Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hessen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.68.111.205 attackspam
Scanning
2020-09-22 00:49:38
138.68.111.205 attack
Scanning
2020-09-21 16:30:37
138.68.111.27 attack
Feb 25 15:47:59 haigwepa sshd[19456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Feb 25 15:48:01 haigwepa sshd[19456]: Failed password for invalid user dongtingting from 138.68.111.27 port 13766 ssh2
...
2020-02-25 23:17:23
138.68.111.27 attackspambots
Feb 18 13:26:06 XXXXXX sshd[13177]: Invalid user ocadmin from 138.68.111.27 port 54554
2020-02-19 03:39:18
138.68.111.27 attack
Feb  8 15:03:38 hpm sshd\[20714\]: Invalid user lge from 138.68.111.27
Feb  8 15:03:38 hpm sshd\[20714\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
Feb  8 15:03:40 hpm sshd\[20714\]: Failed password for invalid user lge from 138.68.111.27 port 37716 ssh2
Feb  8 15:06:15 hpm sshd\[21041\]: Invalid user ris from 138.68.111.27
Feb  8 15:06:15 hpm sshd\[21041\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=semako-01.weplay.space
2020-02-09 09:22:32
138.68.111.27 attackbots
Unauthorized connection attempt detected from IP address 138.68.111.27 to port 2220 [J]
2020-02-03 04:32:02
138.68.111.27 attackspambots
<6 unauthorized SSH connections
2020-01-31 16:10:44
138.68.111.27 attackspam
Dec 31 23:17:22 dallas01 sshd[4352]: Failed password for invalid user yoyo from 138.68.111.27 port 19976 ssh2
Dec 31 23:19:56 dallas01 sshd[5947]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Dec 31 23:19:58 dallas01 sshd[5947]: Failed password for invalid user kave from 138.68.111.27 port 48116 ssh2
Dec 31 23:22:24 dallas01 sshd[7650]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
2020-01-28 05:23:02
138.68.111.27 attackbots
Jan 22 06:12:58 pi sshd[18309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Jan 22 06:13:00 pi sshd[18309]: Failed password for invalid user nikita from 138.68.111.27 port 34038 ssh2
2020-01-26 06:24:21
138.68.111.27 attackbotsspam
Unauthorized connection attempt detected from IP address 138.68.111.27 to port 2220 [J]
2020-01-23 22:20:44
138.68.111.27 attackspambots
Dec 28 14:17:02 ws12vmsma01 sshd[34869]: Invalid user admin from 138.68.111.27
Dec 28 14:17:04 ws12vmsma01 sshd[34869]: Failed password for invalid user admin from 138.68.111.27 port 42882 ssh2
Dec 28 14:19:25 ws12vmsma01 sshd[35186]: Invalid user yakin from 138.68.111.27
...
2019-12-29 05:06:47
138.68.111.27 attackspam
Dec 22 12:48:21 areeb-Workstation sshd[24656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27 
Dec 22 12:48:23 areeb-Workstation sshd[24656]: Failed password for invalid user server from 138.68.111.27 port 53212 ssh2
...
2019-12-22 15:28:07
138.68.111.27 attack
Dec 17 20:12:23 plusreed sshd[23327]: Invalid user poq from 138.68.111.27
...
2019-12-18 09:13:25
138.68.111.27 attack
Dec 16 18:06:58 l02a sshd[14860]: Invalid user brongel from 138.68.111.27
Dec 16 18:07:00 l02a sshd[14860]: Failed password for invalid user brongel from 138.68.111.27 port 50990 ssh2
Dec 16 18:06:58 l02a sshd[14860]: Invalid user brongel from 138.68.111.27
Dec 16 18:07:00 l02a sshd[14860]: Failed password for invalid user brongel from 138.68.111.27 port 50990 ssh2
2019-12-17 02:41:38
138.68.111.27 attackbotsspam
Dec 15 16:22:11 [host] sshd[19900]: Invalid user admin from 138.68.111.27
Dec 15 16:22:11 [host] sshd[19900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.111.27
Dec 15 16:22:14 [host] sshd[19900]: Failed password for invalid user admin from 138.68.111.27 port 39482 ssh2
2019-12-16 01:39:38
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.111.40
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61031
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.111.40.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025052500 1800 900 604800 86400

