JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.47.159

138.68.47.159 was found in our database!

This IP was reported 26 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.47.159

Whois 138.68.47.159

IP Abuse Reports for 138.68.47.159:

This IP address has been reported a total of 26 times from 25 distinct sources. 138.68.47.159 was first reported on August 7th 2026, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 ratcarcher-labs	2026-08-24 06:40:59 (12 hours ago)	[Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=5 depth=2 ... show more [Ratcarcher Labs/MutantShield honeypot CTI] actor=human vector=bot_scanner risk=75 attacks=5 depth=2 node=node-ap-south canary=no human_score=50 agentic=15 cc=US asn=DigitalOcean, LLC \| Data provided by Ratcarcher Labs · https://ratcarcher-labs.com · docs https://api.ratcarcher-labs.com/api/v1/public/docs show less	Port Scan Bad Web Bot
🇺🇸 distorx	2026-08-23 22:11:13 (21 hours ago)	[23/Aug/2026:22:11:12 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 138.68.47.159] ... show more [23/Aug/2026:22:11:12 +0000] 200 - GET http localhost-nginx-proxy-manager "/" [Client 138.68.47.159] [Length 1033] [Gzip -] "-" "-" ... show less	Port Scan Bad Web Bot
🇦🇺 PetePK	2026-08-23 12:29:04 (1 day ago)	Probed 1 time(s): TCP/8013	Port Scan
Anonymous	2026-08-23 12:10:04 (1 day ago)	Blocked by firewall on hugin [8013/tcp] \| Rule: UFW \| SPT: 49378 \| TTL: 48 \| LEN: 44 \| TOS: 0x00 • R ... show more Blocked by firewall on hugin [8013/tcp] \| Rule: UFW \| SPT: 49378 \| TTL: 48 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-08-23 11:15:48 (1 day ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8013 [1], 8098 [1] TCP Reported by ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 8013 [1], 8098 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 sojan	2026-08-19 10:16:15 (5 days ago)	138.68.47.159 - - [19/Aug/2026:12:16:13 +0200] "GET / HTTP/1.0" 502 157 "-" "-" 138.68.47.159 - - [1 ... show more 138.68.47.159 - - [19/Aug/2026:12:16:13 +0200] "GET / HTTP/1.0" 502 157 "-" "-" 138.68.47.159 - - [19/Aug/2026:12:16:14 +0200] "GET / HTTP/1.1" 502 559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 138.68.47.159 - - [19/Aug/2026:12:16:14 +0200] "GET /favicon.ico HTTP/1.1" 502 157 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" ... show less	Web App Attack
🇮🇪 RoboSOC	2026-08-16 05:13:37 (1 week ago)	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found	Port Scan
🇬🇧 wiredalter	2026-08-16 03:18:49 (1 week ago)	Blocked by fail2ban on gVPS [161/tcp] Source Port: 53464 TTL: 55 Packet Length: 44 TOS: 0x00 Analyz ... show more Blocked by fail2ban on gVPS [161/tcp] Source Port: 53464 TTL: 55 Packet Length: 44 TOS: 0x00 Analyzed by https://ip.wiredalter.com show less	Brute-Force SSH
Anonymous	2026-08-16 01:11:20 (1 week ago)	138.68.47.159 - - [16/Aug/2026:03:11:19 +0200] "GET / HTTP/1.1" 403 5758 "-" "Mozilla/5.0 (Windows N ... show more 138.68.47.159 - - [16/Aug/2026:03:11:19 +0200] "GET / HTTP/1.1" 403 5758 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ... show less	Web App Attack
🇫🇷 vtchost.com	2026-08-14 15:58:18 (1 week ago)	2026-08-14T17:58:17.751816+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0: ... show more 2026-08-14T17:58:17.751816+02:00 vmi3482414 kernel: PORTSCAN: IN=eth0 OUT= MAC=00:50:56:66:20:ee:c0:69:11:b2:c8:03:08:00 SRC=138.68.47.159 DST=169.58.115.24 LEN=44 TOS=0x00 PREC=0x00 TTL=55 ID=50349 DF PROTO=TCP SPT=51649 DPT=8443 WINDOW=65280 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 xmission.com	2026-08-14 13:15:41 (1 week ago)	Blocked by UFW (TCP on 8443) Source port: 53574 TTL: 54 Packet length: 44 TOS: 0x08 This report (fo ... show more Blocked by UFW (TCP on 8443) Source port: 53574 TTL: 54 Packet length: 44 TOS: 0x08 This report (for 138.68.47.159) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
Anonymous	2026-08-14 08:24:25 (1 week ago)	SSH tarpit (endlessh) connection from 138.68.47.159	Brute-Force SSH
🇺🇸 schematics.cc	2026-08-14 08:24:10 (1 week ago)	Blocked by on honeypot2 [22/tcp] \| SPT: 49150 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: abuse.t ... show more Blocked by on honeypot2 [22/tcp] \| SPT: 49150 \| TTL: 54 \| LEN: 60 \| TOS: 0x00 • Reported by: abuse.terraforge.fun show less	Port Scan SSH
🇦🇺 PetePK	2026-08-14 06:59:07 (1 week ago)	Probed 1 time(s): TCP/8080	Port Scan
🇩🇪 shr4pnel	2026-08-13 04:40:42 (1 week ago)	SSH login attempts (endlessh): 2026-08-13T03:40:53.952Z ACCEPT host=::ffff:138.68.47.159 port=33610 ... show more SSH login attempts (endlessh): 2026-08-13T03:40:53.952Z ACCEPT host=::ffff:138.68.47.159 port=33610 fd=4 n=2/4096 show less	Brute-Force SSH

Showing 1 to 15 of 26 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.71

🇵🇭 165.101.254.202

🇰🇿 95.58.255.251

🇱🇹 62.60.130.242

🇮🇳 103.30.80.222

🇷🇴 80.94.92.55

🇺🇸 66.240.236.116

🇮🇪 52.18.202.193

🇵🇰 203.128.6.156

🇨🇳 114.98.230.202

🇮🇶 109.61.5.31

🇨🇴 108.174.156.122

🇹🇼 60.250.246.239

🇮🇳 59.177.12.54

🇺🇸 47.251.174.237

🇦🇺 45.133.6.12

🇬🇧 2.57.17.109

🇩🇪 93.200.123.112

🇱🇹 77.90.185.20

🇫🇮 45.130.127.173