Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 28 00:47:40 mail sshd[1875734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
Oct 28 00:47:42 mail sshd[1875734]: Failed password for invalid user eth-docker from 138.68.43.104 port 41798 s ...
show moreOct 28 00:47:40 mail sshd[1875734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
Oct 28 00:47:42 mail sshd[1875734]: Failed password for invalid user eth-docker from 138.68.43.104 port 41798 ssh2
Oct 28 00:47:40 mail sshd[1875734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
Oct 28 00:47:42 mail sshd[1875734]: Failed password for invalid user eth-docker from 138.68.43.104 port 41798 ssh2
Oct 28 00:52:32 mail sshd[1888069]: Invalid user exporter from 138.68.43.104 port 46168
...
show less
2026-10-28T01:44:21.492874+02:00 gaia sshd[3611355]: Failed password for invalid user eigenlayer from 138.68.43.104 port 42612 ssh2
2026-10-28T01:49:08.523912+02:00 gaia sshd[3613180]: Connection from 138.68.43.104 port 40410 on 148.251.110.65 port 2 ...
show more2026-10-28T01:44:21.492874+02:00 gaia sshd[3611355]: Failed password for invalid user eigenlayer from 138.68.43.104 port 42612 ssh2
2026-10-28T01:49:08.523912+02:00 gaia sshd[3613180]: Connection from 138.68.43.104 port 40410 on 148.251.110.65 port 22 rdomain ""
2026-10-28T01:49:09.512972+02:00 gaia sshd[3613180]: Invalid user eth-docker from 138.68.43.104 port 40410
...
show less
Brute-Force
SSH
Anonymous
rule sshd, 5 hits from 2026-10-27T23:32:53Z to 2026-10-27T23:42:29Z
2026-10-28T00:26:49.950763+01:00 Linux08 sshd[35302]: Failed password for invalid user eigenlayer from 138.68.43.104 port 57664 ssh2
2026-10-28T00:32:06.237230+01:00 Linux08 sshd[40269]: Invalid user ress from 138.68.43.104 port 46752
2026-10-28T00:3 ...
show more2026-10-28T00:26:49.950763+01:00 Linux08 sshd[35302]: Failed password for invalid user eigenlayer from 138.68.43.104 port 57664 ssh2
2026-10-28T00:32:06.237230+01:00 Linux08 sshd[40269]: Invalid user ress from 138.68.43.104 port 46752
2026-10-28T00:32:06.576151+01:00 Linux08 sshd[40269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
2026-10-28T00:32:08.738399+01:00 Linux08 sshd[40269]: Failed password for invalid user ress from 138.68.43.104 port 46752 ssh2
2026-10-28T00:37:10.848414+01:00 Linux08 sshd[44100]: Invalid user doge from 138.68.43.104 port 42044
2026-10-28T00:37:11.243172+01:00 Linux08 sshd[44100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
2026-10-28T00:37:13.558737+01:00 Linux08 sshd[44100]: Failed password for invalid user doge from 138.68.43.104 port 42044 ssh2
2026-10-28T00:41:48.739061+01:00 Linux08 sshd[48771]: Invalid user eigenlayer from 138.68.43.10
...
show less
2026-10-28T11:36:51.833890+12:00 dara sshd-session[489122]: Invalid user doge from 138.68.43.104 port 39718
2026-10-28T11:36:52.394980+12:00 dara sshd-session[489122]: Connection closed by invalid user doge 138.68.43.104 port 39718 [preauth]
2026-10- ...
show more2026-10-28T11:36:51.833890+12:00 dara sshd-session[489122]: Invalid user doge from 138.68.43.104 port 39718
2026-10-28T11:36:52.394980+12:00 dara sshd-session[489122]: Connection closed by invalid user doge 138.68.43.104 port 39718 [preauth]
2026-10-28T11:36:52.394980+12:00 dara sshd-session[489122]: Connection closed by invalid user doge 138.68.43.104 port 39718 [preauth]
2026-10-28T11:41:28.518915+12:00 dara sshd-session[489707]: Connection from 138.68.43.104 port 43542 on 135.181.182.173 port 22 rdomain ""
2026-10-28T11:41:30.199376+12:00 dara sshd-session[489707]: Invalid user eigenlayer from 138.68.43.104 port 43542
...
show less
Brute-Force
SSH
Anonymous
2026-10-27T23:20:23.563209 orion-monitor sshd[2144240]: Invalid user eigenlayer from 138.68.43.104 port 36910
2026-10-27T23:25:46.008356 orion-monitor sshd[2144262]: Invalid user eigenlayer from 138.68.43.104 port 40824
2026-10-27T23:31:06.371360 ori ...
show more2026-10-27T23:20:23.563209 orion-monitor sshd[2144240]: Invalid user eigenlayer from 138.68.43.104 port 36910
2026-10-27T23:25:46.008356 orion-monitor sshd[2144262]: Invalid user eigenlayer from 138.68.43.104 port 40824
2026-10-27T23:31:06.371360 orion-monitor sshd[2144280]: Invalid user ress from 138.68.43.104 port 47294
2026-10-27T23:36:17.451650 orion-monitor sshd[2144304]: Invalid user doge from 138.68.43.104 port 52800
2026-10-27T23:40:55.626727 orion-monitor sshd[2144326]: Invalid user eigenlayer from 138.68.43.104 port 53242
...
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
SQL Injection
Spoofing
Bad Web Bot
Brute-Force
SSH
IoT Targeted
2026-10-28T00:26:12.000910 www.yerkanian.com sshd-session[31769]: Invalid user eigenlayer from 138.68.43.104 port 42686
2026-10-28T00:26:12.433213 www.yerkanian.com sshd-session[31769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show more2026-10-28T00:26:12.000910 www.yerkanian.com sshd-session[31769]: Invalid user eigenlayer from 138.68.43.104 port 42686
2026-10-28T00:26:12.433213 www.yerkanian.com sshd-session[31769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
2026-10-28T00:26:13.942576 www.yerkanian.com sshd-session[31769]: Failed password for invalid user eigenlayer from 138.68.43.104 port 42686 ssh2
2026-10-28T00:31:32.194279 www.yerkanian.com sshd-session[31858]: Invalid user ress from 138.68.43.104 port 45856
2026-10-28T00:31:32.544754 www.yerkanian.com sshd-session[31858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.43.104
2026-10-28T00:31:34.680696 www.yerkanian.com sshd-session[31858]: Failed password for invalid user ress from 138.68.43.104 port 45856 ssh2
2026-10-28T00:36:40.290741 www.yerkanian.com sshd-session[31946]: Invalid user doge from 138.68.43.104 port 44234
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown