Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
138.68.21.125 attackspam
(sshd) Failed SSH login from 138.68.21.125 (US/United States/-): 5 in the last 3600 secs
2020-10-13 01:48:43
138.68.21.125 attackbots
Connection to SSH Honeypot - Detected by HoneypotDB
2020-10-12 17:12:21
138.68.21.125 attackspambots
Oct 10 14:12:04 mellenthin sshd[24260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125  user=root
Oct 10 14:12:06 mellenthin sshd[24260]: Failed password for invalid user root from 138.68.21.125 port 59036 ssh2
2020-10-10 21:39:49
138.68.21.125 attackbotsspam
SSH login attempts.
2020-10-01 05:18:06
138.68.21.125 attackbots
Sep 30 00:44:05 sip sshd[1771970]: Invalid user testuser1 from 138.68.21.125 port 37546
Sep 30 00:44:07 sip sshd[1771970]: Failed password for invalid user testuser1 from 138.68.21.125 port 37546 ssh2
Sep 30 00:46:29 sip sshd[1771979]: Invalid user user2 from 138.68.21.125 port 45384
...
2020-09-30 21:34:28
138.68.21.125 attackspam
Sep 30 00:44:05 sip sshd[1771970]: Invalid user testuser1 from 138.68.21.125 port 37546
Sep 30 00:44:07 sip sshd[1771970]: Failed password for invalid user testuser1 from 138.68.21.125 port 37546 ssh2
Sep 30 00:46:29 sip sshd[1771979]: Invalid user user2 from 138.68.21.125 port 45384
...
2020-09-30 14:05:48
138.68.21.125 attack
Sep  7 10:44:00 [host] sshd[27947]: pam_unix(sshd:
Sep  7 10:44:02 [host] sshd[27947]: Failed passwor
Sep  7 10:48:05 [host] sshd[28065]: pam_unix(sshd:
2020-09-08 02:02:35
138.68.21.125 attack
Sep  7 10:44:00 [host] sshd[27947]: pam_unix(sshd:
Sep  7 10:44:02 [host] sshd[27947]: Failed passwor
Sep  7 10:48:05 [host] sshd[28065]: pam_unix(sshd:
2020-09-07 17:27:51
138.68.21.125 attackspam
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:58 MainVPS sshd[24608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Sep  5 17:14:58 MainVPS sshd[24608]: Invalid user web from 138.68.21.125 port 53064
Sep  5 17:14:59 MainVPS sshd[24608]: Failed password for invalid user web from 138.68.21.125 port 53064 ssh2
Sep  5 17:22:30 MainVPS sshd[32625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125  user=root
Sep  5 17:22:32 MainVPS sshd[32625]: Failed password for root from 138.68.21.125 port 57294 ssh2
...
2020-09-06 00:23:27
138.68.21.125 attackspam
Sep  5 09:41:31 eventyay sshd[6232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Sep  5 09:41:33 eventyay sshd[6232]: Failed password for invalid user chan from 138.68.21.125 port 57746 ssh2
Sep  5 09:45:46 eventyay sshd[6302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
...
2020-09-05 15:54:09
138.68.21.125 attackspambots
2020-09-04T01:46:15.592998correo.[domain] sshd[33728]: Invalid user wangxu from 138.68.21.125 port 49354 2020-09-04T01:46:18.140171correo.[domain] sshd[33728]: Failed password for invalid user wangxu from 138.68.21.125 port 49354 ssh2 2020-09-04T01:51:05.205025correo.[domain] sshd[34199]: Invalid user fast from 138.68.21.125 port 55028 ...
2020-09-05 08:31:13
138.68.21.125 attackbots
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: Invalid user itc from 138.68.21.125
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Aug 19 23:05:51 srv-ubuntu-dev3 sshd[94835]: Invalid user itc from 138.68.21.125
Aug 19 23:05:53 srv-ubuntu-dev3 sshd[94835]: Failed password for invalid user itc from 138.68.21.125 port 53710 ssh2
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: Invalid user stp from 138.68.21.125
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Aug 19 23:10:42 srv-ubuntu-dev3 sshd[95400]: Invalid user stp from 138.68.21.125
Aug 19 23:10:44 srv-ubuntu-dev3 sshd[95400]: Failed password for invalid user stp from 138.68.21.125 port 34366 ssh2
Aug 19 23:15:29 srv-ubuntu-dev3 sshd[96045]: Invalid user odoo from 138.68.21.125
...
2020-08-20 06:27:37
138.68.21.125 attackspam
Aug 19 08:05:46 eventyay sshd[979]: Failed password for root from 138.68.21.125 port 52196 ssh2
Aug 19 08:10:10 eventyay sshd[1092]: Failed password for root from 138.68.21.125 port 33466 ssh2
Aug 19 08:14:33 eventyay sshd[1251]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
...
2020-08-19 17:12:07
138.68.21.125 attack
Aug  5 14:19:05 ajax sshd[13363]: Failed password for root from 138.68.21.125 port 53556 ssh2
2020-08-05 21:27:02
138.68.21.125 attackspam
Jul 27 12:00:19 sso sshd[17366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.21.125
Jul 27 12:00:21 sso sshd[17366]: Failed password for invalid user customerservice from 138.68.21.125 port 49594 ssh2
...
2020-07-27 19:04:57
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.21.181
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25469
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.68.21.181.			IN	A

