JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.147.166

138.68.147.166 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.147.166

Whois 138.68.147.166

IP Abuse Reports for 138.68.147.166:

This IP address has been reported a total of 29 times from 20 distinct sources. 138.68.147.166 was first reported on December 26th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 oisecnet	2026-05-04 08:51:23 (1 month ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-05-04. 657 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-05-04. 657 requests from this IP. show less	Brute-Force Web App Attack SSH
🇳🇱 oisecnet	2026-04-08 10:56:39 (2 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-04-08. 649 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-04-08. 649 requests from this IP. show less	Brute-Force Web App Attack SSH
🇳🇱 oisecnet	2026-03-13 13:51:40 (3 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-03-13. 368 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-03-13. 368 requests from this IP. show less	Brute-Force Web App Attack SSH
🇳🇱 oisecnet	2026-02-23 10:27:09 (3 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-02-23. 321 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-02-23. 321 requests from this IP. show less	Brute-Force Web App Attack SSH
🇳🇱 oisecnet	2026-02-07 08:16:35 (4 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-02-07. 283 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-02-07. 283 requests from this IP. show less	Brute-Force Web App Attack SSH
Anonymous	2026-02-01 14:10:08 (4 months ago)	2026-02-01T15:10:07.164390+01:00 vps kernel: [31695282.579047] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-02-01T15:10:07.164390+01:00 vps kernel: [31695282.579047] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=138.68.147.166 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=238 ID=28219 PROTO=TCP SPT=61009 DPT=55555 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force
🇳🇱 oisecnet	2026-01-24 12:02:59 (4 months ago)	Automated report: Unauthorized vulnerability scanning detected on 2026-01-24. 283 requests from this ... show more Automated report: Unauthorized vulnerability scanning detected on 2026-01-24. 283 requests from this IP. show less	Brute-Force Web App Attack SSH
🇩🇪 Maik	2025-12-29 18:07:08 (5 months ago)	Fail2Ban ban in jail 'nextcloud'	Brute-Force Web App Attack
🇫🇷 geot	2025-12-28 20:10:50 (5 months ago)	GET /+CSCOL+/Java.jar HTTP/1.1 GET /+CSCOE+/transfer.js HTTP/1.1 GET /+CSCOL+/a1.jar HTTP/1.1 GET /+ ... show more GET /+CSCOL+/Java.jar HTTP/1.1 GET /+CSCOE+/transfer.js HTTP/1.1 GET /+CSCOL+/a1.jar HTTP/1.1 GET /+CSCOE+/logon_forms.js HTTP/1.1 show less	Web App Attack
🇦🇺 OldNGrey	2025-12-27 20:26:00 (5 months ago)	Searching for Cisco files	Phishing Web App Attack
🇫🇷 solution.it	2025-12-26 20:35:59 (5 months ago)	[Fri Dec 26 21:35:58.793953 2025] [authz_core:error] [pid 153855] [client 138.68.147.166:59312] AH01 ... show more [Fri Dec 26 21:35:58.793953 2025] [authz_core:error] [pid 153855] [client 138.68.147.166:59312] AH01630: client denied by server configuration: /var/empty/+CSCOL+ [Fri Dec 26 21:35:59.017006 2025] [authz_core:error] [pid 153866] [client 138.68.147.166:59322] AH01630: client denied by server configuration: /var/empty/+CSCOE+ [Fri Dec 26 21:35:59.393551 2025] [authz_core:error] [pid 153864] [client 138.68.147.166:59328] AH01630: client denied by server configuration: /var/empty/+CSCOL+ ... show less	Brute-Force
🇺🇸 chronos	2025-12-26 19:18:31 (5 months ago)	[AUTORAVALT][[26/12/2025 - 16:18:31 -03:00 UTC] Attack from [DigitalOcean, LLC] [138.68.147.166] Act ... show more [AUTORAVALT][[26/12/2025 - 16:18:31 -03:00 UTC] Attack from [DigitalOcean, LLC] [138.68.147.166] Action: BLocKed DDoS Attack -> Participating in distributed denial-of-service. Phishing -> Phishing websites and/or email. Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam. Blog Spam -> CMS blog comment spam. Web App Attack -> Attempts to probe ] ... show less	DDoS Attack Phishing Web Spam Blog Spam Web App Attack
🇨🇦 Not Fake	2025-12-26 18:43:00 (5 months ago)	$f2bV_matches	Web App Attack
🇯🇵 mkaraki	2025-12-26 18:42:14 (5 months ago)	1766774523 # Service_probe # SIGNATURE_SEND # source_ip:138.68.147.166 # dst_port:443 ...	Port Scan
🇫🇮 23p02732	2025-12-26 18:09:13 (5 months ago)	Mailserver and mailaccount attacks	Brute-Force Bad Web Bot Exploited Host Web App Attack

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 136.110.92.11

🇨🇳 220.243.137.204

🇯🇵 203.25.124.189

🇭🇺 193.68.57.43

🇺🇸 172.212.224.40

🇮🇩 160.187.174.22

🇺🇸 136.107.206.139

🇦🇹 109.70.100.5

🇨🇮 102.142.245.220

🇺🇸 64.72.74.162

🇳🇱 45.142.193.118

🇩🇪 35.234.106.255

🇺🇸 35.188.133.184

🇺🇸 34.162.93.123

🇩🇪 34.159.155.154

🇧🇪 34.76.215.109

🇰🇷 34.50.22.177

🇺🇸 24.245.69.68

🇮🇪 18.203.162.69

🇹🇼 198.235.24.70