Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Jun 14 21:40:22 meumeu sshd[505322]: Invalid user gok from 138.68.105.194 port 39780
Jun 14 21:40:22 meumeu sshd[505322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
Jun 14 21:40:22 meumeu sshd[505322]: Invalid user gok from 138.68.105.194 port 39780
Jun 14 21:40:24 meumeu sshd[505322]: Failed password for invalid user gok from 138.68.105.194 port 39780 ssh2
Jun 14 21:44:25 meumeu sshd[505658]: Invalid user test from 138.68.105.194 port 41000
Jun 14 21:44:25 meumeu sshd[505658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
Jun 14 21:44:25 meumeu sshd[505658]: Invalid user test from 138.68.105.194 port 41000
Jun 14 21:44:27 meumeu sshd[505658]: Failed password for invalid user test from 138.68.105.194 port 41000 ssh2
Jun 14 21:48:29 meumeu sshd[506047]: Invalid user erp from 138.68.105.194 port 42220
...
2020-06-15 04:06:24
attackbots
Jun 14 00:50:05 firewall sshd[31504]: Failed password for invalid user postgres from 138.68.105.194 port 33454 ssh2
Jun 14 00:53:30 firewall sshd[31609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
Jun 14 00:53:32 firewall sshd[31609]: Failed password for root from 138.68.105.194 port 33910 ssh2
...
2020-06-14 14:30:10
attackspambots
Jun 12 18:45:47 ns382633 sshd\[5054\]: Invalid user g from 138.68.105.194 port 45550
Jun 12 18:45:47 ns382633 sshd\[5054\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
Jun 12 18:45:48 ns382633 sshd\[5054\]: Failed password for invalid user g from 138.68.105.194 port 45550 ssh2
Jun 12 18:51:04 ns382633 sshd\[5929\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
Jun 12 18:51:06 ns382633 sshd\[5929\]: Failed password for root from 138.68.105.194 port 55738 ssh2
2020-06-13 02:11:21
attackbots
web-1 [ssh_2] SSH Attack
2020-06-05 18:49:28
attackbotsspam
Jun  4 10:29:15 cdc sshd[28920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
Jun  4 10:29:16 cdc sshd[28920]: Failed password for invalid user root from 138.68.105.194 port 34228 ssh2
2020-06-04 18:07:21
attackbots
May 27 09:42:44 gw1 sshd[11551]: Failed password for root from 138.68.105.194 port 40188 ssh2
...
2020-05-27 12:51:25
attackbotsspam
May 26 09:23:29 h2779839 sshd[31627]: Invalid user admin from 138.68.105.194 port 43464
May 26 09:23:29 h2779839 sshd[31627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
May 26 09:23:29 h2779839 sshd[31627]: Invalid user admin from 138.68.105.194 port 43464
May 26 09:23:31 h2779839 sshd[31627]: Failed password for invalid user admin from 138.68.105.194 port 43464 ssh2
May 26 09:26:03 h2779839 sshd[31681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
May 26 09:26:05 h2779839 sshd[31681]: Failed password for root from 138.68.105.194 port 56598 ssh2
May 26 09:28:42 h2779839 sshd[31725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
May 26 09:28:45 h2779839 sshd[31725]: Failed password for root from 138.68.105.194 port 41502 ssh2
May 26 09:31:31 h2779839 sshd[31781]: Invalid user kosiorska from 13
...
2020-05-26 18:24:35
attackspam
[ssh] SSH attack
2020-05-26 03:12:44
attackspambots
May 24 14:52:07 electroncash sshd[24044]: Invalid user python from 138.68.105.194 port 42686
May 24 14:52:07 electroncash sshd[24044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
May 24 14:52:07 electroncash sshd[24044]: Invalid user python from 138.68.105.194 port 42686
May 24 14:52:09 electroncash sshd[24044]: Failed password for invalid user python from 138.68.105.194 port 42686 ssh2
May 24 14:55:20 electroncash sshd[24859]: Invalid user anver from 138.68.105.194 port 58808
...
2020-05-25 02:33:48
attackbots
Invalid user fop2 from 138.68.105.194 port 38666
2020-05-15 06:17:44
attackbotsspam
2020-05-11T01:54:26.9888231495-001 sshd[8563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
2020-05-11T01:54:26.9858151495-001 sshd[8563]: Invalid user camilo from 138.68.105.194 port 60452
2020-05-11T01:54:29.6091941495-001 sshd[8563]: Failed password for invalid user camilo from 138.68.105.194 port 60452 ssh2
2020-05-11T01:58:34.3610291495-001 sshd[8776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
2020-05-11T01:58:35.6920901495-001 sshd[8776]: Failed password for root from 138.68.105.194 port 41130 ssh2
2020-05-11T02:02:46.4311151495-001 sshd[9004]: Invalid user rtest from 138.68.105.194 port 50046
...
2020-05-11 18:00:29
attack
May  8 02:59:44 server1 sshd\[28465\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
May  8 02:59:45 server1 sshd\[28465\]: Failed password for root from 138.68.105.194 port 50056 ssh2
May  8 03:03:53 server1 sshd\[648\]: Invalid user wt from 138.68.105.194
May  8 03:03:53 server1 sshd\[648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
May  8 03:03:55 server1 sshd\[648\]: Failed password for invalid user wt from 138.68.105.194 port 59064 ssh2
...
