This IP address has been reported a total of
219
times from
114 distinct
sources.
138.68.166.157 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 36
reports;
United States of America
with 26
reports;
Finland
with 17
reports.
The most common categories in these recent reports were:
SSH
119
times;
Brute-Force
118
times;
Port Scan
13
times;
Hacking
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 57, successful ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 57, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-10-16..2026-10-17. Reported by an SSH honeypot network; no production service involved.
show less
SSH brute-force detected: 21 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-10-17T00:18:29.558488+00:00 vps-8967498d-vps-ovh-net sshd[445942]: Failed password for invalid ...
show more2026-10-17T00:18:29.558488+00:00 vps-8967498d-vps-ovh-net sshd[445942]: Failed password for invalid user dennis from 138.68.166.157 port 36806 ssh2
2026-10-17T00:21:19.281197+00:00 vps-8967498d-vps-ovh-net sshd[445971]: Invalid user jerry from 138.68.166.157 port 40624
2026-10-17T00:21:19.292882+00:00 vps-8967498d-vps-ovh-net sshd[445971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.166.157
2026-10-17T00:21:21.094262+00:00 vps-8967498d-vps-ovh-net sshd[445971]: Failed password for invalid user jerry from 138.68.166.157 port 40624 ssh2
2026-10-17T00:24:14.824386+00:00 vps-8967498d-vps-ovh-net sshd[445997]: Invalid user tyler from 138.68.166.157 port 60538
...
show less
Knock-Knock honeypot brute-force: SSH (55 total hits)
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: dennis, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
2026-10-17T02:14:51.490345+02:00 hvs sshd-session[302581]: Invalid user raymond from 138.68.166.157 ...
show more2026-10-17T02:14:51.490345+02:00 hvs sshd-session[302581]: Invalid user raymond from 138.68.166.157 port 50842
2026-10-17T02:14:51.509526+02:00 hvs sshd-session[302581]: Connection closed by invalid user raymond 138.68.166.157 port 50842 [preauth]
2026-10-17T02:17:37.311186+02:00 hvs sshd-session[302605]: Invalid user jack from 138.68.166.157 port 52650
2026-10-17T02:17:37.330590+02:00 hvs sshd-session[302605]: Connection closed by invalid user jack 138.68.166.157 port 52650 [preauth]
2026-10-17T02:20:29.680996+02:00 hvs sshd-session[302622]: Invalid user dennis from 138.68.166.157 port 39422
...
show less
2026-10-17T00:03:57.804376+00:00 kocer-main-webserver sshd[1234929]: Invalid user alexander from 138 ...
show more2026-10-17T00:03:57.804376+00:00 kocer-main-webserver sshd[1234929]: Invalid user alexander from 138.68.166.157 port 50698
2026-10-17T00:06:54.046419+00:00 kocer-main-webserver sshd[1235216]: Invalid user patrick from 138.68.166.157 port 47400
2026-10-17T00:09:46.046975+00:00 kocer-main-webserver sshd[1235644]: Invalid user barbara from 138.68.166.157 port 54402
...
show less
2026-10-17T00:03:18.532166+00:00 24fire sshd[188601]: Failed password for invalid user alexander fro ...
show more2026-10-17T00:03:18.532166+00:00 24fire sshd[188601]: Failed password for invalid user alexander from 138.68.166.157 port 46214 ssh2
2026-10-17T00:06:13.500990+00:00 24fire sshd[188951]: Invalid user patrick from 138.68.166.157 port 43350
2026-10-17T00:06:13.513951+00:00 24fire sshd[188951]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.166.157
2026-10-17T00:06:15.270425+00:00 24fire sshd[188951]: Failed password for invalid user patrick from 138.68.166.157 port 43350 ssh2
2026-10-17T00:09:05.013346+00:00 24fire sshd[189326]: Invalid user barbara from 138.68.166.157 port 38366
...
show less
2026-10-17T03:05:45.831709+03:00 prod.esb2.biathlontargets.com sshd-session[3667637]: pam_unix(sshd: ...
show more2026-10-17T03:05:45.831709+03:00 prod.esb2.biathlontargets.com sshd-session[3667637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.166.157
2026-10-17T03:05:48.019954+03:00 prod.esb2.biathlontargets.com sshd-session[3667637]: Failed password for invalid user patrick from 138.68.166.157 port 33032 ssh2
2026-10-17T03:08:38.130843+03:00 prod.esb2.biathlontargets.com sshd-session[3673451]: Invalid user barbara from 138.68.166.157 port 45636
...
show less
SSH brute-force detected: 22 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-10-17T00:01:26.522111+00:00 vps-8967498d-vps-ovh-net sshd[445640]: Failed password for invalid ...
show more2026-10-17T00:01:26.522111+00:00 vps-8967498d-vps-ovh-net sshd[445640]: Failed password for invalid user alexander from 138.68.166.157 port 36920 ssh2
2026-10-17T00:04:16.906382+00:00 vps-8967498d-vps-ovh-net sshd[445658]: Invalid user patrick from 138.68.166.157 port 33780
2026-10-17T00:04:16.917290+00:00 vps-8967498d-vps-ovh-net sshd[445658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.166.157
2026-10-17T00:04:19.280433+00:00 vps-8967498d-vps-ovh-net sshd[445658]: Failed password for invalid user patrick from 138.68.166.157 port 33780 ssh2
2026-10-17T00:07:13.218394+00:00 vps-8967498d-vps-ovh-net sshd[445686]: Invalid user barbara from 138.68.166.157 port 36840
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: alexander, Pass: [REDACTED]
