City: Frankfurt am Main
Region: Hesse
Country: Germany
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | Aug 26 22:11:45 plex-server sshd[29143]: Invalid user user002 from 138.68.92.121 port 35582 Aug 26 22:11:45 plex-server sshd[29143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Aug 26 22:11:45 plex-server sshd[29143]: Invalid user user002 from 138.68.92.121 port 35582 Aug 26 22:11:48 plex-server sshd[29143]: Failed password for invalid user user002 from 138.68.92.121 port 35582 ssh2 Aug 26 22:16:21 plex-server sshd[31017]: Invalid user suzuki from 138.68.92.121 port 42144 ... |
2020-08-27 06:50:31 |
| attack | SSH |
2020-08-25 19:32:48 |
| attackspambots | 2020-08-21T22:11:33.927124vps-d63064a2 sshd[94599]: Invalid user vyos from 138.68.92.121 port 59382 2020-08-21T22:11:35.972764vps-d63064a2 sshd[94599]: Failed password for invalid user vyos from 138.68.92.121 port 59382 ssh2 2020-08-21T22:14:36.914118vps-d63064a2 sshd[94630]: Invalid user traffic from 138.68.92.121 port 42438 2020-08-21T22:14:36.923048vps-d63064a2 sshd[94630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 2020-08-21T22:14:36.914118vps-d63064a2 sshd[94630]: Invalid user traffic from 138.68.92.121 port 42438 2020-08-21T22:14:39.415418vps-d63064a2 sshd[94630]: Failed password for invalid user traffic from 138.68.92.121 port 42438 ssh2 ... |
2020-08-22 06:30:54 |
| attack | malicious Brute-Force reported by https://www.patrick-binder.de ... |
2020-08-14 14:04:24 |
| attack | Aug 13 02:04:46 server sshd[2378]: Failed password for root from 138.68.92.121 port 49314 ssh2 Aug 13 02:19:08 server sshd[21222]: Failed password for root from 138.68.92.121 port 36234 ssh2 Aug 13 02:24:46 server sshd[29079]: Failed password for root from 138.68.92.121 port 46652 ssh2 |
2020-08-13 09:11:51 |
| attackspam | 2020-08-02T15:53:36.7933791495-001 sshd[41013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root 2020-08-02T15:53:38.4538501495-001 sshd[41013]: Failed password for root from 138.68.92.121 port 52298 ssh2 2020-08-02T15:59:00.0868831495-001 sshd[41305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root 2020-08-02T15:59:01.8924941495-001 sshd[41305]: Failed password for root from 138.68.92.121 port 36320 ssh2 2020-08-02T16:04:22.7904001495-001 sshd[41654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root 2020-08-02T16:04:24.4661751495-001 sshd[41654]: Failed password for root from 138.68.92.121 port 48566 ssh2 ... |
2020-08-03 04:52:35 |
| attackbotsspam | 2020-07-24T17:36:40.2197961495-001 sshd[61250]: Invalid user rrl from 138.68.92.121 port 53882 2020-07-24T17:36:42.9010231495-001 sshd[61250]: Failed password for invalid user rrl from 138.68.92.121 port 53882 ssh2 2020-07-24T17:42:29.3729111495-001 sshd[61535]: Invalid user admin from 138.68.92.121 port 39020 2020-07-24T17:42:29.3763921495-001 sshd[61535]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 2020-07-24T17:42:29.3729111495-001 sshd[61535]: Invalid user admin from 138.68.92.121 port 39020 2020-07-24T17:42:31.6319811495-001 sshd[61535]: Failed password for invalid user admin from 138.68.92.121 port 39020 ssh2 ... |
2020-07-25 06:09:35 |
| attack | Jul 23 00:44:35 vps sshd[314513]: Failed password for invalid user jordan from 138.68.92.121 port 57800 ssh2 Jul 23 00:50:06 vps sshd[340840]: Invalid user laboratorio from 138.68.92.121 port 45288 Jul 23 00:50:06 vps sshd[340840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Jul 23 00:50:08 vps sshd[340840]: Failed password for invalid user laboratorio from 138.68.92.121 port 45288 ssh2 Jul 23 00:55:37 vps sshd[366277]: Invalid user hassan from 138.68.92.121 port 32782 ... |
2020-07-23 06:59:37 |
| attackbotsspam | Jul 19 11:19:46 root sshd[8979]: Invalid user es from 138.68.92.121 ... |
2020-07-19 16:28:35 |
| attackspam | Jul 9 16:40:58 pkdns2 sshd\[20101\]: Invalid user vories from 138.68.92.121Jul 9 16:41:00 pkdns2 sshd\[20101\]: Failed password for invalid user vories from 138.68.92.121 port 41268 ssh2Jul 9 16:43:30 pkdns2 sshd\[20197\]: Invalid user physics from 138.68.92.121Jul 9 16:43:31 pkdns2 sshd\[20197\]: Failed password for invalid user physics from 138.68.92.121 port 46158 ssh2Jul 9 16:45:44 pkdns2 sshd\[20299\]: Invalid user test from 138.68.92.121Jul 9 16:45:46 pkdns2 sshd\[20299\]: Failed password for invalid user test from 138.68.92.121 port 51054 ssh2 ... |
2020-07-09 21:50:28 |
| attackbots | Failed password for root from 138.68.92.121 port 48272 ssh2 |
2020-07-08 17:49:07 |
| attackbotsspam | SSH Brute Force |
2020-07-05 21:00:20 |
| attackspambots | Jul 4 09:16:01 lukav-desktop sshd\[11356\]: Invalid user test from 138.68.92.121 Jul 4 09:16:01 lukav-desktop sshd\[11356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Jul 4 09:16:04 lukav-desktop sshd\[11356\]: Failed password for invalid user test from 138.68.92.121 port 52316 ssh2 Jul 4 09:25:23 lukav-desktop sshd\[11586\]: Invalid user stp from 138.68.92.121 Jul 4 09:25:23 lukav-desktop sshd\[11586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 |
2020-07-04 15:15:28 |
| attackspam | Jun 22 06:30:27 plex sshd[28413]: Invalid user user from 138.68.92.121 port 44490 |
2020-06-22 12:41:31 |
| attackspambots | web-1 [ssh] SSH Attack |
2020-06-13 17:50:47 |
| attackbotsspam | Fail2Ban Ban Triggered (2) |
2020-06-01 20:35:32 |
| attackspambots | May 26 13:57:23 firewall sshd[22797]: Failed password for invalid user jairo from 138.68.92.121 port 36048 ssh2 May 26 14:01:44 firewall sshd[22891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root May 26 14:01:46 firewall sshd[22891]: Failed password for root from 138.68.92.121 port 41860 ssh2 ... |
2020-05-27 02:32:57 |
| attack | May 8 07:58:17 pkdns2 sshd\[42137\]: Invalid user tiago from 138.68.92.121May 8 07:58:18 pkdns2 sshd\[42137\]: Failed password for invalid user tiago from 138.68.92.121 port 44832 ssh2May 8 08:02:52 pkdns2 sshd\[42370\]: Invalid user oem from 138.68.92.121May 8 08:02:54 pkdns2 sshd\[42370\]: Failed password for invalid user oem from 138.68.92.121 port 54066 ssh2May 8 08:07:32 pkdns2 sshd\[42632\]: Invalid user ubnt from 138.68.92.121May 8 08:07:34 pkdns2 sshd\[42632\]: Failed password for invalid user ubnt from 138.68.92.121 port 35062 ssh2 ... |
2020-05-08 14:26:54 |
| attackbots | Apr 27 14:32:34 ny01 sshd[25453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Apr 27 14:32:36 ny01 sshd[25453]: Failed password for invalid user knoppix from 138.68.92.121 port 47916 ssh2 Apr 27 14:37:35 ny01 sshd[26171]: Failed password for root from 138.68.92.121 port 59648 ssh2 |
2020-04-28 03:12:08 |
| attackbotsspam | Apr 27 10:10:11 server sshd[28115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Apr 27 10:10:13 server sshd[28115]: Failed password for invalid user simon from 138.68.92.121 port 35178 ssh2 Apr 27 10:15:08 server sshd[28560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 ... |
2020-04-27 16:20:40 |
