This IP address has been reported a total of
39
times from
26 distinct
sources.
138.68.138.195 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 548 port scanning attempts on 13-08-2026. For more information or to rep ...
show moreThis IP address carried out 548 port scanning attempts on 13-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 135 SSH credential attack (attempts) on 13-08-2026. For more information ...
show moreThis IP address carried out 135 SSH credential attack (attempts) on 13-08-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-08-13T08:44:05.714261-07:00 orcas sshd[46324]: Invalid user james from 138.68.138.195
2026-08-1 ...
show more2026-08-13T08:44:05.714261-07:00 orcas sshd[46324]: Invalid user james from 138.68.138.195
2026-08-13T08:44:24.644388-07:00 orcas sshd[47237]: Invalid user robert from 138.68.138.195
2026-08-13T08:44:35.483626-07:00 orcas sshd[47510]: Invalid user michael from 138.68.138.195
2026-08-13T08:44:47.154703-07:00 orcas sshd[47930]: Invalid user william from 138.68.138.195
2026-08-13T08:44:58.942443-07:00 orcas sshd[48444]: Invalid user david from 138.68.138.195
...
show less
(sshd) Failed SSH login from 138.68.138.195 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: * ...
show more(sshd) Failed SSH login from 138.68.138.195 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 13 10:40:22 14487 sshd[27019]: Did not receive identification string from 138.68.138.195 port 45128
Aug 13 10:44:05 14487 sshd[29050]: Invalid user james from 138.68.138.195 port 37504
Aug 13 10:44:07 14487 sshd[29050]: Failed password for invalid user james from 138.68.138.195 port 37504 ssh2
Aug 13 10:44:11 14487 sshd[29052]: Invalid user john from 138.68.138.195 port 46920
Aug 13 10:44:13 14487 sshd[29052]: Failed password for invalid user john from 138.68.138.195 port 46920 ssh2
show less
Blocked by UFW (TCP on 2222)
Source port: 54640
TTL: 240
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 2222)
Source port: 54640
TTL: 240
Packet length: 40
TOS: 0x08
This report (for 138.68.138.195) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-08-13T11:08:58.617428mail.idscp.com sshd[2786632]: Failed password for invalid user james from ...
show more2026-08-13T11:08:58.617428mail.idscp.com sshd[2786632]: Failed password for invalid user james from 138.68.138.195 port 53942 ssh2
2026-08-13T11:09:06.658157mail.idscp.com sshd[2786961]: Invalid user john from 138.68.138.195 port 34740
2026-08-13T11:09:08.679217mail.idscp.com sshd[2786961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.138.195
2026-08-13T11:09:11.069155mail.idscp.com sshd[2786961]: Failed password for invalid user john from 138.68.138.195 port 34740 ssh2
2026-08-13T11:09:13.157234mail.idscp.com sshd[2787241]: Invalid user robert from 138.68.138.195 port 43990
...
show less
(sshd) Failed SSH login from 138.68.138.195 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: * ...
show more(sshd) Failed SSH login from 138.68.138.195 (GB/United Kingdom/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 13 10:07:05 17988 sshd[11679]: Did not receive identification string from 138.68.138.195 port 55050
Aug 13 10:08:55 17988 sshd[12298]: Invalid user james from 138.68.138.195 port 35514
Aug 13 10:08:57 17988 sshd[12298]: Failed password for invalid user james from 138.68.138.195 port 35514 ssh2
Aug 13 10:09:03 17988 sshd[12560]: Invalid user john from 138.68.138.195 port 33300
Aug 13 10:09:05 17988 sshd[12560]: Failed password for invalid user john from 138.68.138.195 port 33300 ssh2
show less
Brute-Force
SSH
Showing 1 to
15
of 39 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