City: Frankfurt am Main
Region: Hessen
Country: Germany
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 138.68.0.0 - 138.68.255.255
CIDR: 138.68.0.0/16
NetName: DIGITALOCEAN-138-68-0-0
NetHandle: NET-138-68-0-0-1
Parent: NET138 (NET-138-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: DigitalOcean, LLC (DO-13)
RegDate: 2016-01-26
Updated: 2025-03-01
Comment: Routing and Peering Policy can be found at https://www.as14061.net
Comment:
Comment: Please submit abuse reports at https://www.digitalocean.com/company/contact/#abuse
Ref: https://rdap.arin.net/registry/ip/138.68.0.0
OrgName: DigitalOcean, LLC
OrgId: DO-13
Address: 105 Edgeview Drive, Suite 425
City: Broomfield
StateProv: CO
PostalCode: 80021
Country: US
RegDate: 2012-05-14
Updated: 2025-04-11
Ref: https://rdap.arin.net/registry/entity/DO-13
OrgTechHandle: NOC32014-ARIN
OrgTechName: Network Operations Center
OrgTechPhone: +1-646-827-4366
OrgTechEmail: noc@digitalocean.com
OrgTechRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
OrgAbuseHandle: DIGIT19-ARIN
OrgAbuseName: DigitalOcean Abuse
OrgAbusePhone: +1-646-827-4366
OrgAbuseEmail: abuse@digitalocean.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/DIGIT19-ARIN
OrgNOCHandle: NOC32014-ARIN
OrgNOCName: Network Operations Center
OrgNOCPhone: +1-646-827-4366
OrgNOCEmail: noc@digitalocean.com
OrgNOCRef: https://rdap.arin.net/registry/entity/NOC32014-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.76.25
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48275
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;138.68.76.25. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026040902 1800 900 604800 86400
;; Query time: 7 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 10 14:00:12 CST 2026
;; MSG SIZE rcvd: 105Host 25.76.68.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 25.76.68.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 190.117.62.241 | attackspambots | Dec 18 02:00:10 mail sshd[27260]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.117.62.241 Dec 18 02:00:11 mail sshd[27260]: Failed password for invalid user ouyang from 190.117.62.241 port 49354 ssh2 Dec 18 02:06:38 mail sshd[28336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.117.62.241 |
2019-12-18 09:20:55 |
| 211.195.117.212 | attackbotsspam | Dec 17 18:52:54 eddieflores sshd\[30833\]: Invalid user jrgalindo from 211.195.117.212 Dec 17 18:52:54 eddieflores sshd\[30833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.117.212 Dec 17 18:52:56 eddieflores sshd\[30833\]: Failed password for invalid user jrgalindo from 211.195.117.212 port 41762 ssh2 Dec 17 18:59:01 eddieflores sshd\[31480\]: Invalid user wallache from 211.195.117.212 Dec 17 18:59:01 eddieflores sshd\[31480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.117.212 |
2019-12-18 13:01:30 |
| 218.92.0.158 | attack | Dec 18 06:09:24 ks10 sshd[14367]: Failed password for root from 218.92.0.158 port 33594 ssh2 Dec 18 06:09:28 ks10 sshd[14367]: Failed password for root from 218.92.0.158 port 33594 ssh2 ... |
2019-12-18 13:12:50 |
| 103.107.101.39 | attackbotsspam | 103.107.101.39 - - [17/Dec/2019:17:24:22 -0500] "GET /?page=products&manufacturerID=36&collectionID=268136999999.1%20union%20select%20unhex(hex(version()))%20--%20and%201%3D1 HTTP/1.1" 200 88761 "-" "-" ... |
2019-12-18 09:29:49 |
| 74.75.169.109 | attackspambots | Dec 18 00:21:26 hni-server sshd[20692]: Invalid user admin from 74.75.169.109 Dec 18 00:21:26 hni-server sshd[20692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=74.75.169.109 Dec 18 00:21:28 hni-server sshd[20692]: Failed password for invalid user admin from 74.75.169.109 port 33188 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=74.75.169.109 |
2019-12-18 09:17:35 |
| 189.112.109.189 | attack | Dec 18 00:38:19 vmd38886 sshd\[31848\]: Invalid user hausken from 189.112.109.189 port 42772 Dec 18 00:38:19 vmd38886 sshd\[31848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.112.109.189 Dec 18 00:38:21 vmd38886 sshd\[31848\]: Failed password for invalid user hausken from 189.112.109.189 port 42772 ssh2 |
