Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Feb 25 15:47:59 haigwepa sshd[19456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Feb 25 15:48:01 haigwepa sshd[19456]: Failed password for invalid user dongtingting from 138.68.111.27 port 13766 ssh2
...
2020-02-25 23:17:23
attackspambots
Feb 18 13:26:06 XXXXXX sshd[13177]: Invalid user ocadmin from 138.68.111.27 port 54554
2020-02-19 03:39:18
attack
Feb  8 15:03:38 hpm sshd\[20714\]: Invalid user lge from 138.68.111.27
Feb  8 15:03:38 hpm sshd\[20714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
Feb  8 15:03:40 hpm sshd\[20714\]: Failed password for invalid user lge from 138.68.111.27 port 37716 ssh2
Feb  8 15:06:15 hpm sshd\[21041\]: Invalid user ris from 138.68.111.27
Feb  8 15:06:15 hpm sshd\[21041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
2020-02-09 09:22:32
attackbots
Unauthorized connection attempt detected from IP address 138.68.111.27 to port 2220 [J]
2020-02-03 04:32:02
attackspambots
<6 unauthorized SSH connections
2020-01-31 16:10:44
attackspam
Dec 31 23:17:22 dallas01 sshd[4352]: Failed password for invalid user yoyo from 138.68.111.27 port 19976 ssh2
Dec 31 23:19:56 dallas01 sshd[5947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Dec 31 23:19:58 dallas01 sshd[5947]: Failed password for invalid user kave from 138.68.111.27 port 48116 ssh2
Dec 31 23:22:24 dallas01 sshd[7650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
2020-01-28 05:23:02
attackbots
Jan 22 06:12:58 pi sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Jan 22 06:13:00 pi sshd[18309]: Failed password for invalid user nikita from 138.68.111.27 port 34038 ssh2
2020-01-26 06:24:21
attackbotsspam
Unauthorized connection attempt detected from IP address 138.68.111.27 to port 2220 [J]
2020-01-23 22:20:44
attackspambots
Dec 28 14:17:02 ws12vmsma01 sshd[34869]: Invalid user admin from 138.68.111.27
Dec 28 14:17:04 ws12vmsma01 sshd[34869]: Failed password for invalid user admin from 138.68.111.27 port 42882 ssh2
Dec 28 14:19:25 ws12vmsma01 sshd[35186]: Invalid user yakin from 138.68.111.27
...
2019-12-29 05:06:47
attackspam
Dec 22 12:48:21 areeb-Workstation sshd[24656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Dec 22 12:48:23 areeb-Workstation sshd[24656]: Failed password for invalid user server from 138.68.111.27 port 53212 ssh2
...
2019-12-22 15:28:07
attack
Dec 17 20:12:23 plusreed sshd[23327]: Invalid user poq from 138.68.111.27
...
2019-12-18 09:13:25
attack
Dec 16 18:06:58 l02a sshd[14860]: Invalid user brongel from 138.68.111.27
Dec 16 18:07:00 l02a sshd[14860]: Failed password for invalid user brongel from 138.68.111.27 port 50990 ssh2
Dec 16 18:06:58 l02a sshd[14860]: Invalid user brongel from 138.68.111.27
Dec 16 18:07:00 l02a sshd[14860]: Failed password for invalid user brongel from 138.68.111.27 port 50990 ssh2
2019-12-17 02:41:38
attackbotsspam
Dec 15 16:22:11 [host] sshd[19900]: Invalid user admin from 138.68.111.27
Dec 15 16:22:11 [host] sshd[19900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Dec 15 16:22:14 [host] sshd[19900]: Failed password for invalid user admin from 138.68.111.27 port 39482 ssh2
2019-12-16 01:39:38
attackspam
Aug 26 04:48:06 vtv3 sshd[9977]: Invalid user gww from 138.68.111.27 port 59464
Aug 26 04:48:06 vtv3 sshd[9977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Aug 26 04:48:09 vtv3 sshd[9977]: Failed password for invalid user gww from 138.68.111.27 port 59464 ssh2
Aug 26 04:52:06 vtv3 sshd[12044]: Invalid user 1qaz2wsx from 138.68.111.27 port 50196
Aug 26 04:52:06 vtv3 sshd[12044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Aug 26 05:03:50 vtv3 sshd[17645]: Invalid user omn from 138.68.111.27 port 22136
Aug 26 05:03:50 vtv3 sshd[17645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Aug 26 05:03:52 vtv3 sshd[17645]: Failed password for invalid user omn from 138.68.111.27 port 22136 ssh2
Aug 26 05:07:46 vtv3 sshd[19675]: Invalid user asdfg1234 from 138.68.111.27 port 12886
Aug 26 05:07:46 vtv3 sshd[19675]: pam_unix(sshd:auth): authentication fa
2019-12-14 06:54:53
attackbotsspam
Dec 12 15:37:36 MK-Soft-VM3 sshd[20693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Dec 12 15:37:37 MK-Soft-VM3 sshd[20693]: Failed password for invalid user mazlack from 138.68.111.27 port 28942 ssh2
...
