JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.246.160

138.68.246.160 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.246.160

Whois 138.68.246.160

IP Abuse Reports for 138.68.246.160:

This IP address has been reported a total of 46 times from 32 distinct sources. 138.68.246.160 was first reported on November 3rd 2022, and the most recent report was 9 months ago.

Old Reports: The most recent abuse report for this IP address is from 9 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 sheriffblee	2025-11-07 14:42:00 (9 months ago)	e anexa archivo con actualización de eventos de tipo BOT: SystemBC Communication Detected para su re ... show more e anexa archivo con actualización de eventos de tipo BOT: SystemBC Communication Detected para su revisión. Detalle de la alerta: Esta alerta indica que se ha detectado tráfico de la herramienta de acceso remoto SytemBC en la red.La infección con los programas de puerta trasera puede dar acceso no autorizado al sistema a un atacante remoto. show less	Exploited Host
🇦🇹 Pingger Shikkoken	2025-11-07 14:22:50 (9 months ago)	2025-11-07T14:22:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-11-07T14:22:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=138.68.246.160 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=19565 DF PROTO=TCP SPT=43012 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-11-07T14:22:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=138.68.246.160 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=19566 DF PROTO=TCP SPT=43012 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-11-07T14:22:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=138.68.246.160 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=41 ID=19567 DF PROTO=TCP SPT=43012 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇦🇺 FEWA	2025-11-07 13:22:39 (9 months ago)	Fail2Ban Ban Triggered	Hacking Bad Web Bot Web App Attack
Anonymous	2025-11-07 10:36:12 (9 months ago)	[Fri Nov 07 11:36:10.141505 2025] [php7:error] [pid 6259] [client 138.68.246.160:48196] script '/var ... show more [Fri Nov 07 11:36:10.141505 2025] [php7:error] [pid 6259] [client 138.68.246.160:48196] script '/var/www/sites/default/upl.php' not found or unable to stat [Fri Nov 07 11:36:11.337637 2025] [php7:error] [pid 4023] [client 138.68.246.160:48248] script '/var/www/sites/default/1.php' not found or unable to stat [Fri Nov 07 11:36:11.934212 2025] [php7:error] [pid 6261] [client 138.68.246.160:48260] script '/var/www/sites/default/password.php' not found or unable to stat ... show less	Brute-Force Web App Attack
🇦🇺 2000cn.com.au	2025-11-07 07:49:10 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Hacking Web App Attack
🇧🇷 SOC-BR	2025-11-07 07:21:05 (9 months ago)	Attack detected by Fortinet - backdoor: SystemBC.Botnet - 2025-11-06 13:54:38 - Source Port 50664	Port Scan Hacking
🇺🇸 gu-alvareza	2025-11-07 07:05:04 (9 months ago)	SystemBC.Botnet	DDoS Attack Hacking
Anonymous	2025-11-07 05:59:33 (9 months ago)	[Fri Nov 07 06:59:32.651871 2025] [authz_core:error] [pid 18254] [client 138.68.246.160:44364] AH016 ... show more [Fri Nov 07 06:59:32.651871 2025] [authz_core:error] [pid 18254] [client 138.68.246.160:44364] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Nov 07 06:59:32.992952 2025] [authz_core:error] [pid 31310] [client 138.68.246.160:44372] AH01630: client denied by server configuration: /etc/httpd/htdocs [Fri Nov 07 06:59:33.301979 2025] [authz_core:error] [pid 18334] [client 138.68.246.160:44384] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇫🇷 service Informatique	2025-11-07 04:00:37 (9 months ago)	GET /t4	Web App Attack
🇧🇷 vfAcceloReporter	2025-11-07 02:44:25 (9 months ago)	138.68.246.160 - - [06/Nov/2025:23:44:24 -0300] "GET /form.html HTTP/1.1" 404 125 "-" "curl/8.1.2" 1 ... show more 138.68.246.160 - - [06/Nov/2025:23:44:24 -0300] "GET /form.html HTTP/1.1" 404 125 "-" "curl/8.1.2" 138.68.246.160 - - [06/Nov/2025:23:44:24 -0300] "GET /upl.php HTTP/1.1" 404 125 "-" "Mozilla/5.0" 138.68.246.160 - - [06/Nov/2025:23:44:24 -0300] "GET /t4 HTTP/1.1" 404 125 "-" "Mozilla/5.0" 138.68.246.160 - - [06/Nov/2025:23:44:25 -0300] "GET /geoip/ HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.68.246.160 - - [06/Nov/2025:23:44:25 -0300] "GET /favicon.ico HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Brute-Force Exploited Host Web App Attack
Anonymous	2025-11-07 02:32:15 (9 months ago)	138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /form.html HTTP/1.1" 404 1616 "-" "curl/8.1.2" ... show more 138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /form.html HTTP/1.1" 404 1616 "-" "curl/8.1.2" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /upl.php HTTP/1.1" 404 1615 "-" "Mozilla/5.0" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /t4 HTTP/1.1" 404 1611 "-" "Mozilla/5.0" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /geoip/ HTTP/1.1" 404 1613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:14 +0000] "GET /favicon.ico HTTP/1.1" 404 1616 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:15 +0000] "GET /1.php HTTP/1.1" 404 1613 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" 138.68.246.160 - - [07/Nov/2025:02:32:15 +0000] "GET /s ... show less	Brute-Force SSH
Anonymous	2025-11-06 23:54:16 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Web App Attack
🇬🇧 djboddington	2025-11-06 23:44:58 (9 months ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-backdoors-attempts	Hacking Exploited Host
Anonymous	2025-11-06 19:49:29 (9 months ago)	Brute-Force reported by Fail2Ban	Brute-Force Web App Attack
🇫🇷 Kraften	2025-11-06 19:38:34 (9 months ago)	Tentative Web App attack ...	Web App Attack

Showing 1 to 15 of 46 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.15

🇳🇱 45.148.10.152

🇺🇸 35.186.188.211

🇰🇷 211.253.31.30

🇷🇺 185.41.42.12

🇬🇧 31.14.254.46

🇺🇸 20.84.44.128

🇩🇪 207.154.197.113

🇩🇪 47.245.129.160

🇬🇧 35.246.124.28

🇩🇪 213.209.159.154

🇨🇦 190.102.106.158

🇺🇸 165.232.54.128

🇸🇪 155.4.245.222

🇺🇸 147.185.132.27

🇨🇳 120.229.212.95

🇪🇬 81.10.54.140

🇱🇹 62.60.130.253

🇱🇹 62.60.130.201

🇺🇸 35.253.180.94