2020-05-08 17:57:43
attackspambots
5x Failed Password
2020-04-28 08:04:25
attackbots
Apr 25 07:40:37 santamaria sshd\[5673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
Apr 25 07:40:39 santamaria sshd\[5673\]: Failed password for root from 138.68.105.194 port 60728 ssh2
Apr 25 07:45:11 santamaria sshd\[5717\]: Invalid user sp from 138.68.105.194
Apr 25 07:45:11 santamaria sshd\[5717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
...
2020-04-25 14:40:57
attack
Apr 23 11:32:36 odroid64 sshd\[32091\]: Invalid user admin from 138.68.105.194
Apr 23 11:32:36 odroid64 sshd\[32091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
...
2020-04-23 18:10:01
attack
Apr 21 08:33:17 server1 sshd\[31903\]: Failed password for invalid user admin from 138.68.105.194 port 35860 ssh2
Apr 21 08:38:00 server1 sshd\[1479\]: Invalid user gw from 138.68.105.194
Apr 21 08:38:00 server1 sshd\[1479\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
Apr 21 08:38:03 server1 sshd\[1479\]: Failed password for invalid user gw from 138.68.105.194 port 51972 ssh2
Apr 21 08:42:40 server1 sshd\[3698\]: Invalid user kb from 138.68.105.194
...
2020-04-21 23:30:49
attackspam
Dec 19 14:46:30 woltan sshd[31730]: Failed password for invalid user test from 138.68.105.194 port 46260 ssh2
2020-03-10 08:56:28
attackspam
Feb 16 15:00:53 srv01 sshd[10632]: Invalid user ax from 138.68.105.194 port 55834
Feb 16 15:00:53 srv01 sshd[10632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
Feb 16 15:00:53 srv01 sshd[10632]: Invalid user ax from 138.68.105.194 port 55834
Feb 16 15:00:55 srv01 sshd[10632]: Failed password for invalid user ax from 138.68.105.194 port 55834 ssh2
Feb 16 15:07:04 srv01 sshd[11079]: Invalid user yun from 138.68.105.194 port 40324
...
2020-02-16 22:32:48
attackspam
Feb 11 00:12:07 cvbnet sshd[30442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194 
Feb 11 00:12:09 cvbnet sshd[30442]: Failed password for invalid user uob from 138.68.105.194 port 59478 ssh2
...
2020-02-11 08:48:49
attack
Unauthorized connection attempt detected from IP address 138.68.105.194 to port 2220 [J]
2020-01-30 19:49:48
attackspambots
Unauthorized connection attempt detected from IP address 138.68.105.194 to port 2220 [J]
2020-01-21 07:51:52
attack
SSH brutforce
2020-01-10 04:50:53
attackbotsspam
Unauthorized connection attempt detected from IP address 138.68.105.194 to port 2220 [J]
2020-01-06 23:35:57
attack
Too many connections or unauthorized access detected from Arctic banned ip
2020-01-04 23:43:03
attack
Jan  2 11:39:10 mockhub sshd[20565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
Jan  2 11:39:12 mockhub sshd[20565]: Failed password for invalid user wpyan from 138.68.105.194 port 56990 ssh2
...
2020-01-03 03:44:08
attack
2019-12-29T05:57:42.343731shield sshd\[4685\]: Invalid user mysql from 138.68.105.194 port 49526
2019-12-29T05:57:42.347904shield sshd\[4685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
2019-12-29T05:57:44.706112shield sshd\[4685\]: Failed password for invalid user mysql from 138.68.105.194 port 49526 ssh2
2019-12-29T06:00:33.838084shield sshd\[5137\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194  user=root
2019-12-29T06:00:35.669544shield sshd\[5137\]: Failed password for root from 138.68.105.194 port 49316 ssh2
2019-12-29 14:13:19
attackspambots
Dec 21 00:06:27 sigma sshd\[18622\]: Invalid user broadway from 138.68.105.194Dec 21 00:06:29 sigma sshd\[18622\]: Failed password for invalid user broadway from 138.68.105.194 port 38734 ssh2
...
2019-12-21 08:35:36
attackbots
Dec 19 15:28:02 srv01 sshd[17106]: Invalid user prupis from 138.68.105.194 port 41030
Dec 19 15:28:02 srv01 sshd[17106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
Dec 19 15:28:02 srv01 sshd[17106]: Invalid user prupis from 138.68.105.194 port 41030
Dec 19 15:28:04 srv01 sshd[17106]: Failed password for invalid user prupis from 138.68.105.194 port 41030 ssh2
Dec 19 15:33:05 srv01 sshd[17553]: Invalid user camille from 138.68.105.194 port 48402
...
2019-12-20 04:26:29
attackspambots
2019-12-18 16:05:55,838 fail2ban.actions: WARNING [ssh] Ban 138.68.105.194
2019-12-19 01:54:53
attackspambots
Dec 16 18:11:00 vps647732 sshd[25761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.105.194
Dec 16 18:11:02 vps647732 sshd[25761]: Failed password for invalid user huey from 138.68.105.194 port 45194 ssh2
...
