This IP address has been reported a total of
11
times from
8 distinct
sources.
168.138.194.142 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
SSH Brute force: 3 attempts were recorded from 168.138.194.142
2024-08-02T16:56:25+02:00 User root f ...
show moreSSH Brute force: 3 attempts were recorded from 168.138.194.142
2024-08-02T16:56:25+02:00 User root from 168.138.194.142 not allowed because none of user's groups are listed in AllowGroups
2024-08-02T17:04:50+02:00 Invalid user admin from 168.138.194.142 port 37634
2024-08-02T17:05:53+02:00 Invalid user ubuntu from 168.138.194.142 port 38122
show less
2024-08-02T16:59:22.596164news0.dwmp.it sshd[18100]: pam_unix(sshd:auth): authentication failure; lo ...
show more2024-08-02T16:59:22.596164news0.dwmp.it sshd[18100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.194.142 user=root
2024-08-02T16:59:24.740864news0.dwmp.it sshd[18100]: Failed password for invalid user root from 168.138.194.142 port 50556 ssh2
2024-08-02T17:05:05.845437news0.dwmp.it sshd[18379]: Invalid user admin from 168.138.194.142 port 47206
...
show less
168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 10:03:32 15022 sshd[10610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.194.142 user=root
Aug 2 10:03:33 15022 sshd[10610]: Failed password for root from 168.138.194.142 port 46064 ssh2
Aug 2 09:13:31 15022 sshd[6468]: Failed password for root from 187.78.55.167 port 37730 ssh2
Aug 2 09:22:00 15022 sshd[7093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.210.78 user=root
Aug 2 09:22:02 15022 sshd[7093]: Failed password for root from 165.154.210.78 port 52126 ssh2
IP Addresses Blocked:
show less
168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 09:09:36 12627 sshd[13797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.67.92.13 user=root
Aug 2 09:09:38 12627 sshd[13797]: Failed password for root from 185.67.92.13 port 43356 ssh2
Aug 2 09:10:26 12627 sshd[13879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.186.0.128 user=root
Aug 2 09:06:21 12627 sshd[13613]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.194.142 user=root
Aug 2 09:06:23 12627 sshd[13613]: Failed password for root from 168.138.194.142 port 54568 ssh2
IP Addresses Blocked:
185.67.92.13 (RU/Russia/ip-13.92.67.185.in-addr.arpa)
103.186.0.128 (ID/Indonesia/ip103-186-0-128.cloudhost.web.id)
show less
(sshd) Failed SSH login from 168.138.194.142 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direct ...
show more(sshd) Failed SSH login from 168.138.194.142 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Aug 2 08:13:21 14078 sshd[8103]: Invalid user admin from 168.138.194.142 port 57634
Aug 2 08:13:23 14078 sshd[8103]: Failed password for invalid user admin from 168.138.194.142 port 57634 ssh2
Aug 2 08:21:18 14078 sshd[8707]: Invalid user kristine from 168.138.194.142 port 39670
Aug 2 08:21:21 14078 sshd[8707]: Failed password for invalid user kristine from 168.138.194.142 port 39670 ssh2
Aug 2 08:23:55 14078 sshd[8843]: Invalid user kiran from 168.138.194.142 port 59038
show less
[rede-44-49] (sshd) Failed SSH login from 168.138.194.142 (JP/Japan/-): 5 in the last 3600 secs; Por ...
show more[rede-44-49] (sshd) Failed SSH login from 168.138.194.142 (JP/Japan/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 2 08:25:07 sshd[11009]: Invalid user [USERNAME] from 168.138.194.142 port 50094
Aug 2 08:25:09 sshd[11009]: Failed password for invalid user [USERNAME] from 168.138.194.142 port 50094 ssh2
Aug 2 08:33:12 sshd[11490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.194.142 user=[USERNAME]
Aug 2 08:33:14 sshd[11490]: Failed password for [USERNAME] from 168.138.194.142 port 59002 ssh2
Aug 2 08:35:47 sshd[11588]: Invalid user [USERNAME] from
show less
168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more168.138.194.142 (JP/Japan/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Aug 2 05:31:47 15317 sshd[5238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.120.244 user=root
Aug 2 05:31:49 15317 sshd[5238]: Failed password for root from 183.82.120.244 port 42542 ssh2
Aug 2 05:33:15 15317 sshd[5390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.194.142 user=root
Aug 2 05:33:17 15317 sshd[5390]: Failed password for root from 168.138.194.142 port 59910 ssh2
Aug 2 05:31:23 15317 sshd[5185]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.113.113.175 user=root
IP Addresses Blocked:
183.82.120.244 (IN/India/183.82.120.244.actcorp.in)
show less
Brute-Force
SSH
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