2019-12-13 02:29:34
attack
Nov  9 17:14:13 zulu412 sshd\[19051\]: Invalid user dumbo from 138.68.111.27 port 51228
Nov  9 17:14:13 zulu412 sshd\[19051\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Nov  9 17:14:15 zulu412 sshd\[19051\]: Failed password for invalid user dumbo from 138.68.111.27 port 51228 ssh2
...
2019-11-10 05:34:41
attackspam
Nov  3 15:46:18 game-panel sshd[22799]: Failed password for root from 138.68.111.27 port 17292 ssh2
Nov  3 15:50:11 game-panel sshd[22908]: Failed password for root from 138.68.111.27 port 56280 ssh2
Nov  3 15:54:03 game-panel sshd[23048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
2019-11-04 01:31:40
attack
Sep 19 19:14:23 lcdev sshd\[29353\]: Invalid user abcd from 138.68.111.27
Sep 19 19:14:23 lcdev sshd\[29353\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
Sep 19 19:14:25 lcdev sshd\[29353\]: Failed password for invalid user abcd from 138.68.111.27 port 21156 ssh2
Sep 19 19:18:37 lcdev sshd\[29745\]: Invalid user qwerty from 138.68.111.27
Sep 19 19:18:37 lcdev sshd\[29745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
2019-09-20 13:55:00
attackbotsspam
Sep 11 07:18:20 itv-usvr-01 sshd[4258]: Invalid user weblogic from 138.68.111.27
Sep 11 07:18:20 itv-usvr-01 sshd[4258]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Sep 11 07:18:20 itv-usvr-01 sshd[4258]: Invalid user weblogic from 138.68.111.27
Sep 11 07:18:22 itv-usvr-01 sshd[4258]: Failed password for invalid user weblogic from 138.68.111.27 port 52376 ssh2
Sep 11 07:23:29 itv-usvr-01 sshd[4464]: Invalid user tomcat from 138.68.111.27
2019-09-16 15:28:38
attack
Automated report - ssh fail2ban:
Sep 10 03:18:38 authentication failure 
Sep 10 03:18:40 wrong password, user=sinusbot, port=30630, ssh2
Sep 10 03:23:57 wrong password, user=www-data, port=36522, ssh2
2019-09-10 09:27:51
attackspambots
Sep  3 10:10:47 sachi sshd\[1195\]: Invalid user lucy from 138.68.111.27
Sep  3 10:10:47 sachi sshd\[1195\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
Sep  3 10:10:49 sachi sshd\[1195\]: Failed password for invalid user lucy from 138.68.111.27 port 50380 ssh2
Sep  3 10:14:59 sachi sshd\[1581\]: Invalid user nadia from 138.68.111.27
Sep  3 10:14:59 sachi sshd\[1581\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
2019-09-04 08:12:29
attack
Aug 30 01:23:02 debian sshd\[28115\]: Invalid user cp from 138.68.111.27 port 41136
Aug 30 01:23:02 debian sshd\[28115\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
...
2019-08-30 12:23:35
attackbotsspam
Aug 17 08:26:38 ny01 sshd[27312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Aug 17 08:26:40 ny01 sshd[27312]: Failed password for invalid user haldaemon from 138.68.111.27 port 9092 ssh2
Aug 17 08:30:48 ny01 sshd[27707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
2019-08-17 20:43:03
attack
Aug 16 01:17:58 microserver sshd[52256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27  user=root
Aug 16 01:18:00 microserver sshd[52256]: Failed password for root from 138.68.111.27 port 54712 ssh2
Aug 16 01:22:07 microserver sshd[52924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27  user=mail
Aug 16 01:22:08 microserver sshd[52924]: Failed password for mail from 138.68.111.27 port 46370 ssh2
Aug 16 01:26:11 microserver sshd[53554]: Invalid user choi from 138.68.111.27 port 38032
Aug 16 01:38:22 microserver sshd[55714]: Invalid user landscape from 138.68.111.27 port 13006
Aug 16 01:38:22 microserver sshd[55714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Aug 16 01:38:23 microserver sshd[55714]: Failed password for invalid user landscape from 138.68.111.27 port 13006 ssh2
Aug 16 01:42:30 microserver sshd[56363]: Invalid user client from 138
2019-08-16 08:05:09
attackspam
(sshd) Failed SSH login from 138.68.111.27 (semako-01.weplay.space): 5 in the last 3600 secs
2019-08-05 08:09:26
attackbotsspam
'Fail2Ban'
2019-07-26 01:28:25
attack
Jul 24 23:21:50 aat-srv002 sshd[11026]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Jul 24 23:21:52 aat-srv002 sshd[11026]: Failed password for invalid user flower from 138.68.111.27 port 50010 ssh2
Jul 24 23:26:11 aat-srv002 sshd[11213]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Jul 24 23:26:12 aat-srv002 sshd[11213]: Failed password for invalid user smbuser from 138.68.111.27 port 45132 ssh2
...
2019-07-25 12:27:55
attackbots
2019-07-15T19:03:38.829613abusebot-3.cloudsearch.cf sshd\[614\]: Invalid user marie from 138.68.111.27 port 29066
2019-07-16 03:07:42
attackspambots
2019-07-15T12:38:54.562061abusebot-3.cloudsearch.cf sshd\[30998\]: Invalid user eric from 138.68.111.27 port 31074
2019-07-15 21:06:34
attackbotsspam
Jul 15 06:53:22 localhost sshd\[850\]: Invalid user eli from 138.68.111.27 port 33886
Jul 15 06:53:22 localhost sshd\[850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Jul 15 06:53:24 localhost sshd\[850\]: Failed password for invalid user eli from 138.68.111.27 port 33886 ssh2
2019-07-15 12:55:04
Comments on same subnet:
IP Type Details Datetime
138.68.111.205 attackspam
Scanning
2020-09-22 00:49:38
138.68.111.205 attack
Scanning
2020-09-21 16:30:37
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.111.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55285
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.111.27.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033102 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 01 15:23:06 +08 2019
;; MSG SIZE  rcvd: 117

Host info
27.111.68.138.in-addr.arpa domain name pointer semako-01.weplay.space.
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
27.111.68.138.in-addr.arpa	name = semako-01.weplay.space.

Authoritative answers can be found from:

Related IP info:
Related comments:
IP Type Details Datetime
106.12.192.10 attackspambots
Jun 17 07:17:31 vps687878 sshd\[22703\]: Failed password for invalid user arash from 106.12.192.10 port 37444 ssh2
Jun 17 07:21:53 vps687878 sshd\[23144\]: Invalid user cok from 106.12.192.10 port 58098
Jun 17 07:21:53 vps687878 sshd\[23144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.10
Jun 17 07:21:55 vps687878 sshd\[23144\]: Failed password for invalid user cok from 106.12.192.10 port 58098 ssh2
Jun 17 07:26:21 vps687878 sshd\[23606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.192.10  user=root
...
2020-06-17 18:13:45
180.76.114.61 attackspam
Invalid user ard from 180.76.114.61 port 41572
2020-06-17 18:02:12
113.160.129.28 attack
DATE:2020-06-17 05:49:55, IP:113.160.129.28, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)
2020-06-17 18:14:08
218.92.0.145 attack
Jun 17 11:28:32 home sshd[30536]: Failed password for root from 218.92.0.145 port 29593 ssh2
Jun 17 11:28:46 home sshd[30536]: Failed password for root from 218.92.0.145 port 29593 ssh2
Jun 17 11:28:46 home sshd[30536]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 29593 ssh2 [preauth]
...
2020-06-17 17:43:00
216.244.66.229 attackbotsspam
20 attempts against mh-misbehave-ban on pluto
2020-06-17 17:49:49
36.79.249.54 attackspambots
Automatic report - XMLRPC Attack
2020-06-17 18:21:00
114.67.123.3 attackspambots
Jun 17 05:50:09 mailserver sshd\[29072\]: Invalid user test1 from 114.67.123.3
...
2020-06-17 17:47:45
69.94.158.120 attackbots
Jun 17 05:24:07 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:51 web01.agentur-b-2.de postfix/smtpd[560626]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:27:58 web01.agentur-b-2.de postfix/smtpd[562233]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 17 05:28:11 web01.agentur-b-2.de postfix/smtpd[560625]: NOQUEUE: reject: RCPT from unknown[69.94.158.120]: 45
2020-06-17 17:59:33
167.71.146.220 attackbotsspam
Invalid user samba from 167.71.146.220 port 58742
2020-06-17 18:19:44
159.203.30.50 attack
Jun 17 11:23:20 vmd17057 sshd[28109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.30.50 
Jun 17 11:23:22 vmd17057 sshd[28109]: Failed password for invalid user webapps from 159.203.30.50 port 53880 ssh2
...
2020-06-17 17:43:34
106.12.184.202 attack
...
2020-06-17 17:51:43
159.203.6.38 attackbots
2020-06-17T06:50:18.923185server.espacesoutien.com sshd[27727]: Failed password for invalid user lpi from 159.203.6.38 port 39694 ssh2
2020-06-17T06:53:59.728708server.espacesoutien.com sshd[27959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.6.38  user=root
2020-06-17T06:54:02.488626server.espacesoutien.com sshd[27959]: Failed password for root from 159.203.6.38 port 41346 ssh2
2020-06-17T06:57:50.560710server.espacesoutien.com sshd[28501]: Invalid user lidio from 159.203.6.38 port 42990
...
2020-06-17 17:42:01
84.217.0.86 attackspambots
Jun 16 23:19:41 php1 sshd\[15962\]: Invalid user arvind from 84.217.0.86
Jun 16 23:19:41 php1 sshd\[15962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.217.0.86
Jun 16 23:19:43 php1 sshd\[15962\]: Failed password for invalid user arvind from 84.217.0.86 port 38488 ssh2
Jun 16 23:23:03 php1 sshd\[16197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.217.0.86  user=root
Jun 16 23:23:05 php1 sshd\[16197\]: Failed password for root from 84.217.0.86 port 57636 ssh2
2020-06-17 17:39:37
49.235.244.115 attack
Tried sshing with brute force.
2020-06-17 17:50:51
208.97.137.131 attack
Jun 17 05:04:21 mail.srvfarm.net postfix/submission/smtpd[774182]: lost connection after CONNECT from unknown[208.97.137.131]
Jun 17 05:04:41 mail.srvfarm.net postfix/submission/smtpd[774273]: lost connection after CONNECT from unknown[208.97.137.131]
Jun 17 05:08:44 mail.srvfarm.net postfix/submission/smtpd[774635]: lost connection after CONNECT from unknown[208.97.137.131]
Jun 17 05:12:48 mail.srvfarm.net postfix/submission/smtpd[774182]: lost connection after CONNECT from ds12351.dreamservers.com[208.97.137.131]
Jun 17 05:13:48 mail.srvfarm.net postfix/submission/smtpd[775610]: lost connection after CONNECT from unknown[208.97.137.131]
2020-06-17 17:56:13

Recently Reported IPs

176.102.167.7 132.232.169.146 58.242.83.34 103.76.251.178
115.159.207.210 41.196.0.189 203.69.59.198 193.194.87.77
148.101.211.195 108.162.139.190 186.72.171.51 95.218.136.3
91.121.7.107 205.201.130.198 217.61.20.19 217.58.44.5
216.218.206.103 200.233.231.142 181.14.234.180 198.108.67.39