JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.177.20

138.68.177.20 was found in our database!

This IP was reported 60 times. Confidence of Abuse is 14%: ?

14%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.177.20

Whois 138.68.177.20

IP Abuse Reports for 138.68.177.20:

This IP address has been reported a total of 60 times from 40 distinct sources. 138.68.177.20 was first reported on April 13th 2021, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-07 13:38:10 (6 days ago)	tcp/8084 (2 or more attempts)	Port Scan
Anonymous	2026-06-07 13:36:14 (6 days ago)	Honeypot hit: HTTP/1.1 request on 55555 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ... show more Honeypot hit: HTTP/1.1 request on 55555 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 55555 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Bad Web Bot
🇧🇷 SOC Blue Team	2026-03-11 07:26:12 (3 months ago)	IPs get by Hunting on SIEM	Phishing Web Spam Port Scan Hacking
🇦🇹 urnilxfgbez	2026-03-10 23:45:00 (3 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Sayrix	2026-03-08 21:13:23 (3 months ago)	2026-03-08T21:12:33.868398+00:00 LYN-HMS-1 sshd-session[4682]: pam_unix(sshd:auth): authentication f ... show more 2026-03-08T21:12:33.868398+00:00 LYN-HMS-1 sshd-session[4682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T21:12:35.780481+00:00 LYN-HMS-1 sshd-session[4682]: Failed password for invalid user dspace from 138.68.177.20 port 57542 ssh2 2026-03-08T21:13:20.015300+00:00 LYN-HMS-1 sshd-session[4700]: Invalid user dspace from 138.68.177.20 port 46354 2026-03-08T21:13:20.051725+00:00 LYN-HMS-1 sshd-session[4700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T21:13:21.978587+00:00 LYN-HMS-1 sshd-session[4700]: Failed password for invalid user dspace from 138.68.177.20 port 46354 ssh2 ... show less	Brute-Force SSH
🇸🇪 wrecker1602	2026-03-08 21:09:13 (3 months ago)	2026-03-08T21:08:31.737149+00:00 WreckersBox sshd[485798]: pam_unix(sshd:auth): authentication failu ... show more 2026-03-08T21:08:31.737149+00:00 WreckersBox sshd[485798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T21:08:34.013611+00:00 WreckersBox sshd[485798]: Failed password for invalid user dspace from 138.68.177.20 port 46750 ssh2 2026-03-08T21:09:12.846098+00:00 WreckersBox sshd[485802]: Invalid user dspace from 138.68.177.20 port 46902 ... show less	Brute-Force SSH
🇬🇧 Heathrxw	2026-03-08 21:08:04 (3 months ago)	Mar 8 21:08:03 s1-jellyfish sshd[3532184]: Invalid user dspace from 138.68.177.20 port 38744 ...	Brute-Force SSH
🇩🇪 david1117	2026-03-08 21:00:21 (3 months ago)	2026-03-08T20:58:42.954287+00:00 api sshd[114687]: Invalid user developer from 138.68.177.20 port 48 ... show more 2026-03-08T20:58:42.954287+00:00 api sshd[114687]: Invalid user developer from 138.68.177.20 port 48208 2026-03-08T20:58:42.973389+00:00 api sshd[114687]: Connection closed by invalid user developer 138.68.177.20 port 48208 [preauth] 2026-03-08T20:59:30.690192+00:00 api sshd[114691]: Invalid user developer from 138.68.177.20 port 49414 2026-03-08T20:59:30.709578+00:00 api sshd[114691]: Connection closed by invalid user developer 138.68.177.20 port 49414 [preauth] 2026-03-08T21:00:19.804361+00:00 api sshd[114702]: Invalid user developer from 138.68.177.20 port 38800 ... show less	Brute-Force SSH
🇳🇱 n0tluc	2026-03-08 21:00:20 (3 months ago)	2026-03-08T20:58:45.066114+00:00 24fire sshd[3389656]: Failed password for invalid user developer fr ... show more 2026-03-08T20:58:45.066114+00:00 24fire sshd[3389656]: Failed password for invalid user developer from 138.68.177.20 port 41022 ssh2 2026-03-08T20:59:30.718085+00:00 24fire sshd[3389867]: Invalid user developer from 138.68.177.20 port 54030 2026-03-08T20:59:30.737921+00:00 24fire sshd[3389867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T20:59:32.412000+00:00 24fire sshd[3389867]: Failed password for invalid user developer from 138.68.177.20 port 54030 ssh2 2026-03-08T21:00:19.781520+00:00 24fire sshd[3390022]: Invalid user developer from 138.68.177.20 port 51720 ... show less	Brute-Force SSH
