138.68.70.140

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
223 reports
153 reporters · latest 1 hour ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV
Total reports
223 from 153 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 56 🇩🇪 Germany 44 🇺🇸 United States of America 33
Most common categories Port Scan 83 Brute-Force 69 Web App Attack 64 Hacking 49 Bad Web Bot 24
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Log in to search reports. Log In
Reporter IoA Timestamp (UTC) Comment Categories
🇨🇭 4server
Hacking Web App Attack
🇸🇦 azzuwayed
Email Spam
🇩🇪 jasperedv.de
SMTP blocked - SPAM
Email Spam Brute-Force
🇺🇸 ras07
Brute force SSH login attempts.
Brute-Force SSH
🇯🇵 ki3
Fail2Ban: Postfix Attack 138.68.70.140 1793987075.0(JST)
Email Spam Brute-Force
🇷🇺 Mga Admin
138.68.70.140 - - [07/Nov/2026:00:11:45 +0700] "GET / HTTP/1.0" 400 362 "-" "-" ...
Web App Attack
🇨🇦 mattd4165
Email Spam
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/11434 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇺🇸 tk103
postfix
Brute-Force
🇫🇷 uthul
T-Pot honeypot: 14 hits on ports [110, 6443, 10250] (automated)
Port Scan
🇷🇴 sTicKs23
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8000 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇿🇦 frontosa
2026-11-06T16:05:07.468732+02:00 mx postfix/submission/smtpd[583628]: lost connection after STARTTLS from unknown[138.68.70.140] ...
Brute-Force
🇫🇷 0xNath
Brute-Force
🇷🇺 Albram
Blocked by DNSBL - Mailserver check_relay ...
Brute-Force

Showing 1 to 15 of 223 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 120.211.194.108
🇸🇬 104.28.222.46
🇳🇱 104.23.170.24
🇷🇺 95.108.213.239
🇺🇸 23.234.116.111
🇺🇸 23.234.103.165
🇺🇸 23.234.83.192
🇺🇸 23.234.75.230
🇺🇸 13.221.192.166
🇸🇬 212.73.148.49
🇲🇽 189.196.193.95
🇲🇽 187.224.192.125
🇨🇴 186.0.7.5
🇺🇸 173.249.252.212
🇳🇱 172.71.103.203
🇨🇭 170.231.237.214
🇺🇸 146.70.211.95
🇨🇳 116.172.201.121
🇳🇱 104.23.170.25
🇻🇳 42.96.19.37
feedback