Blocked by UFW (TCP on 8888)
Source port: 61006
TTL: 242
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8888)
Source port: 61006
TTL: 242
Packet length: 44
TOS: 0x08
This report (for 138.68.137.34) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
ThreatBook Intelligence: cdn more details on http://threatbook.io/ip/138.68.137.34
2026-04-14 11:16: ...
show moreThreatBook Intelligence: cdn more details on http://threatbook.io/ip/138.68.137.34
2026-04-14 11:16:57 /
show less
Mar 08 09:35:40 master sshd[3249966]: Failed password for root from 138.68.137.34 port 58372 ssh2
Ma ...
show moreMar 08 09:35:40 master sshd[3249966]: Failed password for root from 138.68.137.34 port 58372 ssh2
Mar 08 09:36:50 master sshd[3249968]: Failed password for root from 138.68.137.34 port 60940 ssh2
Mar 08 09:37:39 master sshd[3249970]: Failed password for root from 138.68.137.34 port 41938 ssh2
Mar 08 09:38:29 master sshd[3249972]: Failed password for root from 138.68.137.34 port 39712 ssh2
Mar 08 09:39:18 master sshd[3250044]: Failed password for root from 138.68.137.34 port 32908 ssh2
Mar 08 09:40:03 master sshd[3250047]: Failed password for root from 138.68.137.34 port 42624 ssh2
Mar 08 09:40:49 master sshd[3250089]: Failed password for root from 138.68.137.34 port 51220 ssh2
Mar 08 09:41:32 master sshd[3250091]: Failed password for root from 138.68.137.34 port 47436 ssh2
Mar 08 09:42:15 master sshd[3250093]: Failed password for root from 138.68.137.34 port 54354 ssh2
Mar 08 09:42:56 master sshd[3250095]: Failed password for invalid user admin from 138.68.137.34 port 40390 ssh2
show less
2026-03-08T10:40:00.008647+01:00 helmgartner sshd[175924]: Invalid user tomcat from 138.68.137.34 po ...
show more2026-03-08T10:40:00.008647+01:00 helmgartner sshd[175924]: Invalid user tomcat from 138.68.137.34 port 43286
2026-03-08T10:40:53.561642+01:00 helmgartner sshd[175927]: Invalid user tomcat from 138.68.137.34 port 35884
2026-03-08T10:41:51.296391+01:00 helmgartner sshd[175929]: Invalid user tomcat from 138.68.137.34 port 51838
...
show less
2026-03-08T18:38:04.565964+09:00 v2202511290309405508 sshd[888843]: Failed password for invalid user ...
show more2026-03-08T18:38:04.565964+09:00 v2202511290309405508 sshd[888843]: Failed password for invalid user nagios from 138.68.137.34 port 32820 ssh2
2026-03-08T18:38:50.200577+09:00 v2202511290309405508 sshd[888916]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34 user=tomcat
2026-03-08T18:38:52.587388+09:00 v2202511290309405508 sshd[888916]: Failed password for tomcat from 138.68.137.34 port 46128 ssh2
...
show less
Mar 8 01:37:00 ismay sshd[2856726]: Failed password for invalid user nagios from 138.68.137.34 port ...
show moreMar 8 01:37:00 ismay sshd[2856726]: Failed password for invalid user nagios from 138.68.137.34 port 45610 ssh2
Mar 8 01:37:43 ismay sshd[2856857]: Invalid user nagios from 138.68.137.34 port 47228
Mar 8 01:37:43 ismay sshd[2856857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34
Mar 8 01:37:45 ismay sshd[2856857]: Failed password for invalid user nagios from 138.68.137.34 port 47228 ssh2
Mar 8 01:38:31 ismay sshd[2856884]: Invalid user nagios from 138.68.137.34 port 45922
...
show less
2026-03-08T01:24:41.516054-08:00 cm0app00 sshd[3196253]: Invalid user webmaster from 138.68.137.34 p ...
show more2026-03-08T01:24:41.516054-08:00 cm0app00 sshd[3196253]: Invalid user webmaster from 138.68.137.34 port 45868
2026-03-08T01:25:36.916711-08:00 cm0app00 sshd[3196728]: Invalid user webmaster from 138.68.137.34 port 42230
2026-03-08T01:26:31.645459-08:00 cm0app00 sshd[3197158]: Invalid user webmaster from 138.68.137.34 port 50014
2026-03-08T01:27:29.534458-08:00 cm0app00 sshd[3197599]: Invalid user webmaster from 138.68.137.34 port 57806
2026-03-08T01:28:20.893424-08:00 cm0app00 sshd[3197945]: Invalid user webmaster from 138.68.137.34 port 54034
...
show less
Mar 8 01:12:46 ismay sshd[2846126]: Failed password for invalid user backup from 138.68.137.34 port ...
show moreMar 8 01:12:46 ismay sshd[2846126]: Failed password for invalid user backup from 138.68.137.34 port 58916 ssh2
Mar 8 01:13:39 ismay sshd[2846183]: User backup from 138.68.137.34 not allowed because none of user's groups are listed in AllowGroups
Mar 8 01:13:40 ismay sshd[2846183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34 user=backup
Mar 8 01:13:42 ismay sshd[2846183]: Failed password for invalid user backup from 138.68.137.34 port 39860 ssh2
Mar 8 01:14:32 ismay sshd[2846206]: User backup from 138.68.137.34 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-03-08T10:06:56.785051+01:00 git-lab sshd[4064621]: Failed password for invalid user mysql from ...
show more2026-03-08T10:06:56.785051+01:00 git-lab sshd[4064621]: Failed password for invalid user mysql from 138.68.137.34 port 48516 ssh2
2026-03-08T10:07:51.677019+01:00 git-lab sshd[4066369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34 user=backup
2026-03-08T10:07:53.853474+01:00 git-lab sshd[4066369]: Failed password for backup from 138.68.137.34 port 53018 ssh2
...
show less
Mar 8 00:48:08 ismay sshd[2844095]: Failed password for invalid user administrator from 138.68.137. ...
show moreMar 8 00:48:08 ismay sshd[2844095]: Failed password for invalid user administrator from 138.68.137.34 port 35690 ssh2
Mar 8 00:48:50 ismay sshd[2844110]: Invalid user administrator from 138.68.137.34 port 55402
Mar 8 00:48:51 ismay sshd[2844110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34
Mar 8 00:48:53 ismay sshd[2844110]: Failed password for invalid user administrator from 138.68.137.34 port 55402 ssh2
Mar 8 00:49:35 ismay sshd[2844123]: Invalid user administrator from 138.68.137.34 port 52308
...
show less
2026-03-08T08:45:57.214048+00:00 mona sshd[553436]: Invalid user administrator from 138.68.137.34 po ...
show more2026-03-08T08:45:57.214048+00:00 mona sshd[553436]: Invalid user administrator from 138.68.137.34 port 39006
2026-03-08T08:46:42.293797+00:00 mona sshd[553480]: Invalid user administrator from 138.68.137.34 port 34414
2026-03-08T08:46:42.293797+00:00 mona sshd[553480]: Invalid user administrator from 138.68.137.34 port 34414
2026-03-08T08:47:27.333796+00:00 mona sshd[553507]: Invalid user administrator from 138.68.137.34 port 57270
...
show less
2026-03-08T09:44:10.669913+01:00 git-lab sshd[4023113]: pam_unix(sshd:auth): authentication failure; ...
show more2026-03-08T09:44:10.669913+01:00 git-lab sshd[4023113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.137.34
2026-03-08T09:44:12.765894+01:00 git-lab sshd[4023113]: Failed password for invalid user pi from 138.68.137.34 port 48002 ssh2
2026-03-08T09:44:52.806494+01:00 git-lab sshd[4024548]: Invalid user administrator from 138.68.137.34 port 52872
...
show less
Brute-Force
SSH
Showing 1 to
15
of 55 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