138.68.49.196
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
Abuse Reports
Total reports
94 from
38 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇩🇪 altenglaner |
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
|
Hacking Web App Attack | |
| 🇫🇷 security.rdmc.fr |
Activity from blacklisted IP
|
Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 259 hits on ports [3388] (automated)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/3389 (2 or more attempts)
|
Port Scan | |
| 🇬🇧 sandra361 |
Port scan detected: 5 packets across 1 port (443). | Evidence: REAPER_TARPIT: IN=enp1s0f0 SRC=138.68.49.196 LEN=40 TOS=0x00 PREC=0x00 TTL=49 ID=59928 DF PROTO=TCP SPT=53746 DPT=443 WINDOW=64240 RES=0x00 ACK FIN URGP=0
|
Port Scan | |
| 🇩🇪 reznekcs |
Blocked by UFW firewall
|
Brute-Force | |
| 🇺🇸 MPL |
tcp/3389
|
Port Scan | |
| 🇺🇸 MPL |
tcp/49155 (2 or more attempts)
|
Port Scan | |
| 🇮🇩 solusi247.com |
Wazuh rule 31178: L3: Active Response Trigger by ET CINS Active Threat Intelligence Poor Reputation IP group 183: CINS Poor Reputation IP Blocked.
|
Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 10 hits on ports [9443] (automated)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9312 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 MPL |
tcp/9099
|
Port Scan | |
| 🇵🇱 bart@ |
Automated scan detection against redacted protected targets. Hits=1; port 9030 proto 6 detection dark_ip
|
Port Scan | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8553)
Source port: 47655
TTL: 248
Packet length: 44
TOS: 0x00
This report (for 138.68.49.196) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| Anonymous |
8060/tcp (1 or more attempts)
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown