Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Santa Clara

Region: California

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Dec 12 17:11:09 dallas01 sshd[32443]: Failed password for root from 138.68.242.43 port 58082 ssh2
Dec 12 17:16:40 dallas01 sshd[915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Dec 12 17:16:42 dallas01 sshd[915]: Failed password for invalid user chatten from 138.68.242.43 port 38414 ssh2
2020-01-28 02:41:30
attackbots
Dec 20 08:13:48 markkoudstaal sshd[24170]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Dec 20 08:13:51 markkoudstaal sshd[24170]: Failed password for invalid user dankert from 138.68.242.43 port 57040 ssh2
Dec 20 08:19:19 markkoudstaal sshd[25511]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
2019-12-20 16:08:20
attackbotsspam
$f2bV_matches
2019-12-16 07:51:49
attackbots
Dec  6 14:50:21 ms-srv sshd[46516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Dec  6 14:50:23 ms-srv sshd[46516]: Failed password for invalid user volumio from 138.68.242.43 port 32812 ssh2
2019-12-07 00:18:25
attackspambots
Dec  4 19:17:11 yesfletchmain sshd\[13247\]: User root from 138.68.242.43 not allowed because not listed in AllowUsers
Dec  4 19:17:12 yesfletchmain sshd\[13247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43  user=root
Dec  4 19:17:14 yesfletchmain sshd\[13247\]: Failed password for invalid user root from 138.68.242.43 port 48554 ssh2
Dec  4 19:25:07 yesfletchmain sshd\[13632\]: User root from 138.68.242.43 not allowed because not listed in AllowUsers
Dec  4 19:25:07 yesfletchmain sshd\[13632\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43  user=root
...
2019-12-05 06:34:04
attack
Dec  2 08:52:02 eventyay sshd[29565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Dec  2 08:52:04 eventyay sshd[29565]: Failed password for invalid user wwwadmin from 138.68.242.43 port 41116 ssh2
Dec  2 08:57:57 eventyay sshd[29918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
...
2019-12-02 16:06:59
attackbotsspam
Nov 25 08:58:11 cumulus sshd[23293]: Invalid user gorge from 138.68.242.43 port 37440
Nov 25 08:58:11 cumulus sshd[23293]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Nov 25 08:58:13 cumulus sshd[23293]: Failed password for invalid user gorge from 138.68.242.43 port 37440 ssh2
Nov 25 08:58:13 cumulus sshd[23293]: Received disconnect from 138.68.242.43 port 37440:11: Bye Bye [preauth]
Nov 25 08:58:13 cumulus sshd[23293]: Disconnected from 138.68.242.43 port 37440 [preauth]
Nov 25 09:26:34 cumulus sshd[24353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43  user=r.r
Nov 25 09:26:36 cumulus sshd[24353]: Failed password for r.r from 138.68.242.43 port 41096 ssh2
Nov 25 09:26:36 cumulus sshd[24353]: Received disconnect from 138.68.242.43 port 41096:11: Bye Bye [preauth]
Nov 25 09:26:36 cumulus sshd[24353]: Disconnected from 138.68.242.43 port 41096 [preauth]
Nov 2........
-------------------------------
2019-11-30 23:09:16
attackspam
2019-11-25T23:17:10.754731abusebot.cloudsearch.cf sshd\[19705\]: Invalid user rita from 138.68.242.43 port 47698
2019-11-26 07:33:37
attackbotsspam
Nov 25 20:52:35 www5 sshd\[14099\]: Invalid user nasair from 138.68.242.43
Nov 25 20:52:35 www5 sshd\[14099\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.43
Nov 25 20:52:37 www5 sshd\[14099\]: Failed password for invalid user nasair from 138.68.242.43 port 46200 ssh2
...
