Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: DigitalOcean, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Mar  7 13:36:12 amit sshd\[11840\]: Invalid user zhangbo from 138.68.82.220
Mar  7 13:36:12 amit sshd\[11840\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Mar  7 13:36:14 amit sshd\[11840\]: Failed password for invalid user zhangbo from 138.68.82.220 port 52618 ssh2
...
2020-03-07 20:44:13
attack
Invalid user ajay from 138.68.82.220 port 55792
2020-01-21 22:04:40
attackbotsspam
Unauthorized connection attempt detected from IP address 138.68.82.220 to port 2220 [J]
2020-01-12 00:30:36
attackbotsspam
2020-01-03T06:04:34.971289shield sshd\[30100\]: Invalid user ci from 138.68.82.220 port 49274
2020-01-03T06:04:34.975432shield sshd\[30100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2020-01-03T06:04:36.969561shield sshd\[30100\]: Failed password for invalid user ci from 138.68.82.220 port 49274 ssh2
2020-01-03T06:07:22.646470shield sshd\[31396\]: Invalid user vpo from 138.68.82.220 port 49120
2020-01-03T06:07:22.650509shield sshd\[31396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2020-01-03 18:56:31
attackbotsspam
*Port Scan* detected from 138.68.82.220 (DE/Germany/-). 4 hits in the last 196 seconds
2019-12-26 00:46:26
attackspam
Dec 25 07:47:13 localhost sshd\[10052\]: Invalid user norberto from 138.68.82.220 port 42236
Dec 25 07:47:13 localhost sshd\[10052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec 25 07:47:15 localhost sshd\[10052\]: Failed password for invalid user norberto from 138.68.82.220 port 42236 ssh2
2019-12-25 17:05:41
attack
Dec 25 06:41:11 localhost sshd\[3138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Dec 25 06:41:12 localhost sshd\[3138\]: Failed password for root from 138.68.82.220 port 38050 ssh2
Dec 25 06:43:39 localhost sshd\[3349\]: Invalid user  from 138.68.82.220 port 34946
2019-12-25 13:57:10
attackbotsspam
2019-12-18T07:38:04.532571scmdmz1 sshd[32609]: Invalid user card from 138.68.82.220 port 37240
2019-12-18T07:38:04.535071scmdmz1 sshd[32609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2019-12-18T07:38:04.532571scmdmz1 sshd[32609]: Invalid user card from 138.68.82.220 port 37240
2019-12-18T07:38:06.688383scmdmz1 sshd[32609]: Failed password for invalid user card from 138.68.82.220 port 37240 ssh2
2019-12-18T07:43:13.163624scmdmz1 sshd[640]: Invalid user biyangka from 138.68.82.220 port 45230
...
2019-12-18 14:48:41
attack
Dec 16 11:51:52 herz-der-gamer sshd[6517]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=mysql
Dec 16 11:51:54 herz-der-gamer sshd[6517]: Failed password for mysql from 138.68.82.220 port 41888 ssh2
...
2019-12-16 21:35:50
attack
Dec 15 10:07:45 markkoudstaal sshd[32069]: Failed password for root from 138.68.82.220 port 49690 ssh2
Dec 15 10:13:14 markkoudstaal sshd[457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec 15 10:13:16 markkoudstaal sshd[457]: Failed password for invalid user dovecot from 138.68.82.220 port 58050 ssh2
2019-12-15 17:16:48
attack
Dec 12 00:42:55 tux-35-217 sshd\[1396\]: Invalid user natan from 138.68.82.220 port 33366
Dec 12 00:42:55 tux-35-217 sshd\[1396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec 12 00:42:57 tux-35-217 sshd\[1396\]: Failed password for invalid user natan from 138.68.82.220 port 33366 ssh2
Dec 12 00:48:11 tux-35-217 sshd\[1440\]: Invalid user lacramioara from 138.68.82.220 port 41110
Dec 12 00:48:11 tux-35-217 sshd\[1440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
...
