JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.173.66

138.68.173.66 was found in our database!

This IP was reported 12 times. Confidence of Abuse is 11%: ?

11%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.173.66

Whois 138.68.173.66

IP Abuse Reports for 138.68.173.66:

This IP address has been reported a total of 12 times from 11 distinct sources. 138.68.173.66 was first reported on March 21st 2021, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 zupan	2026-05-24 12:16:16 (1 month ago)	Blocked by UFW on vps [6939/tcp] \| SPT: 61004 \| TTL: 245 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on vps [6939/tcp] \| SPT: 61004 \| TTL: 245 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇮🇳 Mr.Singh	2026-05-22 06:30:07 (1 month ago)	NFT blocked 138.68.173.66 on 22-May-2026..	Port Scan Brute-Force
🇺🇸 MPL	2026-05-22 05:06:09 (1 month ago)	tcp/8000	Port Scan
🇮🇪 Coolnagour	2026-03-23 02:30:24 (3 months ago)	http-probing: /dispatch/operator/overview/favicon.ico	Web App Attack
🇫🇷 masterguru	2026-01-18 09:59:04 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.173.66 (GB/United Kingdom/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.173.66 (GB/United Kingdom/-): 1 in the last 3600 secs (0-193) show less	Hacking
🇩🇪 Admins@FBN	2026-01-18 08:30:38 (5 months ago)	FW-PortScan: Traffic Blocked srcport=61009 dstport=8443	Port Scan
🇯🇵 stfw	2021-03-21 19:49:44 (5 years ago)	22/tcp [2021-03-21]1pkt	Port Scan
🇩🇪 www.blocklist.de	2021-03-21 19:08:40 (5 years ago)	Lines containing failures of 138.68.173.66 Mar 21 23:27:45 v2hgb sshd[3346]: Did not receive identif ... show more Lines containing failures of 138.68.173.66 Mar 21 23:27:45 v2hgb sshd[3346]: Did not receive identification string from 138.68.173.66 port 36042 Mar 21 23:27:45 v2hgb sshd[3347]: Did not receive identification string from 138.68.173.66 port 55422 Mar 21 23:27:45 v2hgb sshd[3345]: Did not receive identification string from 138.68.173.66 port 60962 Mar 21 23:28:03 v2hgb sshd[3403]: Invalid user 46.101.34.112 from 138.68.173.66 port 45636 Mar 21 23:28:03 v2hgb sshd[3403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.173.66 Mar 21 23:28:05 v2hgb sshd[3403]: Failed password for invalid user 46.101.34.112 from 138.68.173.66 port 45636 ssh2 Mar 21 23:28:06 v2hgb sshd[3403]: Received disconnect from 138.68.173.66 port 45636:11: Normal Shutdown, Thank you for playing [preauth] Mar 21 23:28:06 v2hgb sshd[3403]: Disconnected from invalid user 46.101.34.112 138.68.173.66 port 45636 [preauth] Mar 21 23:28:14 v2hgb sshd[3413]: Invalid........ ------------------------------ show less	FTP Brute-Force Hacking
🇫🇷 Teor Logico	2021-03-21 18:52:10 (5 years ago)	Mar 21 23:52:07 host-134-119-215-243 sshd[5876]: pam_unix(sshd:auth): authentication failure; lognam ... show more Mar 21 23:52:07 host-134-119-215-243 sshd[5876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.173.66 Mar 21 23:52:10 host-134-119-215-243 sshd[5876]: Failed password for invalid user 134.175.117.8 from 138.68.173.66 port 43688 ssh2 show less	Brute-Force SSH
🇩🇪 www.blocklist.de	2021-03-21 18:43:34 (5 years ago)	Lines containing failures of 138.68.173.66 Mar 21 23:27:45 v2hgb sshd[3346]: Did not receive identif ... show more Lines containing failures of 138.68.173.66 Mar 21 23:27:45 v2hgb sshd[3346]: Did not receive identification string from 138.68.173.66 port 36042 Mar 21 23:27:45 v2hgb sshd[3347]: Did not receive identification string from 138.68.173.66 port 55422 Mar 21 23:27:45 v2hgb sshd[3345]: Did not receive identification string from 138.68.173.66 port 60962 Mar 21 23:28:03 v2hgb sshd[3403]: Invalid user 46.101.34.112 from 138.68.173.66 port 45636 Mar 21 23:28:03 v2hgb sshd[3403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.173.66 Mar 21 23:28:05 v2hgb sshd[3403]: Failed password for invalid user 46.101.34.112 from 138.68.173.66 port 45636 ssh2 Mar 21 23:28:06 v2hgb sshd[3403]: Received disconnect from 138.68.173.66 port 45636:11: Normal Shutdown, Thank you for playing [preauth] Mar 21 23:28:06 v2hgb sshd[3403]: Disconnected from invalid user 46.101.34.112 138.68.173.66 port 45636 [preauth] Mar 21 23:28:14 v2hgb sshd[3413]: Invalid........ ------------------------------ show less	FTP Brute-Force Hacking
🇷🇺 rozenov	2021-03-21 18:28:22 (5 years ago)	2021-03-22T01:28:21.366945vpn.rozenov.com sshd[6673]: Invalid user 46.101.34.112 from 138.68.173.66 ... show more 2021-03-22T01:28:21.366945vpn.rozenov.com sshd[6673]: Invalid user 46.101.34.112 from 138.68.173.66 port 42342 2021-03-22T01:28:21.372639vpn.rozenov.com sshd[6673]: error: maximum authentication attempts exceeded for invalid user 46.101.34.112 from 138.68.173.66 port 42342 ssh2 [preauth] 2021-03-22T01:28:21.372705vpn.rozenov.com sshd[6673]: Disconnecting: Too many authentication failures [preauth] ... show less	Brute-Force SSH
🇫🇷 RikoDEV	2021-03-21 18:28:13 (5 years ago)	Mar 21 23:28:11 ip106 sshd[17144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Mar 21 23:28:11 ip106 sshd[17144]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.173.66 Mar 21 23:28:13 ip106 sshd[17144]: Failed password for invalid user 46.101.34.112 from 138.68.173.66 port 57442 ssh2 ... show less	Brute-Force SSH

Showing 1 to 12 of 12 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 221.10.221.104

🇺🇸 157.230.184.20

🇺🇸 136.64.189.93

🇺🇸 135.237.123.254

🇨🇳 120.52.18.229

🇧🇩 103.165.92.255

🇺🇸 75.112.23.30

🇳🇱 45.148.10.151

🇷🇺 45.91.64.6

🇻🇳 221.132.16.114

🇩🇪 194.88.98.118

🇨🇳 111.7.96.136

🇳🇱 89.21.67.162

🇺🇸 64.62.156.74

🇯🇵 13.208.164.201

🇲🇲 202.165.88.176

🇸🇨 196.251.121.125

🇩🇪 167.172.108.213

🇺🇸 66.132.195.27

🇨🇳 61.164.252.244