registration from '"167"' failed for '212.129.23.120:29664' - Wrong password [2020-05-31 04:54:42] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T04:54:42.466-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="167",SessionID="0x7f5f10bba3a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212. ...	2020-05-31 17:53:36
106.75.110.232	attackspam	May 31 08:09:23 sip sshd[4039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.110.232 May 31 08:09:25 sip sshd[4039]: Failed password for invalid user test from 106.75.110.232 port 37150 ssh2 May 31 08:17:15 sip sshd[6903]: Failed password for root from 106.75.110.232 port 53004 ssh2	2020-05-31 17:48:06
181.19.3.58	attackspam	05/30/2020-23:48:20.800393 181.19.3.58 Protocol: 6 ET SCAN NMAP -sS window 1024	2020-05-31 18:16:02
5.249.145.245	attackbots	fail2ban -- 5.249.145.245 ...	2020-05-31 18:25:28
198.108.66.217	attack	IP 198.108.66.217 attacked honeypot on port: 2222 at 5/31/2020 10:40:25 AM	2020-05-31 18:13:15
104.248.170.186	attackspam	May 31 10:16:47 v22019038103785759 sshd\[18561\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.186 user=root May 31 10:16:48 v22019038103785759 sshd\[18561\]: Failed password for root from 104.248.170.186 port 59519 ssh2 May 31 10:23:49 v22019038103785759 sshd\[18942\]: Invalid user oracle from 104.248.170.186 port 53589 May 31 10:23:49 v22019038103785759 sshd\[18942\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.170.186 May 31 10:23:51 v22019038103785759 sshd\[18942\]: Failed password for invalid user oracle from 104.248.170.186 port 53589 ssh2 ...	2020-05-31 18:01:37

Recently Reported IPs

219.220.154.46	172.213.195.194	237.79.47.16	244.148.109.44
207.181.201.109	132.193.164.52	236.19.83.72	129.144.94.61
205.186.254.106	199.243.225.108	225.179.9.218	210.123.97.158
132.40.120.172	92.41.178.192	12.70.236.202	250.134.158.231
187.195.198.123	51.183.89.119	218.127.168.46	229.4.67.99