2019-12-12 08:17:34
attackbotsspam
Dec  6 19:23:41 ns3042688 sshd\[32062\]: Invalid user robert12345 from 138.68.82.220
Dec  6 19:23:41 ns3042688 sshd\[32062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220 
Dec  6 19:23:42 ns3042688 sshd\[32062\]: Failed password for invalid user robert12345 from 138.68.82.220 port 58832 ssh2
Dec  6 19:28:43 ns3042688 sshd\[1594\]: Invalid user caroline from 138.68.82.220
Dec  6 19:28:43 ns3042688 sshd\[1594\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220 
...
2019-12-07 02:34:00
attack
Dec  4 06:10:06 ny01 sshd[20687]: Failed password for root from 138.68.82.220 port 40692 ssh2
Dec  4 06:15:49 ny01 sshd[21268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec  4 06:15:51 ny01 sshd[21268]: Failed password for invalid user ssh from 138.68.82.220 port 51048 ssh2
2019-12-05 01:23:45
attackbotsspam
Dec  4 05:53:23 ny01 sshd[18360]: Failed password for bin from 138.68.82.220 port 37870 ssh2
Dec  4 05:58:56 ny01 sshd[19439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec  4 05:58:58 ny01 sshd[19439]: Failed password for invalid user watanapong from 138.68.82.220 port 48216 ssh2
2019-12-04 19:14:05
attackbotsspam
Dec  3 05:27:19 php1 sshd\[4440\]: Invalid user russon from 138.68.82.220
Dec  3 05:27:19 php1 sshd\[4440\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec  3 05:27:21 php1 sshd\[4440\]: Failed password for invalid user russon from 138.68.82.220 port 59422 ssh2
Dec  3 05:33:00 php1 sshd\[5155\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=games
Dec  3 05:33:02 php1 sshd\[5155\]: Failed password for games from 138.68.82.220 port 42184 ssh2
2019-12-03 23:34:40
attackspambots
Dec  2 11:25:17 legacy sshd[16379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Dec  2 11:25:20 legacy sshd[16379]: Failed password for invalid user wwwrun from 138.68.82.220 port 54746 ssh2
Dec  2 11:30:59 legacy sshd[16670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
...
2019-12-02 18:47:52
attack
Nov 27 20:05:17 firewall sshd[17466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Nov 27 20:05:17 firewall sshd[17466]: Invalid user juanne from 138.68.82.220
Nov 27 20:05:18 firewall sshd[17466]: Failed password for invalid user juanne from 138.68.82.220 port 36744 ssh2
...
2019-11-28 07:18:05
attack
Nov 17 08:50:50 vps691689 sshd[29266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Nov 17 08:50:52 vps691689 sshd[29266]: Failed password for invalid user linuxxg from 138.68.82.220 port 43608 ssh2
Nov 17 08:54:31 vps691689 sshd[29306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
...
2019-11-17 15:58:24
attack
Nov  5 17:28:22 server sshd\[6317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Nov  5 17:28:23 server sshd\[6317\]: Failed password for root from 138.68.82.220 port 42722 ssh2
Nov  5 17:31:54 server sshd\[7301\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Nov  5 17:31:56 server sshd\[7301\]: Failed password for root from 138.68.82.220 port 53758 ssh2
Nov  5 17:35:24 server sshd\[8309\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
...
2019-11-06 02:57:26
attack
Oct 31 14:05:29 bouncer sshd\[2108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Oct 31 14:05:31 bouncer sshd\[2108\]: Failed password for root from 138.68.82.220 port 48762 ssh2
Oct 31 14:09:23 bouncer sshd\[2140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
...
2019-10-31 22:57:31
attackspambots
Oct 29 16:42:43 ovpn sshd\[3928\]: Invalid user cisco from 138.68.82.220
Oct 29 16:42:43 ovpn sshd\[3928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Oct 29 16:42:45 ovpn sshd\[3928\]: Failed password for invalid user cisco from 138.68.82.220 port 38798 ssh2
Oct 29 16:47:22 ovpn sshd\[4819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Oct 29 16:47:24 ovpn sshd\[4819\]: Failed password for root from 138.68.82.220 port 56134 ssh2
2019-10-30 02:43:03
attackspambots
Oct 28 06:00:10 www5 sshd\[25739\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Oct 28 06:00:12 www5 sshd\[25739\]: Failed password for root from 138.68.82.220 port 48118 ssh2
Oct 28 06:03:43 www5 sshd\[26764\]: Invalid user team-speak from 138.68.82.220
...