;; AUTHORITY SECTION:
.			473	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:58:20 CST 2022
;; MSG SIZE  rcvd: 106
Host info
181.21.68.138.in-addr.arpa domain name pointer imageneratecentral.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
181.21.68.138.in-addr.arpa	name = imageneratecentral.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
175.6.77.131 attackbotsspam
2020-04-21T05:03:12.882018abusebot-5.cloudsearch.cf sshd[28119]: Invalid user bp from 175.6.77.131 port 49798
2020-04-21T05:03:12.887771abusebot-5.cloudsearch.cf sshd[28119]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.77.131
2020-04-21T05:03:12.882018abusebot-5.cloudsearch.cf sshd[28119]: Invalid user bp from 175.6.77.131 port 49798
2020-04-21T05:03:14.862462abusebot-5.cloudsearch.cf sshd[28119]: Failed password for invalid user bp from 175.6.77.131 port 49798 ssh2
2020-04-21T05:09:46.304883abusebot-5.cloudsearch.cf sshd[28209]: Invalid user admin from 175.6.77.131 port 32890
2020-04-21T05:09:46.317558abusebot-5.cloudsearch.cf sshd[28209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.6.77.131
2020-04-21T05:09:46.304883abusebot-5.cloudsearch.cf sshd[28209]: Invalid user admin from 175.6.77.131 port 32890
2020-04-21T05:09:47.715213abusebot-5.cloudsearch.cf sshd[28209]: Failed password for in
...
2020-04-21 15:30:43
200.240.238.150 attackspambots
Automatic report - Port Scan
2020-04-21 15:11:21
223.241.247.214 attackspam
$f2bV_matches
2020-04-21 15:20:31
24.55.185.28 attackspambots
Automatic report - Port Scan Attack
2020-04-21 15:00:43
49.247.198.97 attackbots
leo_www
2020-04-21 14:59:19
180.166.141.58 attack
Apr 21 09:08:01 debian-2gb-nbg1-2 kernel: \[9711840.799041\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=180.166.141.58 DST=195.201.40.59 LEN=40 TOS=0x08 PREC=0x00 TTL=237 ID=13558 PROTO=TCP SPT=50029 DPT=65394 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-21 15:16:08
78.188.35.167 attackbotsspam
Unauthorised access (Apr 21) SRC=78.188.35.167 LEN=52 TTL=117 ID=4157 DF TCP DPT=1433 WINDOW=8192 SYN
2020-04-21 15:29:27
150.95.31.150 attackspambots
Invalid user test from 150.95.31.150 port 60732
2020-04-21 15:39:37
194.26.29.210 attackbotsspam
Apr 21 09:04:21 debian-2gb-nbg1-2 kernel: \[9711620.469777\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.210 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=24127 PROTO=TCP SPT=51805 DPT=21912 WINDOW=1024 RES=0x00 SYN URGP=0
2020-04-21 15:17:18
189.210.19.195 attack
Port scanning
2020-04-21 15:15:34
69.94.131.49 attackbots
Apr 21 05:45:55 web01.agentur-b-2.de postfix/smtpd[1808934]: NOQUEUE: reject: RCPT from unknown[69.94.131.49]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 21 05:45:55 web01.agentur-b-2.de postfix/smtpd[1805329]: NOQUEUE: reject: RCPT from unknown[69.94.131.49]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 21 05:45:55 web01.agentur-b-2.de postfix/smtpd[1809140]: NOQUEUE: reject: RCPT from unknown[69.94.131.49]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Apr 21 05:45:55 web01.agentur-b-2.de postfix/smtpd[1809222]: NOQUEUE: reject: RCPT from unknown[69.94.131.49]: 450 4.7.1 
2020-04-21 15:07:24
185.50.149.24 attackbots
2020-04-21T07:37:09.063477l03.customhost.org.uk postfix/smtps/smtpd[8998]: warning: unknown[185.50.149.24]: SASL LOGIN authentication failed: authentication failure
2020-04-21T07:37:12.753004l03.customhost.org.uk postfix/smtps/smtpd[8998]: warning: unknown[185.50.149.24]: SASL LOGIN authentication failed: authentication failure
2020-04-21T07:42:46.245100l03.customhost.org.uk postfix/smtps/smtpd[10104]: warning: unknown[185.50.149.24]: SASL LOGIN authentication failed: authentication failure
2020-04-21T07:42:49.537255l03.customhost.org.uk postfix/smtps/smtpd[10104]: warning: unknown[185.50.149.24]: SASL LOGIN authentication failed: authentication failure
...
2020-04-21 15:02:31
202.77.105.110 attackspam
(sshd) Failed SSH login from 202.77.105.110 (ID/Indonesia/-): 5 in the last 3600 secs
2020-04-21 15:12:13
167.99.99.10 attackspam
Invalid user ftpuser from 167.99.99.10 port 34442
2020-04-21 15:36:34
217.112.142.170 attackbots
Apr 21 05:44:17 mail.srvfarm.net postfix/smtpd[2595686]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 21 05:45:09 mail.srvfarm.net postfix/smtpd[2596604]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 21 05:49:42 mail.srvfarm.net postfix/smtpd[2595256]: NOQUEUE: reject: RCPT from unknown[217.112.142.170]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo=
Apr 21 05:49:54 mail.srvfarm.net postfix/smtpd[2595256]: NOQUEUE: reject: RCPT from unknown[217.112
2020-04-21 15:01:10

Recently Reported IPs

138.68.223.40 138.68.210.49 138.68.225.133 138.68.224.200
138.68.227.165 138.68.23.250 138.68.226.187 138.68.228.126
138.68.231.19 138.68.23.93 138.68.23.150 138.68.232.91
138.68.236.255 138.68.235.89 138.68.238.73 138.68.237.56
138.68.241.159 138.68.240.87 138.68.243.102 138.68.243.64