JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.87.158

138.68.87.158 was found in our database!

This IP was reported 1,029 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	amazigh-zayn.net
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.87.158

Whois 138.68.87.158

IP Abuse Reports for 138.68.87.158:

This IP address has been reported a total of 1,029 times from 247 distinct sources. 138.68.87.158 was first reported on January 19th 2021, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 Parth Maniar	2026-04-02 15:07:16 (2 months ago)	This IP address carried out 9 SSH credential attack (attempts) on 01-04-2026. For more information o ... show more This IP address carried out 9 SSH credential attack (attempts) on 01-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-01 22:20:13 (2 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.87.158 2026-04- ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.87.158 2026-04-01 23:15:42 / 2026-04-01 23:15:43 / show less	Web App Attack
🇫🇷 Faeeth	2026-04-01 14:48:19 (2 months ago)	Multiple hits on Honeypot UID:PTRW50NM46 Port:Http (80)	Brute-Force
🇦🇪 abusiveIntelligence	2026-04-01 14:10:00 (2 months ago)	RDP connect attempt: Nmap Scanner	Brute-Force
🇩🇰 SaltySoftworks	2026-04-01 12:47:19 (2 months ago)	User agent spoofing Connecting to IP instead of domain name	Spoofing Hacking Web App Attack
🇳🇱 f14driver	2026-04-01 06:03:21 (2 months ago)	...	Brute-Force SSH Port Scan Web App Attack
🇳🇱 Axel	2026-04-01 00:53:34 (2 months ago)	SSH login attempts (endlessh): 2026-04-01T00:34:04.538Z ACCEPT host=::ffff:138.68.87.158 port=4205 f ... show more SSH login attempts (endlessh): 2026-04-01T00:34:04.538Z ACCEPT host=::ffff:138.68.87.158 port=4205 fd=11 n=9/4096 show less	Brute-Force SSH
🇳🇱 Axel	2026-04-01 00:34:32 (2 months ago)	SSH login attempts (endlessh): 2026-04-01T00:33:15.788Z ACCEPT host=::ffff:138.68.87.158 port=17643 ... show more SSH login attempts (endlessh): 2026-04-01T00:33:15.788Z ACCEPT host=::ffff:138.68.87.158 port=17643 fd=12 n=9/4096 show less	Brute-Force SSH
🇺🇸 chronos	2026-03-31 07:53:39 (2 months ago)	[AUTORAVALT][[31/03/2026 - 04:53:39 -03:00 UTC] Attack from [DigitalOcean, LLC] [138.68.87.158] Acti ... show more [AUTORAVALT][[31/03/2026 - 04:53:39 -03:00 UTC] Attack from [DigitalOcean, LLC] [138.68.87.158] Action: BLocKed Phishing -> Phishing websites and/or email. Email Spam -> Spam email content, infected attachments, and phishing emails. Hacking... Unauthorized attempts to access the server. Spoofing -> Email sender spoofing. Brute-Force -> Credential brute-force a] ... show less	Brute-Force Email Spam Spoofing Phishing Hacking
Anonymous	2026-03-31 06:40:39 (2 months ago)	[Tue Mar 31 08:40:38.753775 2026] [authz_core:error] [pid 23332] [client 138.68.87.158:11041] AH0163 ... show more [Tue Mar 31 08:40:38.753775 2026] [authz_core:error] [pid 23332] [client 138.68.87.158:11041] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Mar 31 08:40:38.767942 2026] [authz_core:error] [pid 22963] [client 138.68.87.158:27559] AH01630: client denied by server configuration: /etc/httpd/htdocs [Tue Mar 31 08:40:38.768065 2026] [authz_core:error] [pid 23217] [client 138.68.87.158:13085] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇸🇬 drewf.ink	2026-03-31 04:02:11 (2 months ago)	[04:02] Port scanning. Port(s) scanned: TCP/995	Port Scan
🇺🇸 kuj	2026-03-30 09:04:24 (2 months ago)	2026-03-30T03:04:23.082913-06:00 derpamp-oci derper[509880]: 2026/03/30 03:04:23 http: TLS handshake ... show more 2026-03-30T03:04:23.082913-06:00 derpamp-oci derper[509880]: 2026/03/30 03:04:23 http: TLS handshake error from 138.68.87.158:22203: tls: client offered only unsupported versions: [] 2026-03-30T03:04:23.397753-06:00 derpamp-oci derper[509880]: 2026/03/30 03:04:23 http: TLS handshake error from 138.68.87.158:31863: acme/autocert: missing server name 2026-03-30T03:04:23.690144-06:00 derpamp-oci derper[509880]: 2026/03/30 03:04:23 http: TLS handshake error from 138.68.87.158:7619: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇯🇵 mkaraki	2026-03-30 08:46:24 (2 months ago)	1774860381 # Service_probe # SIGNATURE_SEND # source_ip:138.68.87.158 # dst_port:20000 ...	Port Scan
🇳🇱 Hobby Bob	2026-03-29 20:38:14 (2 months ago)	Mar 29 22:38:14 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: ... show more Mar 29 22:38:14 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=, rip=138.68.87.158, lip=X.X.X.X session= show less	Port Scan Hacking
🇬🇧 Smish	2026-03-29 14:15:44 (2 months ago)	HONEYPOT HIT --> Fail2ban time=1774793742 log=2026-03-29T15:15:42+01:00 ip=138.68.87.158 host=_ meth ... show more HONEYPOT HIT --> Fail2ban time=1774793742 log=2026-03-29T15:15:42+01:00 ip=138.68.87.158 host=_ method=GET uri="/nice%20ports%2C/Tri%6Eity.txt%2ebak" status=404 ua="-" ref="-" rid=7010e585fd9e7ec5003114b4fed0d0da show less	Web App Attack

Showing 1 to 15 of 1029 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.71

🇻🇳 117.7.68.92

🇷🇴 80.94.92.168

🇳🇱 45.198.224.5

🇳🇱 45.148.10.147

🇳🇱 45.148.10.141

🇺🇸 34.41.216.81

🇺🇸 20.80.105.86

🇦🇷 190.172.84.238

🇨🇦 178.93.200.78

🇧🇷 170.0.62.246

🇺🇸 162.216.149.139

🇨🇳 125.47.77.54

🇻🇳 113.191.111.126

🇺🇸 70.22.63.203

🇨🇳 223.113.145.10

🇺🇸 172.105.128.11

🇺🇸 162.216.150.29

🇭🇰 150.109.107.60

🇱🇧 94.187.20.43