2019-10-28 18:37:57
attackbots
Invalid user sjs from 138.68.82.220 port 35882
2019-10-24 23:07:03
attackbotsspam
Oct 15 16:01:19 ovpn sshd\[19752\]: Invalid user peter from 138.68.82.220
Oct 15 16:01:19 ovpn sshd\[19752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Oct 15 16:01:21 ovpn sshd\[19752\]: Failed password for invalid user peter from 138.68.82.220 port 50250 ssh2
Oct 15 16:10:01 ovpn sshd\[21380\]: Invalid user admin from 138.68.82.220
Oct 15 16:10:01 ovpn sshd\[21380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2019-10-15 22:48:20
attackspam
Oct 12 04:10:07 hpm sshd\[3962\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Oct 12 04:10:09 hpm sshd\[3962\]: Failed password for root from 138.68.82.220 port 36888 ssh2
Oct 12 04:13:57 hpm sshd\[4287\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
Oct 12 04:13:59 hpm sshd\[4287\]: Failed password for root from 138.68.82.220 port 47340 ssh2
Oct 12 04:17:42 hpm sshd\[4618\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220  user=root
2019-10-12 22:21:03
attack
Invalid user michi from 138.68.82.220 port 58014
2019-10-05 15:39:09
attack
2019-09-27T23:16:40.588991abusebot-2.cloudsearch.cf sshd\[30105\]: Invalid user asgbrasil from 138.68.82.220 port 40908
2019-09-28 07:44:27
attackspambots
Sep 26 06:41:24 php1 sshd\[4905\]: Invalid user uq from 138.68.82.220
Sep 26 06:41:24 php1 sshd\[4905\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Sep 26 06:41:26 php1 sshd\[4905\]: Failed password for invalid user uq from 138.68.82.220 port 32868 ssh2
Sep 26 06:45:38 php1 sshd\[5282\]: Invalid user 1qaz@wsx from 138.68.82.220
Sep 26 06:45:38 php1 sshd\[5282\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2019-09-27 00:53:42
attack
Sep 23 19:53:01 aiointranet sshd\[8387\]: Invalid user luanda from 138.68.82.220
Sep 23 19:53:01 aiointranet sshd\[8387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
Sep 23 19:53:03 aiointranet sshd\[8387\]: Failed password for invalid user luanda from 138.68.82.220 port 58428 ssh2
Sep 23 19:57:06 aiointranet sshd\[8720\]: Invalid user apache from 138.68.82.220
Sep 23 19:57:06 aiointranet sshd\[8720\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.220
2019-09-24 13:58:53
attackspambots
2019-09-11T13:23:01.616421abusebot.cloudsearch.cf sshd\[4630\]: Invalid user myftp from 138.68.82.220 port 49912
2019-09-11 21:41:29
Comments on same subnet:
IP Type Details Datetime
138.68.82.194 attack
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2020-09-16T12:20:50Z and 2020-09-16T12:20:50Z
2020-09-16 20:33:42
138.68.82.194 attackbotsspam
Sep 16 04:56:25 web8 sshd\[16225\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194  user=root
Sep 16 04:56:27 web8 sshd\[16225\]: Failed password for root from 138.68.82.194 port 54932 ssh2
Sep 16 05:00:11 web8 sshd\[18295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194  user=root
Sep 16 05:00:14 web8 sshd\[18295\]: Failed password for root from 138.68.82.194 port 37234 ssh2
Sep 16 05:04:03 web8 sshd\[20191\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194  user=root
2020-09-16 13:04:45
138.68.82.194 attackspambots
2020-09-15T23:16:41.136042paragon sshd[75316]: Failed password for invalid user brummund from 138.68.82.194 port 53564 ssh2
2020-09-15T23:20:40.296506paragon sshd[75388]: Invalid user admin from 138.68.82.194 port 37522
2020-09-15T23:20:40.299872paragon sshd[75388]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-09-15T23:20:40.296506paragon sshd[75388]: Invalid user admin from 138.68.82.194 port 37522
2020-09-15T23:20:42.158239paragon sshd[75388]: Failed password for invalid user admin from 138.68.82.194 port 37522 ssh2
...
2020-09-16 04:50:32
138.68.82.194 attackspambots
2020-08-27T20:17:26.965724shield sshd\[7628\]: Invalid user akash from 138.68.82.194 port 35312
2020-08-27T20:17:26.977828shield sshd\[7628\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-08-27T20:17:28.995907shield sshd\[7628\]: Failed password for invalid user akash from 138.68.82.194 port 35312 ssh2
2020-08-27T20:20:51.626896shield sshd\[8119\]: Invalid user otrs from 138.68.82.194 port 41004
2020-08-27T20:20:51.648087shield sshd\[8119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-08-28 04:21:57
138.68.82.194 attackspam
Aug 26 08:07:51 vps647732 sshd[10070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
Aug 26 08:07:53 vps647732 sshd[10070]: Failed password for invalid user waldo from 138.68.82.194 port 57980 ssh2
...
2020-08-26 15:25:52
138.68.82.194 attack
Aug 25 12:27:43 localhost sshd\[16968\]: Invalid user europe from 138.68.82.194 port 55438
Aug 25 12:27:43 localhost sshd\[16968\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
Aug 25 12:27:45 localhost sshd\[16968\]: Failed password for invalid user europe from 138.68.82.194 port 55438 ssh2
...
2020-08-25 23:07:59
138.68.82.194 attackspam
2020-08-23T03:51:44.791064dmca.cloudsearch.cf sshd[20157]: Invalid user system from 138.68.82.194 port 50696
2020-08-23T03:51:44.797850dmca.cloudsearch.cf sshd[20157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-08-23T03:51:44.791064dmca.cloudsearch.cf sshd[20157]: Invalid user system from 138.68.82.194 port 50696
2020-08-23T03:51:46.789892dmca.cloudsearch.cf sshd[20157]: Failed password for invalid user system from 138.68.82.194 port 50696 ssh2
2020-08-23T03:55:45.187329dmca.cloudsearch.cf sshd[20225]: Invalid user test from 138.68.82.194 port 57116
2020-08-23T03:55:45.193508dmca.cloudsearch.cf sshd[20225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-08-23T03:55:45.187329dmca.cloudsearch.cf sshd[20225]: Invalid user test from 138.68.82.194 port 57116
2020-08-23T03:55:47.606623dmca.cloudsearch.cf sshd[20225]: Failed password for invalid user test from 138.68.82.
...
2020-08-23 12:08:43
138.68.82.194 attackbotsspam
Aug 21 00:51:59 meumeu sshd[25226]: Invalid user xk from 138.68.82.194 port 39876
Aug 21 00:51:59 meumeu sshd[25226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 
Aug 21 00:51:59 meumeu sshd[25226]: Invalid user xk from 138.68.82.194 port 39876
Aug 21 00:52:01 meumeu sshd[25226]: Failed password for invalid user xk from 138.68.82.194 port 39876 ssh2
Aug 21 00:54:41 meumeu sshd[25430]: Invalid user ubuntu from 138.68.82.194 port 57410
Aug 21 00:54:41 meumeu sshd[25430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 
Aug 21 00:54:41 meumeu sshd[25430]: Invalid user ubuntu from 138.68.82.194 port 57410
Aug 21 00:54:44 meumeu sshd[25430]: Failed password for invalid user ubuntu from 138.68.82.194 port 57410 ssh2
Aug 21 00:57:25 meumeu sshd[25526]: Invalid user admin from 138.68.82.194 port 46716
...
