JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.76.249

138.68.76.249 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.76.249

Whois 138.68.76.249

IP Abuse Reports for 138.68.76.249:

This IP address has been reported a total of 97 times from 73 distinct sources. 138.68.76.249 was first reported on January 5th 2024, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ISPLtd	2026-06-10 23:13:04 (1 hour ago)	Jun 10 20:12:36 138.68.76.249 TCP SPT=53195 DPT=1080 SYN Jun 10 20:12:38 138.68.76.249 TCP SPT=53179 ... show more Jun 10 20:12:36 138.68.76.249 TCP SPT=53195 DPT=1080 SYN Jun 10 20:12:38 138.68.76.249 TCP SPT=53179 DPT=1180 SYN Jun 10 20:12:38 138.68.76.249 TCP SPT=53195 DPT=12324 SYN ... show less	Port Scan
🇦🇹 urnilxfgbez	2026-06-10 22:45:00 (1 hour ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 Andrew	2026-06-10 18:19:49 (6 hours ago)	Blocked by UFW (TCP on port 3390). Source port: 55585 TTL: 54 Packet length: 64 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 3390). Source port: 55585 TTL: 54 Packet length: 64 TOS: 0x00 This report (for 138.68.76.249) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 Progetto1	2026-06-10 17:33:02 (6 hours ago)	Detected via HAProxyScanner at 2026-06-10 17:33:02 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-06-10 17:33:02 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
🇨🇦 alexbfr	2026-06-10 16:38:34 (7 hours ago)	Fail2Ban Report, custom-honeypot jail: Automated honeypot detection.	Hacking
Anonymous	2026-06-10 16:07:57 (8 hours ago)		DNS Compromise DDoS Attack
🇨🇭 pingusurmars	2026-06-09 11:09:10 (1 day ago)	Blocked by UFW on amperetwo [4444/tcp] Source port: 43015 TTL: 55 Packet length: 64 TOS: 0x00 This ... show more Blocked by UFW on amperetwo [4444/tcp] Source port: 43015 TTL: 55 Packet length: 64 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Petre 21_ip	2026-06-07 23:47:41 (3 days ago)	2026-06-08T01:47:40.232361+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-06-08T01:47:40.232361+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=138.68.76.249 DST=155.133.26.57 LEN=64 TOS=0x00 PREC=0x00 TTL=54 ID=0 DF PROTO=TCP SPT=56054 DPT=5432 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 jkhorvath.com	2026-06-07 22:17:21 (3 days ago)	Request for URL /squid-internal-mgr/cachemgr.cgi	Phishing Brute-Force Web App Attack
🇳🇬 demonsword	2026-06-07 10:43:27 (3 days ago)	Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was ... show more Detected by SentinelX honeypot: sent HTTP CONNECT request probing for an open proxy. Connection was hijacked and held in a tarpit to slow down the scan. Probed target: / show less	Open Proxy Port Scan
🇧🇷 diego	2026-06-07 09:30:50 (3 days ago)	[probe-68-69] 2026-06-07 09:13:38, Client: 138.68.76.249, Protocol: 6, Unauthorized activity to HTTP ... show more [probe-68-69] 2026-06-07 09:13:38, Client: 138.68.76.249, Protocol: 6, Unauthorized activity to HTTP: CONNECT / show less	Web App Attack
🇧🇷 diego	2026-06-07 09:14:12 (3 days ago)	[rede-164-29] Port Scan detected from 138.68.76.249 (DE/Germany/-). 11 hits in the last 230 second ... show more [rede-164-29] Port Scan detected from 138.68.76.249 (DE/Germany/-). 11 hits in the last 230 seconds; Ports: ; Direction: in; Trigger: PS_LIMIT; Logs: Jun 7 06:13:22 kernel: Firewall: TCP_IN Blocked* IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=138.68.76.249 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=29117 DF PROTO=TCP SPT=35466 DPT=3128 WINDOW=64240 RES=0x00 SYN URGP=0 Jun 7 06:13:23 kernel: Firewall: TCP_IN Blocked IN=ethX OUT= MAC=xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx00 SRC=138.68.76.249 DST=0.0.0.x LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=29118 DF PROTO=TCP SPT=35466 DPT=3128 WINDOW=64240 RES=0x00 SYN UR show less	Port Scan
🇺🇸 shabi	2026-06-07 09:00:41 (3 days ago)	UFW Blocked [1180/TCP] Source: 138.68.76.249:42856 TTL: 52 Lenth: 64 TOS: 0x00	Port Scan
🇺🇸 kelliwic.net	2026-06-07 08:23:38 (3 days ago)	Port scan detected (F2B)	Port Scan
🇺🇸 etu brutus	2026-06-07 03:44:12 (3 days ago)	138.68.76.249 Blocked by [Attack Vector List] ...	Hacking Brute-Force Exploited Host

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 219.118.245.161

🇹🇼 198.235.24.76

🇺🇸 167.172.31.16

🇺🇸 162.216.149.73

🇨🇳 124.221.204.253

🇩🇪 89.247.62.242

🇫🇮 46.62.196.161

🇺🇸 40.79.245.22

🇮🇪 34.244.109.88

🇨🇭 179.43.168.58

🇳🇱 176.65.139.66

🇫🇷 163.172.143.147

🇺🇸 162.217.163.247

🇺🇸 104.223.99.92

🇮🇩 103.248.248.2

🇧🇬 91.191.209.118

🇷🇺 81.30.212.94

🇸🇪 78.69.8.25

🇺🇸 48.214.54.120

🇳🇱 45.148.10.141