| attackbotsspam | 2020-04-11T07:40:30.539664randservbullet-proofcloud-66.localdomain sshd[22659]: Invalid user laozhao from 138.68.92.121 port 41174 2020-04-11T07:40:30.544818randservbullet-proofcloud-66.localdomain sshd[22659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 2020-04-11T07:40:30.539664randservbullet-proofcloud-66.localdomain sshd[22659]: Invalid user laozhao from 138.68.92.121 port 41174 2020-04-11T07:40:32.373407randservbullet-proofcloud-66.localdomain sshd[22659]: Failed password for invalid user laozhao from 138.68.92.121 port 41174 ssh2 ... |
2020-04-11 17:04:37 |
| attackspambots | SSH login attempts @ 2020-03-20 10:07:26 |
2020-03-22 04:32:09 |
| attackbots | $f2bV_matches |
2020-03-10 01:09:15 |
| attackbots | Mar 4 22:54:28 ns41 sshd[21261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Mar 4 22:54:28 ns41 sshd[21261]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 |
2020-03-05 06:08:30 |
| attackspam | invalid login attempt (ftpuser1) |
2020-02-21 23:18:34 |
| attackbotsspam | Feb 17 11:44:23 srv-ubuntu-dev3 sshd[8520]: Invalid user p@ssword from 138.68.92.121 Feb 17 11:44:23 srv-ubuntu-dev3 sshd[8520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Feb 17 11:44:23 srv-ubuntu-dev3 sshd[8520]: Invalid user p@ssword from 138.68.92.121 Feb 17 11:44:25 srv-ubuntu-dev3 sshd[8520]: Failed password for invalid user p@ssword from 138.68.92.121 port 47996 ssh2 Feb 17 11:47:17 srv-ubuntu-dev3 sshd[8769]: Invalid user pim123 from 138.68.92.121 Feb 17 11:47:17 srv-ubuntu-dev3 sshd[8769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 Feb 17 11:47:17 srv-ubuntu-dev3 sshd[8769]: Invalid user pim123 from 138.68.92.121 Feb 17 11:47:19 srv-ubuntu-dev3 sshd[8769]: Failed password for invalid user pim123 from 138.68.92.121 port 49200 ssh2 Feb 17 11:50:19 srv-ubuntu-dev3 sshd[9039]: Invalid user 321 from 138.68.92.121 ... |
2020-02-17 18:56:13 |
| attackspambots | Jan 1 06:17:44 marvibiene sshd[12907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root Jan 1 06:17:45 marvibiene sshd[12907]: Failed password for root from 138.68.92.121 port 53226 ssh2 Jan 1 06:23:17 marvibiene sshd[12951]: Invalid user plcnoc from 138.68.92.121 port 52094 ... |
2020-01-01 18:32:01 |
| attackbotsspam | failed root login |
2019-12-20 15:40:58 |
| attack | Dec 6 23:29:05 pi sshd\[22323\]: Failed password for invalid user sandige from 138.68.92.121 port 47878 ssh2 Dec 6 23:44:41 pi sshd\[22983\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=mysql Dec 6 23:44:43 pi sshd\[22983\]: Failed password for mysql from 138.68.92.121 port 57418 ssh2 Dec 6 23:59:58 pi sshd\[23658\]: Invalid user nentwich from 138.68.92.121 port 38736 Dec 6 23:59:58 pi sshd\[23658\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 ... |
2019-12-07 09:12:17 |
| attackspambots | 2019-11-29T06:53:58.636419tmaserv sshd\[26025\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 2019-11-29T06:54:00.900738tmaserv sshd\[26025\]: Failed password for invalid user swantek from 138.68.92.121 port 49392 ssh2 2019-11-29T08:00:03.560814tmaserv sshd\[29077\]: Invalid user http from 138.68.92.121 port 32988 2019-11-29T08:00:03.565336tmaserv sshd\[29077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 2019-11-29T08:00:04.821304tmaserv sshd\[29077\]: Failed password for invalid user http from 138.68.92.121 port 32988 ssh2 2019-11-29T08:05:16.709201tmaserv sshd\[29313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121 user=root ... |