2020-08-21 07:11:08
138.68.82.194 attackbotsspam
Aug 20 09:23:32 srv-ubuntu-dev3 sshd[80720]: Invalid user redmine from 138.68.82.194
Aug 20 09:23:32 srv-ubuntu-dev3 sshd[80720]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
Aug 20 09:23:32 srv-ubuntu-dev3 sshd[80720]: Invalid user redmine from 138.68.82.194
Aug 20 09:23:34 srv-ubuntu-dev3 sshd[80720]: Failed password for invalid user redmine from 138.68.82.194 port 57240 ssh2
Aug 20 09:27:03 srv-ubuntu-dev3 sshd[81117]: Invalid user dev from 138.68.82.194
Aug 20 09:27:03 srv-ubuntu-dev3 sshd[81117]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
Aug 20 09:27:03 srv-ubuntu-dev3 sshd[81117]: Invalid user dev from 138.68.82.194
Aug 20 09:27:06 srv-ubuntu-dev3 sshd[81117]: Failed password for invalid user dev from 138.68.82.194 port 32880 ssh2
Aug 20 09:30:26 srv-ubuntu-dev3 sshd[81568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138
...
2020-08-20 15:42:38
138.68.82.194 attackbots
Failed password for root from 138.68.82.194 port 34636 ssh2
2020-08-09 08:09:06
138.68.82.194 attackbots
Too many connections or unauthorized access detected from Arctic banned ip
2020-08-07 07:49:14
138.68.82.194 attack
Aug  3 22:30:52 sshgateway sshd\[1875\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194  user=root
Aug  3 22:30:54 sshgateway sshd\[1875\]: Failed password for root from 138.68.82.194 port 34182 ssh2
Aug  3 22:35:27 sshgateway sshd\[1950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194  user=root
2020-08-04 06:27:21
138.68.82.194 attack
2020-07-27T23:03:40.049918abusebot-8.cloudsearch.cf sshd[15147]: Invalid user janisc from 138.68.82.194 port 35458
2020-07-27T23:03:40.056753abusebot-8.cloudsearch.cf sshd[15147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-07-27T23:03:40.049918abusebot-8.cloudsearch.cf sshd[15147]: Invalid user janisc from 138.68.82.194 port 35458
2020-07-27T23:03:41.659075abusebot-8.cloudsearch.cf sshd[15147]: Failed password for invalid user janisc from 138.68.82.194 port 35458 ssh2
2020-07-27T23:08:18.792875abusebot-8.cloudsearch.cf sshd[15216]: Invalid user wftuser from 138.68.82.194 port 46838
2020-07-27T23:08:18.801120abusebot-8.cloudsearch.cf sshd[15216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-07-27T23:08:18.792875abusebot-8.cloudsearch.cf sshd[15216]: Invalid user wftuser from 138.68.82.194 port 46838
2020-07-27T23:08:21.236261abusebot-8.cloudsearch.cf sshd[15216]:
...
2020-07-28 07:16:32
138.68.82.194 attack
2020-07-18T22:02:54.514112vps1033 sshd[3813]: Invalid user csczserver from 138.68.82.194 port 58076
2020-07-18T22:02:54.516992vps1033 sshd[3813]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194
2020-07-18T22:02:54.514112vps1033 sshd[3813]: Invalid user csczserver from 138.68.82.194 port 58076
2020-07-18T22:02:56.651141vps1033 sshd[3813]: Failed password for invalid user csczserver from 138.68.82.194 port 58076 ssh2
2020-07-18T22:06:59.835376vps1033 sshd[12466]: Invalid user design from 138.68.82.194 port 44352
...
2020-07-19 07:40:56
138.68.82.194 attackspam
Jul 18 12:55:39 vps-51d81928 sshd[55031]: Invalid user jti from 138.68.82.194 port 46482
Jul 18 12:55:39 vps-51d81928 sshd[55031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.82.194 
Jul 18 12:55:39 vps-51d81928 sshd[55031]: Invalid user jti from 138.68.82.194 port 46482
Jul 18 12:55:40 vps-51d81928 sshd[55031]: Failed password for invalid user jti from 138.68.82.194 port 46482 ssh2
Jul 18 12:57:26 vps-51d81928 sshd[55041]: Invalid user mingus from 138.68.82.194 port 46816
...
