JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.231.56

138.68.231.56 was found in our database!

This IP was reported 117 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.231.56

Whois 138.68.231.56

IP Abuse Reports for 138.68.231.56:

This IP address has been reported a total of 117 times from 69 distinct sources. 138.68.231.56 was first reported on July 1st 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 ghostwarriors	2026-07-14 12:50:31 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇺🇸 SANYALnet Labs	2026-07-14 12:27:22 (1 day ago)	Jul 14 12:27:15 sanyalnet-oracle-vps2 sshd[2382374]: pam_unix(sshd:auth): authentication failure; lo ... show more Jul 14 12:27:15 sanyalnet-oracle-vps2 sshd[2382374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.231.56 user=root Jul 14 12:27:17 sanyalnet-oracle-vps2 sshd[2382374]: Failed none for invalid user root from 138.68.231.56 port 55336 ssh2 Jul 14 12:27:20 sanyalnet-oracle-vps2 sshd[2382374]: Failed password for invalid user root from 138.68.231.56 port 55336 ssh2 ... show less	Brute-Force
🇩🇪 Viveronese	2026-07-14 11:27:00 (1 day ago)	SSH brute force attacks	Brute-Force SSH
🇮🇳 Mr.Singh	2026-07-14 09:30:05 (1 day ago)	NFT blocked 138.68.231.56 on 14-Jul-2026..	Port Scan Brute-Force
🇳🇱 donarev419	2026-07-14 07:10:33 (1 day ago)	2026-07-14T09:10:31.047404+02:00 donarev419.com sshd[3858142]: pam_unix(sshd:auth): authentication f ... show more 2026-07-14T09:10:31.047404+02:00 donarev419.com sshd[3858142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.231.56 user=root 2026-07-14T09:10:33.164093+02:00 donarev419.com sshd[3858142]: Failed password for root from 138.68.231.56 port 35168 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-14 05:57:55 (1 day ago)	138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 se ... show more 138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 14 01:57:53 server5 sshd[24212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.231.56 user=root Jul 14 01:48:16 server5 sshd[20216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.69.226.76 user=root Jul 14 01:48:18 server5 sshd[20216]: Failed password for root from 118.69.226.76 port 58252 ssh2 Jul 14 01:47:47 server5 sshd[20122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.6.41.4 user=root Jul 14 01:47:49 server5 sshd[20122]: Failed password for root from 59.6.41.4 port 38798 ssh2 Jul 14 01:54:20 server5 sshd[22949]: Failed password for root from 87.106.198.149 port 38432 ssh2 IP Addresses Blocked: show less	Brute-Force
🇫🇷 Hiigara	2026-07-14 02:00:36 (2 days ago)	connection attempt : 138.68.231.56 on port : tcp/22 (SSH)	Port Scan
🇫🇷 Asaman	2026-07-14 01:51:01 (2 days ago)	2026-07-11T04:41:14.112859+02:00 aligw01.aneirin.net sshd-session[3007]: Failed password for root fr ... show more 2026-07-11T04:41:14.112859+02:00 aligw01.aneirin.net sshd-session[3007]: Failed password for root from 138.68.231.56 port 55844 ssh2 2026-07-11T04:41:15.467941+02:00 aligw01.aneirin.net sshd-session[3007]: Connection closed by authenticating user root 138.68.231.56 port 55844 [preauth] 2026-07-14T03:51:00.287925+02:00 aligw01.aneirin.net sshd-session[6677]: Failed password for root from 138.68.231.56 port 54730 ssh2 ... show less	Brute-Force SSH
🇸🇪 Mailz1	2026-07-13 23:21:38 (2 days ago)	Jul 14 01:21:36 smtp sshd[962443]: Failed password for invalid user root from 138.68.231.56 port 446 ... show more Jul 14 01:21:36 smtp sshd[962443]: Failed password for invalid user root from 138.68.231.56 port 44684 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigwavedave	2026-07-13 23:17:16 (2 days ago)	SSH	Brute-Force SSH
🇦🇹 urnilxfgbez	2026-07-13 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 rd1742	2026-07-13 19:49:40 (2 days ago)	2026-07-13 19:49:40,131 quad proftpd[170660] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (138.68.231.56[138 ... show more 2026-07-13 19:49:40,131 quad proftpd[170660] 2a03:4000:3e:312:360a:466c:8ea1:45b9 (138.68.231.56[138.68.231.56]): USER root: no such user found from 138.68.231.56 [138.68.231.56] to 2.56.97.107:22 show less	Brute-Force Exploited Host SSH
Anonymous	2026-07-13 15:13:41 (2 days ago)	138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 se ... show more 138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 13 11:06:03 server5 sshd[10100]: Failed password for root from 223.197.178.95 port 47791 ssh2 Jul 13 11:06:47 server5 sshd[10216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.231.56 user=root Jul 13 11:13:35 server5 sshd[11572]: Failed password for root from 179.27.99.9 port 49478 ssh2 Jul 13 11:11:58 server5 sshd[11284]: Failed password for root from 112.119.21.245 port 59556 ssh2 Jul 13 11:06:48 server5 sshd[10216]: Failed password for root from 138.68.231.56 port 54034 ssh2 Jul 13 11:06:02 server5 sshd[10100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.178.95 user=root IP Addresses Blocked: 223.197.178.95 (HK/Hong Kong/-) show less	Brute-Force
🇩🇪 vcis.de	2026-07-13 08:32:07 (2 days ago)	SSH brute force attack detected from [138.68.231.56]	SSH Brute-Force
Anonymous	2026-07-13 05:38:56 (2 days ago)	138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 se ... show more 138.68.231.56 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 13 01:26:48 server5 sshd[32414]: Failed password for root from 5.189.34.25 port 59636 ssh2 Jul 13 01:28:44 server5 sshd[626]: Failed password for root from 161.97.179.250 port 60226 ssh2 Jul 13 01:38:51 server5 sshd[3589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.231.56 user=root Jul 13 01:22:44 server5 sshd[31383]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=199.195.252.227 user=root Jul 13 01:22:46 server5 sshd[31383]: Failed password for root from 199.195.252.227 port 59118 ssh2 Jul 13 01:26:45 server5 sshd[32414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.189.34.25 user=root IP Addresses Blocked: 5.189.34.25 (RU/Russia/-) 161.97.179.250 (US/United States/-) show less	Brute-Force

Showing 1 to 15 of 117 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 183.151.103.18

🇧🇪 91.86.92.45

🇮🇪 18.201.160.76

🇵🇰 223.123.125.178

🇺🇸 195.184.76.105

🇵🇦 190.141.120.184

🇺🇸 162.216.149.121

🇭🇰 152.32.215.226

🇺🇸 142.147.240.229

🇩🇪 130.12.180.109

🇵🇹 87.103.126.54

🇺🇸 74.235.96.117

🇳🇱 45.148.10.152

🇵🇹 45.95.13.15

🇸🇬 43.156.250.17

🇺🇸 9.234.8.67

🇺🇸 2a09:bac1:76a0:460::5e:46

🇺🇸 207.90.244.21

🇮🇩 202.93.133.140

🇧🇪 198.235.24.215