2019-12-17 04:24:50
Comments on same subnet:
IP Type Details Datetime
138.68.105.10 attack
$f2bV_matches
2019-06-25 21:18:01
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.105.194
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25477
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.105.194.			IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112900 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.136#53(100.100.2.136)
;; WHEN: Fri Nov 29 22:10:54 CST 2019
;; MSG SIZE  rcvd: 118

Host info
Host 194.105.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 194.105.68.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
115.202.225.233 attackbotsspam
Automatic report - Port Scan Attack
2020-01-04 17:49:57
129.204.2.182 attackspambots
Jan  4 07:03:37 IngegnereFirenze sshd[31032]: Failed password for invalid user m from 129.204.2.182 port 59137 ssh2
...
2020-01-04 17:32:57
113.167.175.242 attackspam
20/1/3@23:49:09: FAIL: Alarm-Network address from=113.167.175.242
20/1/3@23:49:10: FAIL: Alarm-Network address from=113.167.175.242
...
2020-01-04 17:32:41
180.248.122.147 attack
Honeypot attack, port: 445, PTR: PTR record not found
2020-01-04 17:30:26
62.165.30.221 attackspambots
Jan  4 04:17:42 debian sshd[27780]: Unable to negotiate with 62.165.30.221 port 32718: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
Jan  4 04:20:46 debian sshd[27902]: Unable to negotiate with 62.165.30.221 port 51711: no matching key exchange method found. Their offer: diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,diffie-hellman-group1-sha1 [preauth]
...
2020-01-04 17:35:11
45.77.186.161 attackbots
Jan  4 06:58:57 ws12vmsma01 sshd[31120]: Invalid user backuppc from 45.77.186.161
Jan  4 06:58:58 ws12vmsma01 sshd[31120]: Failed password for invalid user backuppc from 45.77.186.161 port 52994 ssh2
Jan  4 07:00:50 ws12vmsma01 sshd[31396]: Invalid user user from 45.77.186.161
...
2020-01-04 17:51:48
107.170.204.148 attackbots
Jan  4 04:30:55 onepro3 sshd[12351]: Failed password for invalid user vwm from 107.170.204.148 port 50130 ssh2
Jan  4 04:35:51 onepro3 sshd[12406]: Failed password for invalid user uisfs from 107.170.204.148 port 54478 ssh2
Jan  4 04:38:38 onepro3 sshd[12455]: Failed password for invalid user mannan from 107.170.204.148 port 55078 ssh2
2020-01-04 17:54:47
34.92.99.216 attackspam
Jan  4 09:03:29 mail sshd[1090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.92.99.216
Jan  4 09:03:32 mail sshd[1090]: Failed password for invalid user webmaster from 34.92.99.216 port 51282 ssh2
...
2020-01-04 18:07:11
177.25.217.69 attack
Jan  4 02:48:53 ws12vmsma01 sshd[61245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.25.217.69  user=root
Jan  4 02:48:55 ws12vmsma01 sshd[61245]: Failed password for root from 177.25.217.69 port 45775 ssh2
Jan  4 02:48:56 ws12vmsma01 sshd[61255]: Invalid user ubnt from 177.25.217.69
...
2020-01-04 17:27:01
177.137.230.166 attack
1578113315 - 01/04/2020 05:48:35 Host: 177.137.230.166/177.137.230.166 Port: 445 TCP Blocked
2020-01-04 17:55:14
185.176.27.118 attack
Jan  4 10:32:55 mc1 kernel: \[2289148.796741\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=29417 PROTO=TCP SPT=50222 DPT=51599 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  4 10:33:00 mc1 kernel: \[2289153.202145\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=39349 PROTO=TCP SPT=46752 DPT=37686 WINDOW=1024 RES=0x00 SYN URGP=0 
Jan  4 10:34:40 mc1 kernel: \[2289253.331162\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.118 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=7158 PROTO=TCP SPT=50222 DPT=13122 WINDOW=1024 RES=0x00 SYN URGP=0 
...
2020-01-04 17:37:31
88.247.82.8 attack
" "
2020-01-04 17:52:50
122.116.128.193 attack
Honeypot attack, port: 23, PTR: 122-116-128-193.HINET-IP.hinet.net.
2020-01-04 18:05:55
157.230.25.164 attack
SSH Scan
2020-01-04 17:22:30
78.94.94.122 attack
1578113326 - 01/04/2020 05:48:46 Host: 78.94.94.122/78.94.94.122 Port: 22 TCP Blocked
2020-01-04 17:51:17

Recently Reported IPs

1.10.252.78 14.175.244.151 5.139.211.204 188.131.172.142
1.0.170.14 125.164.98.59 46.221.46.2 103.82.209.189
101.102.9.79 181.13.32.186 180.245.153.21 246.94.123.3
77.222.101.10 242.53.221.49 138.108.113.112 182.16.161.167
58.178.112.53 209.174.197.100 89.161.47.213 173.36.55.124