2019-11-26 03:09:44
Comments on same subnet:
IP Type Details Datetime
138.68.242.220 attackspambots
Jul 27 20:43:37 dev0-dcde-rnet sshd[8376]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Jul 27 20:43:39 dev0-dcde-rnet sshd[8376]: Failed password for invalid user esuser from 138.68.242.220 port 51282 ssh2
Jul 27 20:47:14 dev0-dcde-rnet sshd[8462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
2020-07-28 03:00:51
138.68.242.220 attackspambots
$f2bV_matches
2020-07-26 02:45:24
138.68.242.220 attackbotsspam
Jun 20 14:12:56 minden010 sshd[31141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Jun 20 14:12:57 minden010 sshd[31141]: Failed password for invalid user db2inst1 from 138.68.242.220 port 52626 ssh2
Jun 20 14:20:33 minden010 sshd[3064]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
...
2020-06-20 20:52:47
138.68.242.220 attack
Jun 18 17:04:16 web1 sshd[27169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
Jun 18 17:04:18 web1 sshd[27169]: Failed password for root from 138.68.242.220 port 36510 ssh2
Jun 18 17:14:52 web1 sshd[29939]: Invalid user fgj from 138.68.242.220 port 46636
Jun 18 17:14:52 web1 sshd[29939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Jun 18 17:14:52 web1 sshd[29939]: Invalid user fgj from 138.68.242.220 port 46636
Jun 18 17:14:53 web1 sshd[29939]: Failed password for invalid user fgj from 138.68.242.220 port 46636 ssh2
Jun 18 17:17:33 web1 sshd[30634]: Invalid user admin from 138.68.242.220 port 59880
Jun 18 17:17:33 web1 sshd[30634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Jun 18 17:17:33 web1 sshd[30634]: Invalid user admin from 138.68.242.220 port 59880
Jun 18 17:17:36 web1 sshd[30634]: Failed pas
...
2020-06-18 15:43:08
138.68.242.220 attackbots
Jun 13 05:10:14 jumpserver sshd[64866]: Failed password for invalid user trung from 138.68.242.220 port 59204 ssh2
Jun 13 05:13:32 jumpserver sshd[64950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
Jun 13 05:13:34 jumpserver sshd[64950]: Failed password for root from 138.68.242.220 port 33788 ssh2
...
2020-06-13 14:18:26
138.68.242.220 attackbots
May 28 19:38:38 zulu412 sshd\[8570\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
May 28 19:38:40 zulu412 sshd\[8570\]: Failed password for root from 138.68.242.220 port 47130 ssh2
May 28 19:46:24 zulu412 sshd\[9449\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
...
2020-05-29 03:56:48
138.68.242.220 attack
(sshd) Failed SSH login from 138.68.242.220 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: May 27 00:08:10 amsweb01 sshd[28183]: Invalid user office from 138.68.242.220 port 60876
May 27 00:08:13 amsweb01 sshd[28183]: Failed password for invalid user office from 138.68.242.220 port 60876 ssh2
May 27 00:22:50 amsweb01 sshd[2130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
May 27 00:22:52 amsweb01 sshd[2130]: Failed password for root from 138.68.242.220 port 48932 ssh2
May 27 00:26:42 amsweb01 sshd[2558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220  user=root
2020-05-27 06:49:06
138.68.242.220 attackspam
$f2bV_matches
2020-05-05 03:17:47
138.68.242.220 attackspam
*Port Scan* detected from 138.68.242.220 (US/United States/California/Santa Clara/-). 4 hits in the last 115 seconds
2020-05-01 05:20:33
138.68.242.220 attackspambots
Invalid user neha from 138.68.242.220 port 58868
2020-04-30 06:50:11
138.68.242.220 attackbots
Fail2Ban Ban Triggered
2020-04-28 17:55:47
138.68.242.220 attackbots
Apr 23 06:55:11 ns381471 sshd[10635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Apr 23 06:55:13 ns381471 sshd[10635]: Failed password for invalid user admin123 from 138.68.242.220 port 51752 ssh2
