JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.189.196

138.68.189.196 was found in our database!

This IP was reported 162 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.189.196

Whois 138.68.189.196

IP Abuse Reports for 138.68.189.196:

This IP address has been reported a total of 162 times from 113 distinct sources. 138.68.189.196 was first reported on June 3rd 2023, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇿🇦 agentics	2026-04-01 02:16:06 (2 months ago)	138.68.189.196 report :	DDoS Attack FTP Brute-Force Port Scan Hacking Spoofing Brute-Force Exploited Host
🇹🇷 rtbh.com.tr	2026-03-06 20:11:55 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇭 Sawasdee	2026-03-05 07:30:05 (3 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 MPL	2026-03-05 07:28:34 (3 months ago)	tcp/443 (2 or more attempts)	Port Scan
🇺🇸 RAP	2026-03-05 06:44:58 (3 months ago)	2026-03-05 06:44:58 UTC Unauthorized activity to TCP port 8089. Web App	Port Scan Web App Attack
🇳🇱 donarev419	2026-03-05 06:10:38 (3 months ago)	Connection to port 1912 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155 Conne ... show more Connection to port 1912 with data transfer. Data preview: GET / HTTP/1.1 Host: 87.229.95.155 Connection: keep-alive sec-ch-ua: "Chromium";v="142", "Not:A-B show less	Port Scan Hacking
🇨🇦 Daniel Gomez	2026-03-05 03:11:17 (3 months ago)	Postfix: Protocol/Spam violation	Email Spam
🇺🇸 drewf.ink	2026-03-05 02:09:31 (3 months ago)	[02:09] Port scanning. Port(s) scanned: TCP/465	Port Scan
🇦🇷 Bruno	2026-03-05 02:00:46 (3 months ago)	Port Scanner: 138.68.189.196	Port Scan
🇹🇷 rtbh.com.tr	2026-03-04 20:11:53 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇭 WB	2026-03-04 15:15:09 (3 months ago)	siena1: 2026-03-04T15:14:25Z authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138. ... show more siena1: 2026-03-04T15:14:25Z authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.189.196 2026-03-04T15:14:26Z Failed password for invalid user weblogic 2026-03-04T15:15:06Z Invalid user weblogic 2026-03-04T15:15:06Z authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.189.196 2026-03-04T15:15:08Z Failed password for invalid user weblogic ... show less	Brute-Force SSH
🇩🇪 david1117	2026-03-04 15:14:26 (3 months ago)	2026-03-04T15:12:56.684917+00:00 api sshd[67773]: Invalid user weblogic from 138.68.189.196 port 397 ... show more 2026-03-04T15:12:56.684917+00:00 api sshd[67773]: Invalid user weblogic from 138.68.189.196 port 39768 2026-03-04T15:12:57.110506+00:00 api sshd[67773]: Connection closed by invalid user weblogic 138.68.189.196 port 39768 [preauth] 2026-03-04T15:13:38.707387+00:00 api sshd[67775]: Invalid user weblogic from 138.68.189.196 port 60516 2026-03-04T15:13:38.744646+00:00 api sshd[67775]: Connection closed by invalid user weblogic 138.68.189.196 port 60516 [preauth] 2026-03-04T15:14:21.008211+00:00 api sshd[67782]: Invalid user weblogic from 138.68.189.196 port 36488 ... show less	Brute-Force SSH
🇧🇩 Md Sakibur Rahman	2026-03-04 15:13:23 (3 months ago)	2026-03-04T21:13:20.243647+06:00 zabbix sshd[239496]: pam_unix(sshd:auth): authentication failure; l ... show more 2026-03-04T21:13:20.243647+06:00 zabbix sshd[239496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.189.196 2026-03-04T21:13:22.364355+06:00 zabbix sshd[239496]: Failed password for invalid user weblogic from 138.68.189.196 port 38222 ssh2 ... show less	Brute-Force SSH
🇳🇱 FREAKISH	2026-03-04 15:03:44 (3 months ago)	Mar 4 15:03:41 mail sshd[1266702]: Invalid user nagios from 138.68.189.196 port 33342 Mar 4 15:03: ... show more Mar 4 15:03:41 mail sshd[1266702]: Invalid user nagios from 138.68.189.196 port 33342 Mar 4 15:03:41 mail sshd[1266702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.189.196 Mar 4 15:03:43 mail sshd[1266702]: Failed password for invalid user nagios from 138.68.189.196 port 33342 ssh2 ... show less	Hacking Brute-Force SSH
🇺🇸 aboschke	2026-03-04 15:00:26 (3 months ago)	SSH brute force attempt. Tried invalid user: www-data	Brute-Force SSH

Showing 1 to 15 of 162 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 185.223.235.39

🇹🇼 101.13.4.119

🇺🇸 98.47.197.220

🇺🇸 91.230.168.19

🇨🇳 60.174.35.18

🇪🇹 196.188.93.169

🇨🇱 186.189.108.64

🇮🇳 182.95.181.138

🇧🇷 152.243.91.162

🇺🇸 135.237.127.172

🇭🇰 103.210.22.105

🇷🇴 92.118.39.62

🇱🇹 81.30.98.158

🇳🇱 193.176.31.218

🇮🇳 182.95.181.50

🇮🇳 182.95.42.130

🇨🇳 113.140.95.2

🇺🇸 107.0.200.227

🇧🇩 103.213.236.95

🇫🇷 91.231.89.104