2019-11-29 14:28:12 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 138.68.92.107 | attack | Dec 27 06:52:44 cw sshd[7730]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers Dec 27 06:52:44 cw sshd[7731]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:44 cw sshd[7732]: User r.r from 138.68.92.107 not allowed because listed in DenyUsers Dec 27 06:52:44 cw sshd[7733]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:44 cw sshd[7734]: Invalid user admin from 138.68.92.107 Dec 27 06:52:44 cw sshd[7735]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:45 cw sshd[7736]: Invalid user telnet from 138.68.92.107 Dec 27 06:52:45 cw sshd[7737]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:45 cw sshd[7738]: Invalid user ubnt from 138.68.92.107 Dec 27 06:52:46 cw sshd[7739]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:46 cw sshd[7740]: Invalid user user from 138.68.92.107 Dec 27 06:52:46 cw sshd[7741]: Received disconnect from 138.68.92.107: 11: Bye Bye Dec 27 06:52:........ ------------------------------- |
2019-12-27 15:42:57 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.68.92.121
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26098
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;138.68.92.121. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019070901 1800 900 604800 86400
;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 10 02:20:43 CST 2019
;; MSG SIZE rcvd: 117Host 121.92.68.138.in-addr.arpa. not found: 3(NXDOMAIN)Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 121.92.68.138.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 109.123.117.247 | attackbots | DNS Enumeration |
2019-11-05 22:48:03 |
| 185.200.118.70 | attack | DOS Microsoft Remote Desktop (RDP) Syn then Reset 30 Second DoS Attempt. 185.200.118.70 (adscore.com):42422 |
2019-11-05 22:47:23 |
| 45.238.253.22 | attackbots | email spam |
2019-11-05 22:11:28 |
| 77.81.109.100 | attackbotsspam | email spam |
2019-11-05 22:08:04 |
| 177.36.6.252 | attackbotsspam | email spam |
2019-11-05 22:33:19 |
| 177.137.160.239 | attackbotsspam | email spam |
2019-11-05 22:30:41 |
| 163.172.147.146 | attackbots | Nov 5 15:41:55 nextcloud sshd\[21792\]: Invalid user mine from 163.172.147.146 Nov 5 15:41:55 nextcloud sshd\[21792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.172.147.146 Nov 5 15:41:57 nextcloud sshd\[21792\]: Failed password for invalid user mine from 163.172.147.146 port 32824 ssh2 ... |
2019-11-05 22:48:57 |
| 45.238.204.22 | attackspambots | Automatic report - Port Scan Attack |
2019-11-05 22:12:03 |
| 187.17.145.237 | attackbotsspam | email spam |
2019-11-05 22:25:24 |
| 159.65.88.5 | attackbotsspam | Nov 5 15:56:39 master sshd[28461]: Failed password for invalid user med from 159.65.88.5 port 55710 ssh2 Nov 5 16:07:17 master sshd[28783]: Failed password for invalid user vpnuser1 from 159.65.88.5 port 39298 ssh2 Nov 5 16:12:27 master sshd[28791]: Failed password for root from 159.65.88.5 port 48536 ssh2 Nov 5 16:17:08 master sshd[28810]: Failed password for root from 159.65.88.5 port 57770 ssh2 Nov 5 16:21:46 master sshd[28820]: Failed password for backup from 159.65.88.5 port 38778 ssh2 Nov 5 16:26:46 master sshd[28830]: Failed password for root from 159.65.88.5 port 48012 ssh2 Nov 5 16:31:43 master sshd[29140]: Failed password for invalid user user from 159.65.88.5 port 57250 ssh2 Nov 5 16:36:23 master sshd[29146]: Failed password for invalid user tomcat from 159.65.88.5 port 38252 ssh2 Nov 5 16:40:58 master sshd[29156]: Failed password for root from 159.65.88.5 port 47490 ssh2 |
2019-11-05 22:51:47 |
| 45.121.43.21 | attackspambots | email spam |
2019-11-05 22:13:22 |
| 114.116.74.151 | attackbots | email spam |
2019-11-05 22:40:20 |
| 177.0.66.105 | attackbots | email spam |
2019-11-05 22:33:56 |
| 45.116.3.249 | attackbots | email spam |
2019-11-05 22:13:50 |
| 167.89.24.164 | attackspam | email spam |
2019-11-05 22:36:10 |