138.68.40.187
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
No reports in the last 60 days
138.68.40.187 has been reported 22 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
22 from
21 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇹 CoreTech srl |
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
|
Hacking | |
| 🇳🇱 hxsain |
Blocked by UFW [10801/tcp] | SPT: 63333 | TTL: 45 | LEN: 64 | TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇩🇪 centurion |
Blocked by UFW on ns02 [443/tcp] Source port: 65492 TTL: 47 Packet length: 64 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan Web App Attack | |
| Anonymous |
Port Scanner
|
Port Scan | |
| 🇩🇪 wlt-blocker |
Illegal port scans
|
Port Scan | |
| 🇫🇷 thecocasio |
PortSentry honeypot: unsolicited TCP connection to closed decoy port 3389 (RDP) on a host running no such service. Automated port-scan detection at 2026-08-10T23:32:09Z.
|
Port Scan | |
| 🇸🇪 NordhTech |
More than 3 malicious connection attempts, trying port(s) 14782/tcp, then blocked from services ...
|
Port Scan Hacking | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 3128/tcp, 8080/tcp, 22249/tcp, 29840/tcp, 29842/tcp
|
Port Scan | |
| 🇹🇭 Sawasdee |
Port Scan
...
|
Port Scan | |
| 🇩🇪 Honeypot-EU-Fru |
1786323618 - 08/10/2026 03:00:18 Host: 138.68.40.187/138.68.40.187 Port: 88 TCP Blocked
...
|
Port Scan | |
| 🇩🇪 dispaisyenterprises |
Honeypot [fra-de-honeypot]: Unauthorized traffic (122 bytes of payload); 1400 [1], 4443 [1], 4433 [1], 1443 [1], 7443 [1], 1985 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇩🇪 sandra361 |
Port scan detected: 14 attempts across 4 ports (3128,8080,22249,29842). | Evidence: GHOST_SCAN: IN=ens3 SRC=138.68.40.187 LEN=60 TOS=0x00 PREC=0x00 TTL=59 ID=36187 DF PROTO=TCP SPT=59888 DPT=29842 WINDOW=64240 RES=0x00 SYN URGP=0
|
Port Scan | |
| 🇩🇪 ITSNF |
Blocked by os-abuseipdb; 19 hits, proto=tcp, ports=22249,29840,29842,3128,8080
|
Port Scan Hacking | |
| 🇫🇷 wiredalter |
Blocked by fail2ban on o2VPS [53/tcp]
Source Port: 56869
TTL: 42
Packet Length: 22
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Brute-Force SSH | |
| Anonymous |
Portscan: TCP/3389 (36x), TCP/3390 (36x)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown