138.68.59.27 is an IP address with 3 abuse reports from 2 distinct reporters, submitted between 10/28/2026 and 10/28/2026. The AbuseTrack community rates it as Medium risk, with a score of 54/100. The most frequently reported threat categories are Brute Force.
Back to the database
Instant verdict
SUSPICIOUS
54/100
Community risk score
3
Reports
2
Reporters
10/28/2026
First seen
10/28/2026
Last seen
Threat type
Is this your address and is it listed wrongly? Request removal →
Intelligence
Country
United States (US)
WHOIS (RDAP)
- Country
- United States
- Location
- Santa Clara, California
Report history (3)
Brute Force10/28/2026, 01:46 AM · NextServ Group
2026-10-28T03:38:57.230800+02:00 dns sshd-session[62200]: Failed password for invalid user deploy from 138.68.59.27 port 60616 ssh2 2026-10-28T03:42:29.608470+02:00 dns sshd-session[62243]: Invalid user drupal from 138.68.59.27 port 33732 2026-10-28T03:42:30.041342+02:00 dns sshd-session[62243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.59.27 2026-10-28T03:42:32.221463+02:00 dns sshd-session[62243]: Failed password for invalid user drupal from 138.68.59.27 port 33732 ssh2 2026-10-28T03:46:04.155601+02:00 dns sshd-session[62280]: Invalid user dolibarr from 138.68.59.27 port 56788
Brute Force10/28/2026, 12:36 AM · NextServ Group
2026-10-28T02:28:38.575926+02:00 dns sshd-session[61954]: Failed password for invalid user sol from 138.68.59.27 port 36144 ssh2 2026-10-28T02:32:35.012390+02:00 dns sshd-session[61973]: Invalid user alertmanager from 138.68.59.27 port 38852 2026-10-28T02:32:35.483169+02:00 dns sshd-session[61973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.59.27 2026-10-28T02:32:37.506860+02:00 dns sshd-session[61973]: Failed password for invalid user alertmanager from 138.68.59.27 port 38852 ssh2 2026-10-28T02:36:27.872237+02:00 dns sshd-session[61980]: Invalid user alertuser from 138.68.59.27 port 55658
Brute Force10/28/2026, 12:36 AM · Enjyn Gruppe
fail2ban: SSH (sshd) brute-force — 3 failed attempts (jail: sshd)