JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.239.229

138.68.239.229 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 79%: ?

79%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.239.229

Whois 138.68.239.229

IP Abuse Reports for 138.68.239.229:

This IP address has been reported a total of 13 times from 12 distinct sources. 138.68.239.229 was first reported on October 15th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 polycoda	2026-10-16 19:29:30 (3 hours ago)	AutoBlock: 📡 Port Scan (Non Decay-Based)	Port Scan
Anonymous	2026-10-16 16:10:25 (6 hours ago)	Remote command execution attempt.	Hacking
🇬🇧 Deveroonie	2026-10-16 08:43:11 (14 hours ago)	2026-10-16T08:43:11.504832+00:00 instance-20241019-1127 sshd[4058818]: banner exchange: Connection f ... show more 2026-10-16T08:43:11.504832+00:00 instance-20241019-1127 sshd[4058818]: banner exchange: Connection from 138.68.239.229 port 60614: invalid format ... show less	Hacking Brute-Force SSH
🇫🇷 Hiigara	2026-10-16 03:01:20 (20 hours ago)	connection attempt : 138.68.239.229 on port : tcp/8888 (Unknown)	Port Scan
🇲🇳 Public CSIRT/CC of Mongolia	2026-10-16 02:55:30 (20 hours ago)	Honeypot hit: HTTP/1.1 request on 2082 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ... show more Honeypot hit: HTTP/1.1 request on 2082 GET / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Accept: / Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,en;q=0.7,*;q=0.5; 2082 [1] TCP show less	Web App Attack
🇵🇹 Deceptr	2026-10-16 02:51:14 (20 hours ago)	Unauthorized Connection Attempt	Port Scan
🇷🇸 Scan	2026-10-16 00:24:33 (22 hours ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇷🇸 Smel	2026-10-16 00:22:03 (22 hours ago)	SIP/5060 Probe, Scan, BF, Hack -	Fraud VoIP Port Scan Hacking Brute-Force
🇺🇸 xmission.com	2026-10-15 13:46:57 (1 day ago)	Blocked by UFW (TCP on 443) Source port: 12618 TTL: 119 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 443) Source port: 12618 TTL: 119 Packet length: 44 TOS: 0x00 This report (for 138.68.239.229) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇺🇸 xmission.com	2026-10-15 13:21:34 (1 day ago)	Blocked by UFW (TCP on 554) Source port: 12469 TTL: 119 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 554) Source port: 12469 TTL: 119 Packet length: 44 TOS: 0x00 This report (for 138.68.239.229) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-10-15 12:30:02 (1 day ago)	2026-10-15T14:30:01.072364+02:00 vps kernel: [8438174.191476] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ... show more 2026-10-15T14:30:01.072364+02:00 vps kernel: [8438174.191476] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=138.68.239.229 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=107 ID=46678 DF PROTO=TCP SPT=12171 DPT=23 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇫🇷 sthoyer.de	2026-10-15 10:15:57 (1 day ago)	Oct 15 12:14:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd: ... show more Oct 15 12:14:24 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=138.68.239.229 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=119 ID=41079 DF PROTO=TCP SPT=11385 DPT=7170 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:14:38 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=138.68.239.229 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=119 ID=41671 DF PROTO=TCP SPT=11386 DPT=8083 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:15:05 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=138.68.239.229 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=119 ID=46984 DF PROTO=TCP SPT=11388 DPT=3128 WINDOW=65280 RES=0x00 SYN URGP=0 Oct 15 12:15:41 sthoyer kernel: [IPTables-Dropped-I] IN=eth0 OUT= MAC=00:50:56:43:00:af:c0:69:11:cd:10:f7:08:00 SRC=138.68.239.229 DST=173.212.223.67 LEN=44 TOS=0x00 PREC=0x00 TTL=119 ID=41429 DF PROTO=TCP SPT=11391 DPT=899 ... show less	Port Scan
🇳🇱 ras07	2026-10-15 10:00:11 (1 day ago)	Brute force SSH login attempts.	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 222.172.214.73

🇬🇧 206.189.25.140

🇳🇱 195.178.110.227

🇹🇷 179.61.129.130

🇨🇴 177.93.63.39

🇬🇧 165.232.38.37

🇺🇸 162.216.149.219

🇺🇸 134.128.70.46

🇳🇱 109.160.32.152

🇬🇭 102.221.31.51

🇷🇴 92.118.39.77

🇺🇸 68.227.77.110

🇫🇷 45.154.138.239

🇺🇸 34.28.77.218

🇺🇸 216.25.89.124

🇬🇧 178.62.108.86

🇧🇷 170.239.157.110

🇭🇰 103.117.145.130

🇰🇿 89.218.51.222

🇺🇸 34.46.199.48