JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.164.30

138.68.164.30 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 58%: ?

58%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.164.30

Whois 138.68.164.30

IP Abuse Reports for 138.68.164.30:

This IP address has been reported a total of 37 times from 31 distinct sources. 138.68.164.30 was first reported on March 24th 2021, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-07-06 09:38:37 (1 week ago)	Connection to port 8800 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 8800 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 67.215.244.172:8800 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇺🇸 donarev419	2026-07-06 08:12:45 (1 week ago)	Connection to port 3128 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 3128 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 67.215.244.172:3128 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇺🇸 donarev419	2026-07-06 07:56:03 (1 week ago)	Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/ ... show more Connection to port 8080 with data transfer. Data preview: GET /squid-internal-mgr/cachemgr.cgi HTTP/1.1 Host: 67.215.244.172:8080 User-Agent: Mozilla/5.0 zg show less	Port Scan Hacking
🇺🇸 jkhorvath.com	2026-07-06 05:54:41 (1 week ago)	Request for URL /squid-internal-mgr/cachemgr.cgi	Phishing Brute-Force Web App Attack
🇩🇪 D3RP4UL	2026-07-05 19:29:27 (1 week ago)	SMB traffic on port 445	Hacking
🇪🇸 Z\|ntrueñigO	2026-07-05 17:57:45 (1 week ago)	Auto-report. Hits=2, Ports=22,14782, Country=-.	SSH
🇩🇪 bensmithurst	2026-07-05 14:46:04 (1 week ago)	2026-07-05T14:46:03.858455+00:00 [TARGET-FQDN] sshd-session[513914]: banner exchange: Connection fro ... show more 2026-07-05T14:46:03.858455+00:00 [TARGET-FQDN] sshd-session[513914]: banner exchange: Connection from 138.68.164.30 port 32848: invalid format 2026-07-05T14:46:03.920748+00:00 [TARGET-FQDN] sshd-session[513915]: banner exchange: Connection from 138.68.164.30 port 32860: invalid format 2026-07-05T14:46:03.982077+00:00 [TARGET-FQDN] sshd-session[513916]: banner exchange: Connection from 138.68.164.30 port 32876: invalid format 2026-07-05T14:46:04.039103+00:00 [TARGET-FQDN] sshd-session[513917]: banner exchange: Connection from 138.68.164.30 port 32888: invalid format 2026-07-05T14:46:04.169300+00:00 [TARGET-FQDN] sshd-session[513919]: banner exchange: Connection from 138.68.164.30 port 32906: invalid format ... [host=MEI***] show less	Brute-Force SSH
🇩🇪 london2038.com	2026-07-05 02:44:53 (1 week ago)	Connection atttempts against closed TCP ports Jul 5 04:44:51 BLOCK SRC=138.68.164.30 LEN=64 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 5 04:44:51 BLOCK SRC=138.68.164.30 LEN=64 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=59489 DPT=9608 WINDOW=65535 RES=0x00 SYN Jul 5 04:44:52 BLOCK SRC=138.68.164.30 LEN=64 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=59505 DPT=8443 WINDOW=65535 RES=0x00 SYN Jul 5 04:44:52 BLOCK SRC=138.68.164.30 LEN=64 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=59505 DPT=29414 WINDOW=65535 RES=0x00 SYN show less	Port Scan
🇨🇦 polycoda	2026-07-05 02:12:30 (1 week ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
🇩🇪 anycast_ac	2026-07-04 03:51:26 (1 week ago)	[mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: ... show more [mirai-detector honeypot] Inbound attack against our honeypot on tcp/8080 (http). Commands captured: $ show less	DDoS Attack IoT Targeted Brute-Force
🇯🇵 jay hung	2026-07-04 00:05:26 (1 week ago)	2026-07-04T00:05:24.742677+00:00 quarktech kernel: [1768181.981936] [UFW BLOCK] IN=eth0 OUT= MAC=22: ... show more 2026-07-04T00:05:24.742677+00:00 quarktech kernel: [1768181.981936] [UFW BLOCK] IN=eth0 OUT= MAC=22:00:92:2e:84:93:fe:ff:ff:ff:ff:ff:08:00 SRC=138.68.164.30 DST=172.237.20.248 LEN=64 TOS=0x00 PREC=0x40 TTL=41 ID=0 DF PROTO=TCP SPT=43539 DPT=24125 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
Anonymous	2026-07-03 11:33:13 (2 weeks ago)	Port scan / connection attempts on ports 85/TCP, 993/TCP, 4444/TCP, 8881/TCP to unused IP	Port Scan
🇺🇸 Cyber Crusader	2026-07-03 09:50:34 (2 weeks ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
Anonymous	2026-07-02 10:45:03 (2 weeks ago)	Port Scanner	Port Scan
🇺🇸 MPL	2026-06-29 00:57:15 (2 weeks ago)	tcp/8087	Port Scan

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2a03:2880:24ff:47::

🇺🇸 159.203.178.128

🇺🇸 152.32.206.74

🇺🇸 64.227.16.240

🇺🇸 2604:a880:2:d1:0:1:51e0:9001

🇩🇪 216.26.243.98

🇩🇪 216.26.243.89

🇬🇷 212.205.6.118

🇺🇸 208.70.11.80

🇹🇭 202.29.242.115

🇳🇱 158.173.20.134

🇭🇰 152.32.251.219

🇫🇮 147.185.133.62

🇭🇰 118.193.39.103

🇮🇳 117.193.74.14

🇪🇸 85.86.218.17

🇩🇪 45.3.42.180

🇬🇧 35.203.211.28

🇹🇼 34.81.36.168

🇺🇸 20.169.106.62