🇨🇭 WB	2026-03-08 21:00:19 (3 months ago)	siena1: 2026-03-08T20:58:42Z Failed password for invalid user developer 2026-03-08T20:59:28Z Invalid ... show more siena1: 2026-03-08T20:58:42Z Failed password for invalid user developer 2026-03-08T20:59:28Z Invalid user developer 2026-03-08T20:59:28Z authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T20:59:30Z Failed password for invalid user developer 2026-03-08T21:00:18Z Invalid user developer ... show less	Brute-Force SSH
🇸🇬 itachi1706	2026-03-08 20:56:09 (3 months ago)	2026-03-09T04:56:07.973323+08:00 vmi996132.contaboserver.net sshd[3966777]: Invalid user developer f ... show more 2026-03-09T04:56:07.973323+08:00 vmi996132.contaboserver.net sshd[3966777]: Invalid user developer from 138.68.177.20 port 40108 ... show less	Brute-Force SSH
🇫🇷 Sayrix	2026-03-08 20:42:04 (3 months ago)	2026-03-08T20:40:38.367503+00:00 LYN-HMS-1 sshd-session[3822]: Failed password for invalid user debi ... show more 2026-03-08T20:40:38.367503+00:00 LYN-HMS-1 sshd-session[3822]: Failed password for invalid user debian from 138.68.177.20 port 46968 ssh2 2026-03-08T20:41:20.914520+00:00 LYN-HMS-1 sshd-session[3841]: Invalid user debian from 138.68.177.20 port 38388 2026-03-08T20:41:20.944741+00:00 LYN-HMS-1 sshd-session[3841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T20:41:23.145494+00:00 LYN-HMS-1 sshd-session[3841]: Failed password for invalid user debian from 138.68.177.20 port 38388 ssh2 2026-03-08T20:42:03.487853+00:00 LYN-HMS-1 sshd-session[3858]: Invalid user debian from 138.68.177.20 port 52158 ... show less	Brute-Force SSH
🇬🇪 gbzret4d	2026-03-08 20:38:55 (3 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇩🇪 david1117	2026-03-08 20:36:06 (3 months ago)	2026-03-08T20:32:51.304701+00:00 api sshd[114350]: Connection closed by authenticating user daemon 1 ... show more 2026-03-08T20:32:51.304701+00:00 api sshd[114350]: Connection closed by authenticating user daemon 138.68.177.20 port 42068 [preauth] 2026-03-08T20:33:36.671808+00:00 api sshd[114360]: Connection closed by authenticating user debian 138.68.177.20 port 34302 [preauth] 2026-03-08T20:34:26.528394+00:00 api sshd[114379]: Connection closed by authenticating user debian 138.68.177.20 port 56732 [preauth] 2026-03-08T20:35:16.534609+00:00 api sshd[114398]: Connection closed by authenticating user debian 138.68.177.20 port 36160 [preauth] 2026-03-08T20:36:06.030756+00:00 api sshd[114411]: Connection closed by authenticating user debian 138.68.177.20 port 43240 [preauth] ... show less	Brute-Force SSH
🇳🇱 n0tluc	2026-03-08 20:36:06 (3 months ago)	2026-03-08T20:34:28.701230+00:00 24fire sshd[3384045]: Failed password for invalid user debian from ... show more 2026-03-08T20:34:28.701230+00:00 24fire sshd[3384045]: Failed password for invalid user debian from 138.68.177.20 port 60522 ssh2 2026-03-08T20:35:16.460240+00:00 24fire sshd[3384255]: Invalid user debian from 138.68.177.20 port 42558 2026-03-08T20:35:16.471755+00:00 24fire sshd[3384255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.177.20 2026-03-08T20:35:18.869240+00:00 24fire sshd[3384255]: Failed password for invalid user debian from 138.68.177.20 port 42558 ssh2 2026-03-08T20:36:06.017367+00:00 24fire sshd[3384408]: Invalid user debian from 138.68.177.20 port 37372 ... show less	Brute-Force SSH

Showing 1 to 15 of 60 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇵🇰 124.29.226.241

🇬🇧 35.203.210.176

🇸🇬 165.22.60.26

🇺🇸 143.110.134.219

🇺🇦 128.0.104.39

🇻🇳 125.212.244.35

🇵🇭 120.29.69.0

🇺🇸 54.90.114.63

🇺🇸 44.220.188.203

🇧🇷 43.164.192.38

🇮🇷 2.180.201.5

🇬🇪 2.57.217.229

🇮🇩 2406:da19:776:6e01:a726:c324:ccb1:9cc8

🇺🇸 147.185.132.238

🇬🇧 143.110.171.121

🇰🇷 118.33.53.200

🇳🇱 91.92.40.45

🇬🇧 45.82.76.110

🇸🇬 34.126.89.76

🇺🇸 162.216.150.134