JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.249.234

138.68.249.234 was found in our database!

This IP was reported 19 times. Confidence of Abuse is 71%: ?

71%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.249.234

Whois 138.68.249.234

IP Abuse Reports for 138.68.249.234:

This IP address has been reported a total of 19 times from 13 distinct sources. 138.68.249.234 was first reported on June 28th 2026, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Petre 21_ip	2026-07-14 13:12:08 (6 hours ago)	2026-07-14T15:12:07.945202+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-14T15:12:07.945202+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=138.68.249.234 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=39352 PROTO=TCP SPT=54139 DPT=4443 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-07-14 13:08:56 (6 hours ago)	Blocked by UFW (TCP on 4443) Source port: 54155 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 4443) Source port: 54155 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 138.68.249.234) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-14 06:46:25 (12 hours ago)	Blocked by UFW on LAXHH [2087/tcp] \| SPT: 50643 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [2087/tcp] \| SPT: 50643 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-07-13 17:16:07 (1 day ago)	tcp/110	Port Scan
🇳🇱 BIV	2026-07-13 12:43:50 (1 day ago)	Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 5900. Automated tiered (T-Pot+DSh ... show more Honeypot multi-source hit. Sources: tpot:P0f,tpot:Suricata. Ports: 5900. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇺🇸 MPL	2026-07-13 11:42:59 (1 day ago)	tcp/21 (2 or more attempts)	Port Scan
🇺🇸 Axel	2026-07-13 08:17:17 (1 day ago)	Blocked by UFW on LAXHH [443/tcp] \| SPT: 50231 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [443/tcp] \| SPT: 50231 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-12 08:36:47 (2 days ago)	Blocked by UFW on LAXHH [443/tcp] \| SPT: 44477 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [443/tcp] \| SPT: 44477 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇪🇸 librebit	2026-07-12 02:41:22 (2 days ago)	Brute force	Brute-Force
🇺🇸 Axel	2026-07-10 16:03:20 (4 days ago)	Blocked by UFW on LAXHH [443/tcp] \| SPT: 59242 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [443/tcp] \| SPT: 59242 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 Axel	2026-07-09 09:37:40 (5 days ago)	Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48841 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: gith ... show more Blocked by UFW on LAXHH [8443/tcp] \| SPT: 48841 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 hghosting	2026-07-09 00:14:51 (5 days ago)	CrowdSec auto-report: hg-ja4-direct-origin:known-bad-ja4 — 1 events	Brute-Force SSH
🇺🇸 xxkodedxx	2026-07-08 21:48:49 (5 days ago)	[Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10 ... show more [Zorvexus edge-defense] Edge-block (probe URI / bad UA / hostile vhost) Trigger: 1× edge-block in 10m window. Origin: US / AS14061 DigitalOcean, LLC Active: 21:47:53 UTC Volume: 1 HTTP req Probed: /vpn/js/rdx/core/lang/rdx_en.json.gz Status mix: 400×1 Vhost fishing: 67.217.240.72 UA: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36" Auto-banned 30d. zorvexus-banner. show less	Bad Web Bot Web App Attack
🇳🇵 radheykrishna.com.np	2026-07-03 14:35:55 (1 week ago)	Jul 3 20:20:52 kernel: [6579229.172691] [UFW BLOCK] IN=ens160 OUT= SRC=138.68.249.234 LEN=44 TOS=0x ... show more Jul 3 20:20:52 kernel: [6579229.172691] [UFW BLOCK] IN=ens160 OUT= SRC=138.68.249.234 LEN=44 TOS=0x00 PREC=0x20 TTL=241 ID=60921 PROTO=TCP SPT=49100 DPT=7000 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇵🇱 sefinek.net	2026-07-03 08:15:36 (1 week ago)	Honeypot hit: Empty payload (likely service probe); 5632 [39] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 5632 [39] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 19 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇪🇬 105.180.106.174

🇲🇦 105.157.190.38

🇬🇧 5.252.83.123

🇹🇭 202.29.220.106

🇲🇽 187.154.144.166

🇧🇷 186.195.1.133

🇲🇽 149.88.22.144

🇺🇸 134.122.30.157

🇳🇱 94.157.45.182

🇱🇹 88.119.154.33

🇺🇿 82.215.111.27

🇺🇸 34.228.104.231

🇨🇳 14.103.213.90

🇺🇸 2a04:4e40:e020:0:8bd:e5ee:2e8c:d556

🇺🇸 216.25.89.135

🇧🇷 205.210.31.130

🇷🇺 195.34.241.205

🇨🇴 191.156.18.22

🇳🇱 185.223.235.6

🇧🇷 177.126.10.71