;; Query time: 52 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 25 22:31:38 CST 2025
;; MSG SIZE  rcvd: 106
Host info
Host 40.111.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 40.111.68.138.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
200.123.119.163 attackbots
Invalid user user3 from 200.123.119.163 port 65336
2020-05-20 14:56:14
140.143.189.177 attackspambots
May 20 07:29:26 prox sshd[17433]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.189.177 
May 20 07:29:28 prox sshd[17433]: Failed password for invalid user qji from 140.143.189.177 port 59916 ssh2
2020-05-20 14:55:09
175.24.19.155 attackspambots
May 20 06:50:31 cloud sshd[18203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.24.19.155 
May 20 06:50:33 cloud sshd[18203]: Failed password for invalid user xlt from 175.24.19.155 port 53554 ssh2
2020-05-20 14:22:23
106.75.50.225 attackspam
Port scan denied
2020-05-20 14:49:35
149.202.80.208 attack
149.202.80.208 - - \[20/May/2020:03:12:54 +0200\] "GET /\?author=7 HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:68.0\) Gecko/20100101 Firefox/68.0"
149.202.80.208 - - \[20/May/2020:03:12:54 +0200\] "GET /\?author=8 HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:68.0\) Gecko/20100101 Firefox/68.0"
149.202.80.208 - - \[20/May/2020:03:12:54 +0200\] "GET /\?author=9 HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:68.0\) Gecko/20100101 Firefox/68.0"
149.202.80.208 - - \[20/May/2020:03:12:55 +0200\] "GET /\?author=10 HTTP/1.1" 404 123 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\; rv:68.0\) Gecko/20100101 Firefox/68.0"
...
2020-05-20 14:38:39
54.37.13.107 attackspam
2020-05-20T08:30:50.178676sd-86998 sshd[43010]: Invalid user gdftp from 54.37.13.107 port 33488
2020-05-20T08:30:50.180977sd-86998 sshd[43010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns9.hoffmeisterdv.de
2020-05-20T08:30:50.178676sd-86998 sshd[43010]: Invalid user gdftp from 54.37.13.107 port 33488
2020-05-20T08:30:52.561161sd-86998 sshd[43010]: Failed password for invalid user gdftp from 54.37.13.107 port 33488 ssh2
2020-05-20T08:34:40.313524sd-86998 sshd[44007]: Invalid user rxr from 54.37.13.107 port 39784
...
2020-05-20 14:50:05
75.109.22.58 attackspambots
May 20 02:30:48 b2b-pharm sshd[10611]: Did not receive identification string from 75.109.22.58 port 62777
May 20 02:30:51 b2b-pharm sshd[10612]: Invalid user user1 from 75.109.22.58 port 63223
May 20 02:30:51 b2b-pharm sshd[10612]: Invalid user user1 from 75.109.22.58 port 63223


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=75.109.22.58
2020-05-20 14:54:19
148.101.15.185 attack
May 20 08:16:14 abendstille sshd\[6802\]: Invalid user gsd from 148.101.15.185
May 20 08:16:14 abendstille sshd\[6802\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.15.185
May 20 08:16:17 abendstille sshd\[6802\]: Failed password for invalid user gsd from 148.101.15.185 port 53964 ssh2
May 20 08:17:44 abendstille sshd\[8331\]: Invalid user euj from 148.101.15.185
May 20 08:17:44 abendstille sshd\[8331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.101.15.185
...
2020-05-20 14:42:29
145.239.33.213 attackspambots
Invalid user asc from 145.239.33.213 port 33772
2020-05-20 14:45:56
187.162.51.63 attackbotsspam
SSH auth scanning - multiple failed logins
2020-05-20 14:28:16
42.81.122.86 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-05-20 14:18:08
5.196.75.47 attackbots
$f2bV_matches
2020-05-20 14:27:49
27.223.50.36 attackspambots
Unauthorized connection attempt detected from IP address 27.223.50.36 to port 23 [T]
2020-05-20 14:20:51
34.78.211.173 attack
Unauthorized connection attempt detected from IP address 34.78.211.173 to port 3689 [T]
2020-05-20 14:20:28
59.56.238.79 attack
SpamScore above: 10.0
2020-05-20 14:54:41

Recently Reported IPs

138.68.96.190 233.187.126.159 168.149.189.57 0.215.0.199
188.166.158.169 90.88.25.63 60.2.81.202 214.5.65.88
250.57.254.77 242.160.91.44 172.234.217.192 199.234.4.11
244.192.115.32 20.169.107.249 227.146.58.135 255.165.27.229
142.67.88.98 4.48.51.12 8.138.174.181 74.249.178.154