JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.68.52.177

Recent Activity

Abuse Confidence Score

100% Critical

141 reports

121 reporters · latest 15 hours ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Santa Clara, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

141 from 121 distinct reporters

First reported

October 13th 2026

Most recent report

15 hours ago

Last 60 days

Top reporter locations 🇩🇪 Germany 35 🇺🇸 United States of America 26 🇫🇷 France 15

Most common categories SSH 129 Brute-Force 124 Port Scan 16 Hacking 3 Exploited Host 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 SentinalX by uzumaru	2026-11-15 00:50:16 UTC · (15 hours ago)	SSH brute-force detected: 5 failed login attempts in the last 1 hour.	Brute-Force SSH
🇺🇸 George0phile	2026-11-15 00:00:37 UTC · (16 hours ago)	SSH brute force on port 22 -- 16 attempts, 1 successful. Credentials: root:***************************************************************************************************************************************************************************** ... show more SSH brute force on port 22 -- 16 attempts, 1 successful. Credentials: root:*************************************************************************************************************************************************************************************************************************************************************, adm1n:Adm1n1str@t0r, admin:****************************************************************************************************************************************************************************************************************************************************************************************************************************************************. Active: 2026-11-14T23:26 to 2026-11-14T23:58. Post-login: /usr/sbin/sshd -D -R; /usr/bin/env python3 /usr/local/bin/honeypot_pam.py; ausearch -i -k command --checkpoint /var/lib/honeypot/audit_. Malware: miner (critical); trojan (high); trojan (critical). Source: AS14061 DigitalOcean, LLC (Santa Clara, US). Data from show less	Brute-Force SSH IoT Targeted
🇺🇸 knock	2026-11-14 23:58:36 UTC · (16 hours ago)	Knock-Knock honeypot brute-force: SSH (16 total hits)	Brute-Force SSH
🇫🇷 Kejult	2026-11-14 23:45:32 UTC · (16 hours ago)	Honeypot Finding: SSH brute-force on TCP/22; 7 failed login attempts.	Brute-Force SSH
🇺🇸 zensatori	2026-11-14 23:41:33 UTC · (16 hours ago)	CrowdSec on a home server: slow SSH brute force (21 events)	Brute-Force SSH
🇫🇷 alps.one	2026-11-14 23:40:02 UTC · (16 hours ago)	Nov 15 00:29:28 vmi291233 sshd[371820]: Invalid user alpine from 138.68.52.177 port 34304 Nov 15 00:33:58 vmi291233 sshd[371839]: Invalid user ubuntu from 138.68.52.177 port 36410 Nov 15 00:35:58 vmi291233 sshd[371849]: Invalid user solana from 138.6 ... show more Nov 15 00:29:28 vmi291233 sshd[371820]: Invalid user alpine from 138.68.52.177 port 34304 Nov 15 00:33:58 vmi291233 sshd[371839]: Invalid user ubuntu from 138.68.52.177 port 36410 Nov 15 00:35:58 vmi291233 sshd[371849]: Invalid user solana from 138.68.52.177 port 56358 Nov 15 00:37:58 vmi291233 sshd[371860]: Invalid user firedancer from 138.68.52.177 port 33254 Nov 15 00:40:01 vmi291233 sshd[371969]: Invalid user user1 from 138.68.52.177 port 38142 show less	Brute-Force SSH
🇺🇸 thardie	2026-11-14 23:39:38 UTC · (16 hours ago)	2026-11-14T15:29:03.081160-08:00 orcas sshd[24106]: Invalid user alpine from 138.68.52.177 2026-11-14T15:33:32.799787-08:00 orcas sshd[39793]: Invalid user ubuntu from 138.68.52.177 2026-11-14T15:35:35.322108-08:00 orcas sshd[46830]: Invalid user sol ... show more 2026-11-14T15:29:03.081160-08:00 orcas sshd[24106]: Invalid user alpine from 138.68.52.177 2026-11-14T15:33:32.799787-08:00 orcas sshd[39793]: Invalid user ubuntu from 138.68.52.177 2026-11-14T15:35:35.322108-08:00 orcas sshd[46830]: Invalid user solana from 138.68.52.177 2026-11-14T15:37:34.436725-08:00 orcas sshd[4246]: Invalid user firedancer from 138.68.52.177 2026-11-14T15:39:37.640624-08:00 orcas sshd[12084]: Invalid user user1 from 138.68.52.177 ... show less	Brute-Force SSH
🇰🇷 Indexyz	2026-11-14 23:39:27 UTC · (16 hours ago)	2026-11-15T07:35:24.958586+08:00 hostname sshd-session[939790]: Invalid user solana from 138.68.52.177 port 59018 2026-11-15T07:37:23.212956+08:00 hostname sshd-session[939806]: Connection from 138.68.52.177 port 51104 on 10.0.0.24 port 22 rdomai ... show more 2026-11-15T07:35:24.958586+08:00 hostname sshd-session[939790]: Invalid user solana from 138.68.52.177 port 59018 2026-11-15T07:37:23.212956+08:00 hostname sshd-session[939806]: Connection from 138.68.52.177 port 51104 on 10.0.0.24 port 22 rdomain "" 2026-11-15T07:37:23.684493+08:00 hostname sshd-session[939806]: Invalid user firedancer from 138.68.52.177 port 51104 2026-11-15T07:39:26.292830+08:00 hostname sshd-session[939815]: Connection from 138.68.52.177 port 38036 on 10.0.0.24 port 22 rdomain "" 2026-11-15T07:39:26.775821+08:00 hostname sshd-session[939815]: Invalid user user1 from 138.68.52.177 port 38036 show less	Brute-Force SSH
🇩🇪 dispaisyenterprises	2026-11-14 23:39:08 UTC · (16 hours ago)	2026-11-15T01:28:30.679956+02:00 dedi111 sshd-session[2634940]: Invalid user alpine from 138.68.52.177 port 39942 2026-11-15T01:32:59.495199+02:00 dedi111 sshd-session[2640738]: Invalid user ubuntu from 138.68.52.177 port 35974 2026-11-15T01:35:05.85 ... show more 2026-11-15T01:28:30.679956+02:00 dedi111 sshd-session[2634940]: Invalid user alpine from 138.68.52.177 port 39942 2026-11-15T01:32:59.495199+02:00 dedi111 sshd-session[2640738]: Invalid user ubuntu from 138.68.52.177 port 35974 2026-11-15T01:35:05.853245+02:00 dedi111 sshd-session[2643436]: Invalid user solana from 138.68.52.177 port 54134 2026-11-15T01:37:04.301172+02:00 dedi111 sshd-session[2646045]: Invalid user firedancer from 138.68.52.177 port 37098 2026-11-15T01:39:07.086008+02:00 dedi111 sshd-session[2648699]: Invalid user user1 from 138.68.52.177 port 57976 ... show less	Brute-Force SSH
🇩🇪 JustPlayer	2026-11-14 23:38:43 UTC · (16 hours ago)	2026-11-14T23:28:04.218232+00:00 de-milk-fsn01-100 sshd[3496780]: Invalid user alpine from 138.68.52.177 port 59872 2026-11-14T23:32:32.579579+00:00 de-milk-fsn01-100 sshd[3499856]: Invalid user ubuntu from 138.68.52.177 port 56576 2026-11-14T23:34:4 ... show more 2026-11-14T23:28:04.218232+00:00 de-milk-fsn01-100 sshd[3496780]: Invalid user alpine from 138.68.52.177 port 59872 2026-11-14T23:32:32.579579+00:00 de-milk-fsn01-100 sshd[3499856]: Invalid user ubuntu from 138.68.52.177 port 56576 2026-11-14T23:34:42.338693+00:00 de-milk-fsn01-100 sshd[3501319]: Invalid user solana from 138.68.52.177 port 54710 2026-11-14T23:36:40.132082+00:00 de-milk-fsn01-100 sshd[3502690]: Invalid user firedancer from 138.68.52.177 port 48546 2026-11-14T23:38:42.187569+00:00 de-milk-fsn01-100 sshd[3504096]: Invalid user user1 from 138.68.52.177 port 58398 ... show less	Brute-Force SSH
