This IP address has been reported a total of
72
times from
62 distinct
sources.
138.68.2.217 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 20
reports;
United States of America
with 11
reports;
France
with 8
reports.
The most common categories in these recent reports were:
Brute-Force
65
times;
SSH
64
times;
Port Scan
5
times;
Hacking
2
times;
Exploited Host
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unwanted traffic detected by honeypot on October 17, 2026: port scans (1 port 22 scan), and brute fo ...
show moreUnwanted traffic detected by honeypot on October 17, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (15 over ssh).
show less
2026-10-18T02:18:41.744418+02:00 eclipse sshd-session[477404]: Invalid user frappe from 138.68.2.217 ...
show more2026-10-18T02:18:41.744418+02:00 eclipse sshd-session[477404]: Invalid user frappe from 138.68.2.217 port 55996
2026-10-18T02:18:41.918259+02:00 eclipse sshd-session[477404]: Connection closed by invalid user frappe 138.68.2.217 port 55996 [preauth]
2026-10-18T02:21:32.139793+02:00 eclipse sshd-session[480318]: Invalid user frappe from 138.68.2.217 port 42204
2026-10-18T02:21:32.317271+02:00 eclipse sshd-session[480318]: Connection closed by invalid user frappe 138.68.2.217 port 42204 [preauth]
2026-10-18T02:24:25.010371+02:00 eclipse sshd-session[483256]: Invalid user frappe from 138.68.2.217 port 44856
...
show less
2026-10-18T02:18:42.031421+02:00 dsh1621 sshd[3005265]: Failed password for invalid user frappe from ...
show more2026-10-18T02:18:42.031421+02:00 dsh1621 sshd[3005265]: Failed password for invalid user frappe from 138.68.2.217 port 37822 ssh2
2026-10-18T02:21:30.004122+02:00 dsh1621 sshd[3007431]: Invalid user frappe from 138.68.2.217 port 47474
2026-10-18T02:21:30.158893+02:00 dsh1621 sshd[3007431]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.2.217
2026-10-18T02:21:31.683331+02:00 dsh1621 sshd[3007431]: Failed password for invalid user frappe from 138.68.2.217 port 47474 ssh2
2026-10-18T02:24:23.631964+02:00 dsh1621 sshd[3009620]: Invalid user frappe from 138.68.2.217 port 38798
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: frappe, Pass: [REDACTED]
[fail2ban]
2026-10-18T00:07:27.826982+00:00 arson sshd-session[1323098]: Invalid user loginuser from ...
show more[fail2ban]
2026-10-18T00:07:27.826982+00:00 arson sshd-session[1323098]: Invalid user loginuser from 138.68.2.217 port 57058
2026-10-18T00:10:17.026377+00:00 arson sshd-session[1431092]: Invalid user login from 138.68.2.217 port 59504
2026-10-18T00:12:56.347231+00:00 arson sshd-session[1538323]: Invalid user loginuser from 138.68.2.217 port 40986
2026-10-18T00:15:36.023851+00:00 arson sshd-session[1646327]: Invalid user sonar from 138.68.2.217 port 55338
2026-10-18T00:18:23.160013+00:00 arson sshd-session[1758449]: Invalid user frappe from 138.68.2.217 port 51332
...
show less
Blocked by https://aegis.hr — Synology: DSM auto-blocked external IP - (MITRE T1110), 1 attempts, Pe ...
show moreBlocked by https://aegis.hr — Synology: DSM auto-blocked external IP - (MITRE T1110), 1 attempts, Period: 2026-10-17 23:54:55 to 2026-10-17 23:54:55
show less
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-10-17T23:46:51Z and 2026-10- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-10-17T23:46:51Z and 2026-10-18T00:10:39Z
show less
2026-10-18T02:03:40.158027+02:00 frank sshd-session[1808315]: Failed password for invalid user testu ...
show more2026-10-18T02:03:40.158027+02:00 frank sshd-session[1808315]: Failed password for invalid user testuser from 138.68.2.217 port 33232 ssh2
2026-10-18T02:06:28.514678+02:00 frank sshd-session[1812081]: Invalid user bank from 138.68.2.217 port 51710
2026-10-18T02:06:28.686882+02:00 frank sshd-session[1812081]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.2.217
2026-10-18T02:06:30.603567+02:00 frank sshd-session[1812081]: Failed password for invalid user bank from 138.68.2.217 port 51710 ssh2
2026-10-18T02:09:17.639836+02:00 frank sshd-session[1817786]: Invalid user loginuser from 138.68.2.217 port 49486
...
show less
2026-10-18T03:05:49.919888+03:00 mailhub sshd[1410821]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-18T03:05:49.919888+03:00 mailhub sshd[1410821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.2.217
2026-10-18T03:05:51.930435+03:00 mailhub sshd[1410821]: Failed password for invalid user bank from 138.68.2.217 port 42200 ssh2
2026-10-18T03:08:37.555391+03:00 mailhub sshd[1412481]: Invalid user loginuser from 138.68.2.217 port 37224
...
show less
2026-10-18T03:08:32.142291nar.lt sshd[23807]: Invalid user loginuser from 138.68.2.217 port 58696
20 ...
show more2026-10-18T03:08:32.142291nar.lt sshd[23807]: Invalid user loginuser from 138.68.2.217 port 58696
2026-10-18T03:08:32.315744nar.lt sshd[23807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.2.217
2026-10-18T03:08:34.371489nar.lt sshd[23807]: Failed password for invalid user loginuser from 138.68.2.217 port 58696 ssh2
2026-10-18T03:08:32.315744nar.lt sshd[23807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.2.217
2026-10-18T03:08:34.371489nar.lt sshd[23807]: Failed password for invalid user loginuser from 138.68.2.217 port 58696 ssh2
show less
2026-10-18T02:02:07.693119+02:00 eclipse sshd-session[460165]: Invalid user testuser from 138.68.2.2 ...
show more2026-10-18T02:02:07.693119+02:00 eclipse sshd-session[460165]: Invalid user testuser from 138.68.2.217 port 35814
2026-10-18T02:02:07.867521+02:00 eclipse sshd-session[460165]: Connection closed by invalid user testuser 138.68.2.217 port 35814 [preauth]
2026-10-18T02:04:58.284695+02:00 eclipse sshd-session[463156]: Invalid user bank from 138.68.2.217 port 49708
2026-10-18T02:04:58.461046+02:00 eclipse sshd-session[463156]: Connection closed by invalid user bank 138.68.2.217 port 49708 [preauth]
2026-10-18T02:07:46.283553+02:00 eclipse sshd-session[466050]: Invalid user loginuser from 138.68.2.217 port 38736
...
show less
