JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.3.196

138.68.3.196 was found in our database!

This IP was reported 43 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	sfo2-63.barium.do.prod.binaryedge.ninja
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.3.196

Whois 138.68.3.196

IP Abuse Reports for 138.68.3.196:

This IP address has been reported a total of 43 times from 23 distinct sources. 138.68.3.196 was first reported on May 6th 2026, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇵 radheykrishna.com.np	2026-08-28 13:12:29 (1 hour ago)	Aug 28 18:57:28 kernel: [1638909.158977] [UFW BLOCK] IN=ens160 OUT= SRC=138.68.3.196 LEN=44 TOS=0x00 ... show more Aug 28 18:57:28 kernel: [1638909.158977] [UFW BLOCK] IN=ens160 OUT= SRC=138.68.3.196 LEN=44 TOS=0x00 PREC=0x00 TTL=246 ID=34476 PROTO=TCP SPT=41673 DPT=1234 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇩🇪 ValtonTahiri	2026-08-28 12:08:26 (2 hours ago)	UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ... show more UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=138.68.3.196; proto=TCP; source_port=58266; target_port=1200; flags=SYN show less	Port Scan
🇺🇸 MPL	2026-08-28 12:02:21 (2 hours ago)	tcp/1200	Port Scan
🇧🇷 diego	2026-08-28 10:56:45 (4 hours ago)	[rede-44-49] 08/28/2026-07:56:44.816297, 138.68.3.196, Protocol: 6, ET CINS Active Threat Intelligen ... show more [rede-44-49] 08/28/2026-07:56:44.816297, 138.68.3.196, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 173 show less	Hacking
🇺🇸 xmission.com	2026-08-28 09:32:54 (5 hours ago)	Blocked by UFW (TCP on 1110) Source port: 48689 TTL: 245 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 1110) Source port: 48689 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 138.68.3.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-28 09:01:43 (5 hours ago)	1089/tcp (1 or more attempts)	Port Scan
🇫🇮 6kilowatti	2026-08-28 05:27:09 (9 hours ago)	2026-08-28T08:27:08.350383+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-08-28T08:27:08.350383+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=138.68.3.196 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=233 ID=49840 PROTO=TCP SPT=53439 DPT=990 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇮🇹 CoreTech srl	2026-08-28 05:17:08 (9 hours ago)	[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact	Hacking
🇩🇪 David Ferneding	2026-08-28 04:56:31 (10 hours ago)	Blocked by UFW (TCP on 902) Source port: 51951 TTL: 236 Packet length: 44 TOS: 0x00 This report (fo ... show more Blocked by UFW (TCP on 902) Source port: 51951 TTL: 236 Packet length: 44 TOS: 0x00 This report (for 138.68.3.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-28 04:51:58 (10 hours ago)	Blocked by firewall on hugin [902/tcp] \| Rule: UFW \| SPT: 51935 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [902/tcp] \| Rule: UFW \| SPT: 51935 \| TTL: 238 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 vtchost.com	2026-08-28 04:43:40 (10 hours ago)	2026-08-28T06:43:39.791922+02:00 vmi3491693 kernel: [ 9566.932281] PORTSCAN: IN=eth0 OUT= MAC=00:50: ... show more 2026-08-28T06:43:39.791922+02:00 vmi3491693 kernel: [ 9566.932281] PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:3e:63:c0:69:11:b3:a9:ed:08:00 SRC=138.68.3.196 DST=169.58.138.2 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=47593 PROTO=TCP SPT=51935 DPT=902 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 Axel	2026-08-28 02:25:40 (12 hours ago)	Blocked by UFW on LAXHH [771/tcp] \| SPT: 43742 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on LAXHH [771/tcp] \| SPT: 43742 \| TTL: 247 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-08-27 21:11:01 (17 hours ago)	Blocked by UFW (TCP on 554) Source port: 43973 TTL: 245 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 554) Source port: 43973 TTL: 245 Packet length: 44 TOS: 0x08 This report (for 138.68.3.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 VMHeaven.io	2026-08-27 18:44:53 (20 hours ago)	Blocked by UFW [515/tcp] Source port: 55660 TTL: 240 Packet length: 44	Port Scan
🇺🇸 MPL	2026-08-27 14:25:30 (1 day ago)	tcp/264 (2 or more attempts)	Port Scan

Showing 1 to 15 of 43 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.30

🇺🇸 184.105.139.69

🇲🇽 46.250.170.82

🇲🇽 200.68.182.117

🇩🇪 194.88.98.90

🇦🇷 181.117.136.152

🇺🇸 172.180.64.97

🇺🇸 172.120.57.19

🇳🇱 142.93.129.28

🇺🇸 135.233.112.109

🇧🇬 79.124.59.106

🇨🇳 49.64.136.28

🇸🇬 47.82.158.18

🇸🇳 41.214.10.178

🇺🇸 34.55.212.98

🇺🇸 34.10.139.186

🇺🇸 20.83.179.146

🇬🇧 217.146.80.100

🇺🇸 185.61.223.33

🇺🇸 184.105.247.242