🇺🇸 Deep Cave	2026-11-14 23:38:21 UTC · (16 hours ago)	Nov 14 15:27:40 stories sshd[2387432]: Invalid user alpine from 138.68.52.177 port 49134 Nov 14 15:32:08 stories sshd[2387895]: Invalid user ubuntu from 138.68.52.177 port 57762 Nov 14 15:34:21 stories sshd[2388119]: Invalid user solana from 138.68.5 ... show more Nov 14 15:27:40 stories sshd[2387432]: Invalid user alpine from 138.68.52.177 port 49134 Nov 14 15:32:08 stories sshd[2387895]: Invalid user ubuntu from 138.68.52.177 port 57762 Nov 14 15:34:21 stories sshd[2388119]: Invalid user solana from 138.68.52.177 port 33132 Nov 14 15:36:19 stories sshd[2388330]: Invalid user firedancer from 138.68.52.177 port 47906 Nov 14 15:38:20 stories sshd[2388538]: Invalid user user1 from 138.68.52.177 port 49834 ... show less	Brute-Force SSH
Anonymous	2026-11-14 23:37:36 UTC · (16 hours ago)	2026-11-15T06:28:59.806720 vm01 sshd[109557]: Invalid user alpine from 138.68.52.177 port 42408 2026-11-15T06:33:29.531708 vm01 sshd[109572]: Invalid user ubuntu from 138.68.52.177 port 60796 2026-11-15T06:35:32.384671 vm01 sshd[109581]: Invalid user ... show more 2026-11-15T06:28:59.806720 vm01 sshd[109557]: Invalid user alpine from 138.68.52.177 port 42408 2026-11-15T06:33:29.531708 vm01 sshd[109572]: Invalid user ubuntu from 138.68.52.177 port 60796 2026-11-15T06:35:32.384671 vm01 sshd[109581]: Invalid user solana from 138.68.52.177 port 35882 show less	Brute-Force SSH
🇩🇪 seal	2026-11-14 23:37:22 UTC · (16 hours ago)	This IP was detected by CrowdSec triggering crowdsecurity/ssh-slow-bf	SSH Brute-Force
🇧🇷 guibla	2026-11-14 23:36:39 UTC · (16 hours ago)	Repeated SSH authentication failures detected by Fail2Ban. The source IP was blocked by Fail2Ban.	Brute-Force SSH
🇺🇸 agentos	2026-11-14 23:36:23 UTC · (16 hours ago)	2026-11-14T23:34:22.406989+00:00 lax-comp-vg01 sshd-session[1801655]: Invalid user solana from 138.68.52.177 port 39970 2026-11-14T23:34:22.422394+00:00 lax-comp-vg01 sshd-session[1801655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 2026-11-14T23:34:22.406989+00:00 lax-comp-vg01 sshd-session[1801655]: Invalid user solana from 138.68.52.177 port 39970 2026-11-14T23:34:22.422394+00:00 lax-comp-vg01 sshd-session[1801655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.177 2026-11-14T23:34:24.325358+00:00 lax-comp-vg01 sshd-session[1801655]: Failed password for invalid user solana from 138.68.52.177 port 39970 ssh2 2026-11-14T23:36:20.268898+00:00 lax-comp-vg01 sshd-session[1805903]: Invalid user firedancer from 138.68.52.177 port 34818 2026-11-14T23:36:20.282975+00:00 lax-comp-vg01 sshd-session[1805903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.52.177 2026-11-14T23:36:22.382221+00:00 lax-comp-vg01 sshd-session[1805903]: Failed password for invalid user firedancer from 138.68.52.177 port 34818 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 141 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 92.255.57.34

🇻🇳 42.1.70.252

🇨🇳 36.137.249.148

🇮🇳 194.238.18.10

🇸🇬 101.32.246.249

🇺🇸 18.234.91.137

🇳🇱 195.178.110.223

🇸🇰 178.40.156.247

🇺🇸 122.8.92.210

🇷🇴 92.118.39.205

🇺🇸 68.10.53.112

🇨🇳 58.20.201.4

🇺🇸 34.34.253.139

🇬🇧 5.226.140.82

🇬🇧 5.226.140.20

🇧🇩 103.127.56.38

🇺🇸 34.85.167.124

🇬🇧 165.232.97.217

🇻🇳 125.212.158.93

🇮🇩 103.156.164.37