2020-07-19 01:08:14
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.82.220
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46267
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.82.220.			IN	A

;; AUTHORITY SECTION:
.			1056	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040700 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sun Apr 07 20:10:17 +08 2019
;; MSG SIZE  rcvd: 117

Host info
Host 220.82.68.138.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 220.82.68.138.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
145.239.239.83 attackbotsspam
(sshd) Failed SSH login from 145.239.239.83 (FR/France/ip83.ip-145-239-239.eu): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 28 12:06:26 andromeda sshd[21156]: Invalid user demo from 145.239.239.83 port 46180
Apr 28 12:06:28 andromeda sshd[21156]: Failed password for invalid user demo from 145.239.239.83 port 46180 ssh2
Apr 28 12:15:01 andromeda sshd[21576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=145.239.239.83  user=root
2020-04-28 20:41:30
91.205.128.170 attackbots
SSH Brute-Force Attack
2020-04-28 20:21:36
142.93.53.214 attack
Apr 28 08:44:01 NPSTNNYC01T sshd[29310]: Failed password for root from 142.93.53.214 port 40566 ssh2
Apr 28 08:48:28 NPSTNNYC01T sshd[29763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.53.214
Apr 28 08:48:30 NPSTNNYC01T sshd[29763]: Failed password for invalid user gituser from 142.93.53.214 port 52862 ssh2
...
2020-04-28 21:17:47
103.70.204.194 attackbotsspam
proto=tcp  .  spt=59459  .  dpt=25  .     Listed on    MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru     (275)
2020-04-28 20:21:19
118.172.8.209 attackspambots
Unauthorized connection attempt from IP address 118.172.8.209 on Port 445(SMB)
2020-04-28 20:39:32
82.80.57.162 attackspam
scan z
2020-04-28 20:18:48
77.40.2.104 attackspambots
proto=tcp  .  spt=19565  .  dpt=25  .     Found on   Blocklist de       (274)
2020-04-28 20:43:44
176.102.51.163 attackspam
04/28/2020-08:15:08.098827 176.102.51.163 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-04-28 20:35:04
177.15.87.9 attackbotsspam
Unauthorized connection attempt from IP address 177.15.87.9 on Port 445(SMB)
2020-04-28 20:34:43
5.34.131.72 attack
Apr 28 14:30:18 nextcloud sshd\[7733\]: Invalid user student10 from 5.34.131.72
Apr 28 14:30:18 nextcloud sshd\[7733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.34.131.72
Apr 28 14:30:20 nextcloud sshd\[7733\]: Failed password for invalid user student10 from 5.34.131.72 port 60956 ssh2
2020-04-28 20:58:05
46.149.94.96 attackspambots
Unauthorized connection attempt from IP address 46.149.94.96 on Port 445(SMB)
2020-04-28 20:19:32
114.84.181.220 attackspam
Apr 28 15:15:19 ift sshd\[52038\]: Invalid user oozie from 114.84.181.220Apr 28 15:15:21 ift sshd\[52038\]: Failed password for invalid user oozie from 114.84.181.220 port 50891 ssh2Apr 28 15:18:09 ift sshd\[52531\]: Invalid user centos from 114.84.181.220Apr 28 15:18:11 ift sshd\[52531\]: Failed password for invalid user centos from 114.84.181.220 port 41840 ssh2Apr 28 15:21:09 ift sshd\[52970\]: Failed password for root from 114.84.181.220 port 32798 ssh2
...
2020-04-28 20:47:14
186.116.147.59 attackspambots
Honeypot attack, port: 5555, PTR: PTR record not found
2020-04-28 20:42:58
128.199.143.19 attackspam
Apr 28 15:08:31 server sshd[22823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.143.19
Apr 28 15:08:34 server sshd[22823]: Failed password for invalid user jt from 128.199.143.19 port 54650 ssh2
Apr 28 15:13:51 server sshd[23667]: Failed password for root from 128.199.143.19 port 38620 ssh2
...
2020-04-28 21:18:35
49.234.212.177 attack
Apr 28 14:20:49 pve1 sshd[4560]: Failed password for root from 49.234.212.177 port 40348 ssh2
...
2020-04-28 20:28:23

Recently Reported IPs

45.55.176.173 14.243.83.69 181.30.26.40 192.144.185.175
185.229.243.109 132.232.116.82 14.226.104.97 132.232.104.106
179.184.161.53 77.234.46.201 132.145.155.184 139.193.10.30
221.3.68.187 117.97.248.28 121.184.64.15 83.219.136.101
200.42.255.162 178.187.245.38 132.232.88.200 114.244.163.234