2019-12-18 09:29:19 |
| 49.232.37.191 | attackbots | Dec 18 02:28:07 loxhost sshd\[29431\]: Invalid user folashade from 49.232.37.191 port 47660 Dec 18 02:28:07 loxhost sshd\[29431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.37.191 Dec 18 02:28:08 loxhost sshd\[29431\]: Failed password for invalid user folashade from 49.232.37.191 port 47660 ssh2 Dec 18 02:34:25 loxhost sshd\[29618\]: Invalid user fay from 49.232.37.191 port 42462 Dec 18 02:34:25 loxhost sshd\[29618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.37.191 ... |
2019-12-18 09:37:32 |
| 201.13.47.80 | attack | Unauthorized connection attempt detected from IP address 201.13.47.80 to port 8080 |
2019-12-18 09:33:33 |
| 149.56.110.112 | attack | Dec 18 05:58:44 vpn01 sshd[3816]: Failed password for root from 149.56.110.112 port 55874 ssh2 Dec 18 05:58:58 vpn01 sshd[3816]: error: maximum authentication attempts exceeded for root from 149.56.110.112 port 55874 ssh2 [preauth] ... |
2019-12-18 13:05:57 |
| 106.13.140.52 | attackspambots | Dec 18 00:52:50 hcbbdb sshd\[2254\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.52 user=root Dec 18 00:52:52 hcbbdb sshd\[2254\]: Failed password for root from 106.13.140.52 port 40016 ssh2 Dec 18 00:59:13 hcbbdb sshd\[3205\]: Invalid user burrowes from 106.13.140.52 Dec 18 00:59:13 hcbbdb sshd\[3205\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.140.52 Dec 18 00:59:15 hcbbdb sshd\[3205\]: Failed password for invalid user burrowes from 106.13.140.52 port 42984 ssh2 |
2019-12-18 09:14:34 |
| 138.68.111.27 | attack | Dec 17 20:12:23 plusreed sshd[23327]: Invalid user poq from 138.68.111.27 ... |
2019-12-18 09:13:25 |
| 183.12.242.51 | attack | serveres are UTC -0500 Lines containing failures of 183.12.242.51 Dec 16 17:38:05 tux2 sshd[28770]: Failed password for r.r from 183.12.242.51 port 49414 ssh2 Dec 16 17:38:05 tux2 sshd[28770]: Received disconnect from 183.12.242.51 port 49414:11: Bye Bye [preauth] Dec 16 17:38:05 tux2 sshd[28770]: Disconnected from authenticating user r.r 183.12.242.51 port 49414 [preauth] Dec 16 17:42:36 tux2 sshd[29009]: Failed password for r.r from 183.12.242.51 port 51088 ssh2 Dec 16 17:42:37 tux2 sshd[29009]: Received disconnect from 183.12.242.51 port 51088:11: Bye Bye [preauth] Dec 16 17:42:37 tux2 sshd[29009]: Disconnected from authenticating user r.r 183.12.242.51 port 51088 [preauth] Dec 16 17:53:10 tux2 sshd[29590]: Invalid user stevef from 183.12.242.51 port 52820 Dec 16 17:53:10 tux2 sshd[29590]: Failed password for invalid user stevef from 183.12.242.51 port 52820 ssh2 Dec 16 17:53:10 tux2 sshd[29590]: Received disconnect from 183.12.242.51 port 52820:11: Bye Bye [preauth] ........ ------------------------------ |
2019-12-18 09:25:32 |
| 36.80.48.9 | attackbots | Dec 18 02:01:10 lnxweb61 sshd[24901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.80.48.9 |
2019-12-18 09:15:24 |
| 218.94.140.106 | attackspambots | Oct 13 03:50:22 vtv3 sshd[12073]: Failed password for root from 218.94.140.106 port 2055 ssh2 Oct 13 03:54:28 vtv3 sshd[13688]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.140.106 user=root Nov 16 12:49:34 vtv3 sshd[9401]: Invalid user qk from 218.94.140.106 port 2244 Nov 16 12:49:34 vtv3 sshd[9401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.140.106 Nov 16 12:49:36 vtv3 sshd[9401]: Failed password for invalid user qk from 218.94.140.106 port 2244 ssh2 Nov 16 12:53:53 vtv3 sshd[10587]: Invalid user sianna from 218.94.140.106 port 2245 Nov 16 12:53:53 vtv3 sshd[10587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.140.106 Nov 16 13:20:22 vtv3 sshd[17613]: Invalid user teruzzi from 218.94.140.106 port 2251 Nov 16 13:20:22 vtv3 sshd[17613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.94.140.106 Nov 16 13:20:24 vtv3 |
2019-12-18 09:37:52 |
| 104.200.110.210 | attack | (sshd) Failed SSH login from 104.200.110.210 (-): 5 in the last 3600 secs |
2019-12-18 09:23:01 |