2020-04-23 13:12:01
138.68.242.220 attackspambots
sshd jail - ssh hack attempt
2020-04-06 19:54:43
138.68.242.220 attack
Mar 25 12:47:34 ip-172-31-62-245 sshd\[25810\]: Invalid user durer from 138.68.242.220\
Mar 25 12:47:36 ip-172-31-62-245 sshd\[25810\]: Failed password for invalid user durer from 138.68.242.220 port 50282 ssh2\
Mar 25 12:53:06 ip-172-31-62-245 sshd\[25884\]: Invalid user bu from 138.68.242.220\
Mar 25 12:53:08 ip-172-31-62-245 sshd\[25884\]: Failed password for invalid user bu from 138.68.242.220 port 33924 ssh2\
Mar 25 12:56:18 ip-172-31-62-245 sshd\[25930\]: Invalid user gerrit from 138.68.242.220\
2020-03-26 05:10:09
138.68.242.220 attackbots
Mar 13 13:44:15 SilenceServices sshd[2457]: Failed password for root from 138.68.242.220 port 46916 ssh2
Mar 13 13:47:15 SilenceServices sshd[29867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.242.220
Mar 13 13:47:18 SilenceServices sshd[29867]: Failed password for invalid user appimgr from 138.68.242.220 port 44158 ssh2
2020-03-13 23:36:31
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.242.43
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10770
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.242.43.			IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112501 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.136#53(100.100.2.136)
;; WHEN: Tue Nov 26 03:13:35 CST 2019
;; MSG SIZE  rcvd: 117

Host info
43.242.68.138.in-addr.arpa domain name pointer rihab.ribox.me.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
43.242.68.138.in-addr.arpa	name = rihab.ribox.me.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
61.8.69.98 attackspambots
Dec 19 00:40:03 tux-35-217 sshd\[7582\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.8.69.98  user=root
Dec 19 00:40:04 tux-35-217 sshd\[7582\]: Failed password for root from 61.8.69.98 port 39282 ssh2
Dec 19 00:46:14 tux-35-217 sshd\[7661\]: Invalid user alidown from 61.8.69.98 port 47880
Dec 19 00:46:14 tux-35-217 sshd\[7661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.8.69.98
...
2019-12-19 08:41:32
218.92.0.179 attack
Dec 19 01:39:04 vmd17057 sshd\[28176\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.179  user=root
Dec 19 01:39:06 vmd17057 sshd\[28176\]: Failed password for root from 218.92.0.179 port 36706 ssh2
Dec 19 01:39:09 vmd17057 sshd\[28176\]: Failed password for root from 218.92.0.179 port 36706 ssh2
...
2019-12-19 08:43:38
117.50.25.196 attackbots
Dec 19 00:41:15 vpn01 sshd[17646]: Failed password for root from 117.50.25.196 port 45350 ssh2
...
2019-12-19 08:54:59
94.191.47.240 attack
Dec 18 23:38:51 dedicated sshd[3194]: Invalid user bluedoor from 94.191.47.240 port 51996
2019-12-19 08:29:21
95.248.4.121 attackspambots
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:19 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:22 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:25 +0100] "POST /[munged]: HTTP/1.1" 401 8488 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:28 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:31 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 95.248.4.121 - - [18/Dec/2019:23:38:34 +0100] "POST /[munged]: HTTP/1.1" 401 8487 "-" "Mozilla/5.0 (X11; Ubuntu; Li
2019-12-19 08:34:40
162.247.74.201 attackbotsspam
Dec 19 00:42:55 vpn01 sshd[17726]: Failed password for root from 162.247.74.201 port 32836 ssh2
Dec 19 00:43:06 vpn01 sshd[17726]: Failed password for root from 162.247.74.201 port 32836 ssh2
...
2019-12-19 08:30:00
199.195.251.227 attackbotsspam
2019-12-19T01:41:12.167324centos sshd\[9147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.251.227  user=root
2019-12-19T01:41:14.709848centos sshd\[9147\]: Failed password for root from 199.195.251.227 port 52762 ssh2
2019-12-19T01:51:03.549854centos sshd\[9357\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.251.227  user=root
2019-12-19 09:02:23
51.75.30.199 attackspambots
$f2bV_matches
2019-12-19 08:32:06
206.81.7.42 attackbotsspam
Dec 19 01:40:44 meumeu sshd[28487]: Failed password for root from 206.81.7.42 port 39880 ssh2
Dec 19 01:46:15 meumeu sshd[29716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.81.7.42 
Dec 19 01:46:17 meumeu sshd[29716]: Failed password for invalid user blissett from 206.81.7.42 port 45692 ssh2
...
2019-12-19 08:56:02
51.158.100.169 attackspambots
Invalid user peyton from 51.158.100.169 port 58474
2019-12-19 08:28:37
49.231.201.242 attackbotsspam
Dec 18 19:40:33 ny01 sshd[25023]: Failed password for root from 49.231.201.242 port 36054 ssh2
Dec 18 19:46:48 ny01 sshd[25655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.201.242
Dec 18 19:46:50 ny01 sshd[25655]: Failed password for invalid user import from 49.231.201.242 port 39130 ssh2
2019-12-19 08:53:25
61.148.16.162 attack
Dec 19 02:56:11 server sshd\[23067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.16.162  user=root
Dec 19 02:56:13 server sshd\[23067\]: Failed password for root from 61.148.16.162 port 3342 ssh2
Dec 19 03:13:54 server sshd\[29234\]: Invalid user griffie from 61.148.16.162
Dec 19 03:13:54 server sshd\[29234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.148.16.162 
Dec 19 03:13:56 server sshd\[29234\]: Failed password for invalid user griffie from 61.148.16.162 port 3343 ssh2
...
2019-12-19 08:57:42
199.192.26.185 attackbots
Dec 19 01:11:01 ns381471 sshd[9215]: Failed password for root from 199.192.26.185 port 32946 ssh2
2019-12-19 08:52:07
115.223.34.141 attackspambots
Dec 18 14:35:16 php1 sshd\[14053\]: Invalid user gubbins from 115.223.34.141
Dec 18 14:35:16 php1 sshd\[14053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.223.34.141
Dec 18 14:35:19 php1 sshd\[14053\]: Failed password for invalid user gubbins from 115.223.34.141 port 64086 ssh2
Dec 18 14:40:31 php1 sshd\[14882\]: Invalid user turcia from 115.223.34.141
Dec 18 14:40:31 php1 sshd\[14882\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.223.34.141
2019-12-19 08:53:46
212.237.55.37 attackspambots
Dec 19 02:35:52 vtv3 sshd[2413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 02:35:54 vtv3 sshd[2413]: Failed password for invalid user dacia from 212.237.55.37 port 40652 ssh2
Dec 19 02:41:50 vtv3 sshd[4944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:05:20 vtv3 sshd[15982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:05:22 vtv3 sshd[15982]: Failed password for invalid user cbrunet from 212.237.55.37 port 50868 ssh2
Dec 19 03:11:46 vtv3 sshd[18758]: Failed password for backup from 212.237.55.37 port 57896 ssh2
Dec 19 03:24:18 vtv3 sshd[24256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.55.37 
Dec 19 03:24:20 vtv3 sshd[24256]: Failed password for invalid user admin from 212.237.55.37 port 43720 ssh2
Dec 19 03:30:34 vtv3 sshd[27983]: pam_unix(sshd:auth): au
2019-12-19 08:43:56

Recently Reported IPs

201.48.54.34 218.137.114.33 13.208.139.197 93.116.38.50
196.119.20.228 112.60.73.108 187.6.133.169 88.248.109.152
79.107.240.162 174.44.50.46 186.94.3.50 99.155.62.53
176.247.55.2 70.69.2.142 58.5.121.44 90.79.35.248
197.172.181.211 39.44.252.72 216.94.12.65 106.52.19.218