67.205.138.38
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- North Bergen, New Jersey
No reports in the last 60 days
67.205.138.38 has been reported 87 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
87 from
48 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=90, sources=1)
|
Hacking Brute-Force SSH | |
| 🇧🇷 ICS Labs |
ICS Labs identified 67.205.138.38 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | |
| 🇺🇸 MPL |
tcp/12000
|
Port Scan | |
| 🇨🇦 celestialcity |
Blocked by UFW on celestialcityna [993/tcp] | SPT: 61006 | TTL: 240 | LEN: 44 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇺🇸 MPL |
tcp/8808
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇧🇷 ICS Labs |
ICS Labs identified 67.205.138.38 as a malicious indicator from threat intelligence.
|
DDoS Attack Hacking Exploited Host | |
| 🇨🇿 Honzas |
Automatic report:24.04.2026 18:03:12. Ports:5900,5901
|
Port Scan Hacking | |
| 🇬🇧 PeravixGroup |
HoneyPot hit - Aaran.cloud | Vnc Brute Force | credential attack
|
Brute-Force | |
| 🇨🇦 Largnet SOC |
67.205.138.38 triggered Icarus honeypot on port 5900. Check us out on github.
|
Port Scan Hacking | |
| 🇦🇹 begou.dev |
[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/5900
|
Port Scan | |
| 🇩🇪 iNetWorker |
firewall-block, port(s): 5900/tcp
|
Port Scan | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=64315 dstport=5900
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:25134 dst:5900
|
Port Scan | |
| 🇯🇵 VXG-NET |
port=5900, indicator_type=scan
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown