138.68.66.26

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
36 reports
31 reporters ยท latest 13 hours ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
๐Ÿ‡ฉ๐Ÿ‡ช Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
36 from 31 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡ซ๐Ÿ‡ท France 8 ๐Ÿ‡ต๐Ÿ‡ฑ Poland 4 ๐Ÿ‡บ๐Ÿ‡ธ United States of America 4
Most common categories Port Scan 22 Web App Attack 11 Hacking 10 Brute-Force 6 Exploited Host 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฎ๐Ÿ‡น NukeDuke
Nov 12 07:02:44 my.hidden.domain postfix/smtpd[3885717]: connect from unknown[138.68.66.26] ...
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ท EvoX
๐Ÿ›ก๏ธ Honeypot [bsts-tpot-sensor]: Unauthorized traffic (4 bytes of payload); 8000 [16] TCP
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 13 payload-bearing connection/event(s), 866 payload byte(s) total, maximum payload 223 byte(s). Target port(s): 4891.
Port Scan Hacking
๐Ÿ‡ซ๐Ÿ‡ฎ judaschrist
1794453105 - 11/12/2026 05:11:45 Host: 138.68.66.26/138.68.66.26 Port: 143 TCP Blocked ...
Port Scan
๐Ÿ‡ต๐Ÿ‡ฑ nfsec.pl
Detected: TCP scan on port: 23 with flags: SYN
Port Scan
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
Hacking
๐Ÿ‡ฌ๐Ÿ‡ง seniorlinuxadmin
138.68.66.26 - - [11/Nov/2026:22:38:43 +0000] "GET / HTTP/1.0" 403 158 "-" "-"
Port Scan Web App Attack
๐Ÿ‡ฎ๐Ÿ‡ฉ adi s
Brute-Force
๐Ÿ‡ซ๐Ÿ‡ท NXO WAN
SMTP unauthorized access
Port Scan Brute-Force
๐Ÿ‡ฎ๐Ÿ‡น CoreTech srl
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact,ndpi_unsafe_protocol
Hacking
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: active TCP application payload captured by Honeytrap; 14 payload-bearing connection/event(s), 717 payload byte(s) total, maximum payload 148 byte(s). Target port(s): 9092.
Port Scan Hacking
Anonymous
Port Scan Web App Attack
๐Ÿ‡ฆ๐Ÿ‡ช abusiveIntelligence
RDP connect attempt: Nmap Scanner
Brute-Force
๐Ÿ‡บ๐Ÿ‡ธ gu-alvareza
Nmap.Script.Scanner
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Dominik Lysiak
Brute-Force Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ง๐Ÿ‡ฉ 203.76.222.92
๐Ÿ‡น๐Ÿ‡ณ 102.156.203.132
๐Ÿ‡ฉ๐Ÿ‡ช 69.5.169.14
๐Ÿ‡ฉ๐Ÿ‡ช 2a02:c202:2358:9987::1
๐Ÿ‡ง๐Ÿ‡ท 201.79.146.73
๐Ÿ‡ง๐Ÿ‡ท 191.7.159.201
๐Ÿ‡ญ๐Ÿ‡ฐ 162.158.114.19
๐Ÿ‡ฉ๐Ÿ‡ฟ 154.243.167.37
๐Ÿ‡ป๐Ÿ‡ณ 103.53.158.121
๐Ÿ‡ฐ๐Ÿ‡ช 102.209.236.98
๐Ÿ‡บ๐Ÿ‡ธ 35.186.177.77
๐Ÿ‡ง๐Ÿ‡ท 201.140.242.40
๐Ÿ‡ง๐Ÿ‡ท 200.138.147.2
๐Ÿ‡ฉ๐Ÿ‡ฐ 194.19.180.4
๐Ÿ‡ต๐Ÿ‡ฐ 189.12.12.204
๐Ÿ‡ฉ๐Ÿ‡ช 185.220.101.105
๐Ÿ‡บ๐Ÿ‡ธ 159.223.189.160
๐Ÿ‡ฆ๐Ÿ‡บ 152.67.101.114
๐Ÿ‡ซ๐Ÿ‡ท 91.196.152.201
๐Ÿ‡ณ๐Ÿ‡ฑ 45.148.10.152
feedback