138.68.191.68
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇬🇧 United Kingdom of Great Britain and Northern Ireland
- City
- London, England
Abuse Reports
Total reports
763 from
49 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 Jochen Pretli |
connection to honeypot
|
Email Spam Port Scan | |
| 🇷🇸 Scan |
MultiHost/MultiPort Probe, Scan, Hack -
|
Port Scan Hacking | |
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: Portscan (1 ports, 1 attempts in 480h, non-TR)
|
Port Scan | |
| 🇮🇱 Ilop |
[v5-99] Firewall dropped 5 unsolicited packet(s) proto=tcp to port(s) 587 from 138.68.191.68 — WAN scan (automated sensor)
|
Port Scan | |
| 🇨🇿 lp |
anomaly: tcp_port_scan, 4205 > threshold 500, repeats 41885 times
|
Port Scan | |
| 🇮🇹 NukeDuke |
Nov 13 00:15:56 my.hidden.domain postfix/submission/smtpd[1231250]: connect from unknown[138.68.191.68]
...
|
Port Scan Hacking | |
| 🇩🇪 EinfxchFinn |
Unauthorized connection attempt to port 587 from 138.68.191.68
|
Port Scan | |
| 🇺🇸 MPL |
tcp/587 (8 or more attempts)
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 2 SMTP-AUTH, SMTP-submission brute-force attempts over the last 24h (latest 2026-11-12T22:22Z).
|
Email Spam Brute-Force | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇺🇸 Phil Schuyler |
Repeated probing against public honeypot services: 2 observed events targeting MAILONEY/25.
|
Port Scan | |
| 🇺🇸 MPL |
tcp/13000
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/1433
|
Port Scan | |
| Anonymous |
Brute Force attempts
|
Brute-Force Exploited Host |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown