This IP address has been reported a total of
107
times from
93 distinct
sources.
138.68.174.81 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 17
reports;
Germany
with 14
reports;
France
with 7
reports.
The most common categories in these recent reports were:
SSH
59
times;
Brute-Force
58
times;
Port Scan
10
times;
Exploited Host
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
2026-09-28T12:20:31.032914shield sshd\[18208\]: Invalid user firedancer from 138.68.174.81 port 5207 ...
show more2026-09-28T12:20:31.032914shield sshd\[18208\]: Invalid user firedancer from 138.68.174.81 port 52074
2026-09-28T12:20:31.102512shield sshd\[18208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.174.81
2026-09-28T12:20:33.499898shield sshd\[18208\]: Failed password for invalid user firedancer from 138.68.174.81 port 52074 ssh2
2026-09-28T12:23:06.469561shield sshd\[19223\]: Invalid user eigenlayer from 138.68.174.81 port 56094
2026-09-28T12:23:06.542312shield sshd\[19223\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.174.81
show less
6 attempts since 28.09.2026 12:09:37 UTC - last one: 2026-09-28T14:22:15.926900+02:00 beta sshd-sess ...
show more6 attempts since 28.09.2026 12:09:37 UTC - last one: 2026-09-28T14:22:15.926900+02:00 beta sshd-session[253823]: Connection closed by invalid user firedancer 138.68.174.81 port 38582 [preauth]
show less
SSH Brute force: 2 attempts were recorded from 138.68.174.81
2026-09-28T14:10:11+02:00 Invalid user ...
show moreSSH Brute force: 2 attempts were recorded from 138.68.174.81
2026-09-28T14:10:11+02:00 Invalid user firedancer from 138.68.174.81 port 38718
2026-09-28T14:12:33+02:00 Invalid user frankendancer from 138.68.174.81 port 58712
show less
Brute-Force
SSH
Anonymous
2026-09-28T13:08:40.214341+01:00 clara sshd-session[2802717]: Invalid user firedancer from 138.68.17 ...
show more2026-09-28T13:08:40.214341+01:00 clara sshd-session[2802717]: Invalid user firedancer from 138.68.174.81 port 39334
2026-09-28T13:11:00.012407+01:00 clara sshd-session[2802762]: Invalid user frankendancer from 138.68.174.81 port 60196
2026-09-28T13:13:31.671151+01:00 clara sshd-session[2802835]: Invalid user firedancer from 138.68.174.81 port 38670
2026-09-28T13:16:07.685268+01:00 clara sshd-session[2802906]: Invalid user firedancer from 138.68.174.81 port 51218
2026-09-28T13:18:35.089198+01:00 clara sshd-session[2802959]: Invalid user firedancer from 138.68.174.81 port 51464
...
show less
Report 2713073 with IP 3760640 for SSH brute-force attack by source 3755298 via ssh-honeypot/0.2.0+h ...
show moreReport 2713073 with IP 3760640 for SSH brute-force attack by source 3755298 via ssh-honeypot/0.2.0+http
show less
