This IP address has been reported a total of
32
times from
31 distinct
sources.
138.68.249.68 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Failed password for root from 138.68.249.68 port 60566 ssh2
Failed password for root from 138.68.249 ...
show moreFailed password for root from 138.68.249.68 port 60566 ssh2
Failed password for root from 138.68.249.68 port 48892 ssh2
Failed password for root from 138.68.249.68 port 38016 ssh2
show less
2026-09-01T14:05:53.911152webserver sshd[53955]: Failed password for root from 138.68.249.68 port 51 ...
show more2026-09-01T14:05:53.911152webserver sshd[53955]: Failed password for root from 138.68.249.68 port 51522 ssh2
2026-09-01T14:08:47.690681webserver sshd[62750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.249.68 user=root
2026-09-01T14:08:50.051908webserver sshd[62750]: Failed password for root from 138.68.249.68 port 46490 ssh2
...
show less
Brute-Force
SSH
Anonymous
Sep 1 19:05:49 fi7 sshd[1217679]: Failed password for root from 138.68.249.68 port 39134 ssh2
Sep ...
show moreSep 1 19:05:49 fi7 sshd[1217679]: Failed password for root from 138.68.249.68 port 39134 ssh2
Sep 1 19:08:43 fi7 sshd[1217695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.249.68 user=root
Sep 1 19:08:45 fi7 sshd[1217695]: Failed password for root from 138.68.249.68 port 51518 ssh2
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-09-01T17:05:35Z and 2026-09-0 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-09-01T17:05:35Z and 2026-09-01T17:08:31Z
show less
2026-09-01T19:02:00.281602+02:00 matrix.ursinn.dev sshd-session[3662613]: User root from 138.68.249. ...
show more2026-09-01T19:02:00.281602+02:00 matrix.ursinn.dev sshd-session[3662613]: User root from 138.68.249.68 not allowed because not listed in AllowUsers
2026-09-01T19:04:49.405104+02:00 matrix.ursinn.dev sshd-session[3666041]: User root from 138.68.249.68 not allowed because not listed in AllowUsers
2026-09-01T19:07:45.103756+02:00 matrix.ursinn.dev sshd-session[3669579]: User root from 138.68.249.68 not allowed because not listed in AllowUsers
...
show less
2026-09-01T10:04:20.676314-07:00 safe-flag-1.localdomain sshd[2032411]: Failed password for root fro ...
show more2026-09-01T10:04:20.676314-07:00 safe-flag-1.localdomain sshd[2032411]: Failed password for root from 138.68.249.68 port 36836 ssh2
2026-09-01T10:07:14.389472-07:00 safe-flag-1.localdomain sshd[2032683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.249.68 user=root
2026-09-01T10:07:15.984341-07:00 safe-flag-1.localdomain sshd[2032683]: Failed password for root from 138.68.249.68 port 54466 ssh2
...
show less
2026-09-01T20:04:17.272651+03:00 mailhub sshd[3950934]: Failed password for root from 138.68.249.68 ...
show more2026-09-01T20:04:17.272651+03:00 mailhub sshd[3950934]: Failed password for root from 138.68.249.68 port 35114 ssh2
2026-09-01T20:07:10.900682+03:00 mailhub sshd[3952682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.249.68 user=root
2026-09-01T20:07:12.609876+03:00 mailhub sshd[3952682]: Failed password for root from 138.68.249.68 port 33704 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 32 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