JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.68.64.197

Neutral Activity

Abuse Confidence Score

0% Low Risk

49 reports

48 reporters · latest 7 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

138.68.64.197 has been reported 49 times. The most recent report is from 7 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

49 from 48 distinct reporters

First reported

March 10th 2026

Most recent report

7 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2026-03-15 20:12:04 UTC · (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2026-03-15 03:02:58 UTC · (7 months ago)	Fail2Ban detection - brute-force attempt (jail: sshd)	Brute-Force
🇫🇷 John Doe	2026-03-14 22:49:45 UTC · (7 months ago)	$f2bV_matches	Brute-Force SSH
🇬🇧 mateisr	2026-03-14 22:49:28 UTC · (7 months ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
🇳🇱 maza	2026-03-14 22:49:27 UTC · (7 months ago)	2026-03-14T22:47:27.647305+00:00 oracle sshd[3885182]: Invalid user admin from 138.68.64.197 port 49952 2026-03-14T22:48:26.629444+00:00 oracle sshd[3885188]: Invalid user admin from 138.68.64.197 port 41984 2026-03-14T22:49:26.323215+00:00 oracle ss ... show more 2026-03-14T22:47:27.647305+00:00 oracle sshd[3885182]: Invalid user admin from 138.68.64.197 port 49952 2026-03-14T22:48:26.629444+00:00 oracle sshd[3885188]: Invalid user admin from 138.68.64.197 port 41984 2026-03-14T22:49:26.323215+00:00 oracle sshd[3885195]: Invalid user admin from 138.68.64.197 port 34830 ... show less	Brute-Force SSH
🇬🇧 blik2108	2026-03-14 22:48:46 UTC · (7 months ago)	2026-03-14T22:47:43.889918+00:00 wightpi sshd[3561572]: Invalid user admin from 138.68.64.197 port 51620 2026-03-14T22:48:45.822752+00:00 wightpi sshd[3561575]: Invalid user admin from 138.68.64.197 port 43162 ...	Brute-Force SSH
🇫🇷 Tect.host	2026-03-14 22:48:31 UTC · (7 months ago)	Brute-force SSH server detected by Fail2ban	Brute-Force SSH
Anonymous	2026-03-14 22:48:26 UTC · (7 months ago)	SSH Brute Force Attempt	Brute-Force SSH
🇩🇪 piticu iuli	2026-03-14 22:47:33 UTC · (7 months ago)	(sshd) Failed SSH login from 138.68.64.197 (DE/Germany/-)	Brute-Force SSH
🇳🇱 yvoictra	2026-03-14 22:47:14 UTC · (7 months ago)	Mar 14 23:47:13 theve sshd[775693]: Invalid user admin from 138.68.64.197 port 43024 ...	Brute-Force SSH
🇩🇪 Threat Intelligence Agency	2026-03-14 22:47:08 UTC · (7 months ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-03-14T22:37:54Z and 2026-03-14T22:47:08Z	Brute-Force SSH
🇨🇭 GAS	2026-03-14 22:43:55 UTC · (7 months ago)	SSH Honeypot attack. {"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"1234567890","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","src":"138.68.64.197","time":"2026-03-14T22:38:51.62382 ... show more SSH Honeypot attack. {"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"1234567890","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","src":"138.68.64.197","time":"2026-03-14T22:38:51.623824503Z"} {"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"password1","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","src":"138.68.64.197","time":"2026-03-14T22:39:59.058123008Z"} {"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"admin123","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","src":"138.68.64.197","time":"2026-03-14T22:41:05.093923597Z"} {"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"1234","server_version":"SSH-2.0-OpenSSH_8.2p1 Ubuntu-4ubuntu0.5","src":"138.68.64.197","time":"2026-03-14T22:42:04.283870454Z"} {"client_version":"SSH-2.0-Go","duser":"root","level":"info" ... show less	Brute-Force SSH
Anonymous	2026-03-14 22:42:19 UTC · (7 months ago)	2026-03-14T22:38:01.585509+00:00 clara sshd-session[3664044]: User root from 138.68.64.197 not allowed because not listed in AllowUsers 2026-03-14T22:39:08.893868+00:00 clara sshd-session[3664133]: User root from 138.68.64.197 not allowed because not ... show more 2026-03-14T22:38:01.585509+00:00 clara sshd-session[3664044]: User root from 138.68.64.197 not allowed because not listed in AllowUsers 2026-03-14T22:39:08.893868+00:00 clara sshd-session[3664133]: User root from 138.68.64.197 not allowed because not listed in AllowUsers 2026-03-14T22:40:21.051806+00:00 clara sshd-session[3664245]: User root from 138.68.64.197 not allowed because not listed in AllowUsers 2026-03-14T22:41:21.645998+00:00 clara sshd-session[3664313]: User root from 138.68.64.197 not allowed because not listed in AllowUsers 2026-03-14T22:42:18.671106+00:00 clara sshd-session[3664379]: User root from 138.68.64.197 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇩🇪 Kirian	2026-03-14 22:40:51 UTC · (7 months ago)	Mar 14 23:38:36 h2957637 sshd[198801]: Failed password for root from 138.68.64.197 port 39178 ssh2 Mar 14 23:39:41 h2957637 sshd[199113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.64.197 user=root ... show more Mar 14 23:38:36 h2957637 sshd[198801]: Failed password for root from 138.68.64.197 port 39178 ssh2 Mar 14 23:39:41 h2957637 sshd[199113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.64.197 user=root Mar 14 23:39:42 h2957637 sshd[199113]: Failed password for root from 138.68.64.197 port 36682 ssh2 Mar 14 23:40:49 h2957637 sshd[199273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.64.197 user=root Mar 14 23:40:51 h2957637 sshd[199273]: Failed password for root from 138.68.64.197 port 33088 ssh2 ... show less	Brute-Force SSH
🇯🇵 henda	2026-03-14 22:40:02 UTC · (7 months ago)	2026-03-15T07:38:50.770582+09:00 * sshd-session[29074]: Failed password for root from 138.68.64.197 port 36352 ssh2 2026-03-15T07:39:59.097639+09:00 * sshd-session[29391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more 2026-03-15T07:38:50.770582+09:00 * sshd-session[29074]: Failed password for root from 138.68.64.197 port 36352 ssh2 2026-03-15T07:39:59.097639+09:00 * sshd-session[29391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.64.197 user=root 2026-03-15T07:40:01.119798+09:00 *** sshd-session[29391]: Failed password for root from 138.68.64.197 port 49172 ssh2 show less	Brute-Force SSH

Showing 1 to 15 of 49 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.140.177.229

🇺🇸 195.140.177.180

🇺🇸 195.140.177.155

🇦🇺 115.129.89.210

🇸🇬 104.28.163.26

🇺🇸 91.230.168.148

🇸🇬 85.203.23.6

🇺🇸 70.167.235.39

🇮🇳 59.180.137.36

🇷🇺 2a00:1248:5001:3::f:1

🇺🇸 195.140.177.118

🇺🇸 195.140.176.246

🇺🇸 195.140.176.191

🇺🇸 195.140.176.133

🇺🇸 195.140.176.39

🇬🇧 185.122.143.84

🇦🇺 170.64.230.187

🇨🇳 116.132.219.227

🇵🇭 112.202.124.77

🇩🇪 104.164.114.168