JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 68.183.117.159

68.183.117.159 was found in our database!

This IP was reported 134 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	North Bergen, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 68.183.117.159

Whois 68.183.117.159

IP Abuse Reports for 68.183.117.159:

This IP address has been reported a total of 134 times from 51 distinct sources. 68.183.117.159 was first reported on October 12th 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 WinterGateIC	2026-10-16 00:04:38 (1 day ago)	[INJECT] SQL injection attempt \| Stage 4 (Exploitation) \| ATT&CK:T1190 (Exploit Public-Facing Applic ... show more [INJECT] SQL injection attempt \| Stage 4 (Exploitation) \| ATT&CK:T1190 (Exploit Public-Facing Application) \| via mysql:// \| at edge perimeter \| src_port=3306 ASN=AS14061 attempts=12 sev=critical conf=45% as=DIGITALOCEAN-ASN geo=US/North Bergen infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=10-15 23:05..10-16 00:04Z \| campaign=camp_0046 cohort=17ips NOVEL_PAYLOAD fp=32e5a7581dc8 \| raw=Connection without auth \| 2026-10-16 00:04:38 UTC report#8 [community: convicted=100%] [zero-day candidate, correlated with prior observed variants] show less	SQL Injection Web App Attack Hacking
🇺🇸 Bankbook8585	2026-10-15 06:43:17 (2 days ago)	T-Pot honeypot \| Dionaea honeypot: mysqld	Port Scan Hacking
🇩🇪 WinterGateIC	2026-10-15 00:00:41 (2 days ago)	[INJECT] SQL injection attempt \| Stage 4 (Exploitation) \| ATT&CK:T1190 (Exploit Public-Facing Applic ... show more [INJECT] SQL injection attempt \| Stage 4 (Exploitation) \| ATT&CK:T1190 (Exploit Public-Facing Application) \| via mysql:// \| at edge perimeter \| src_port=3306 ASN=AS14061 attempts=55 sev=critical conf=45% as=DIGITALOCEAN-ASN geo=US/North Bergen infra=hosting usage=Data_Center/Web_Hosting/Transit sensor=honeypot active=10-14 23:00..10-15 00:00Z \| campaign=camp_0042 cohort=17ips NOVEL_PAYLOAD fp=32e5a7581dc8 \| raw=Connection without auth \| 2026-10-15 00:00:41 UTC report#36 [community: convicted=100%] [zero-day candidate, correlated with prior observed variants] show less	SQL Injection Web App Attack Hacking
🇩🇪 EnthecSolutions	2026-10-14 22:01:18 (2 days ago)	Detected by Enthec Solutions. \| Attempts: 79 in 24h \| Target port: 2181	Port Scan Hacking
🇩🇪 Kejult	2026-10-14 21:50:47 (2 days ago)	Honeypot Finding: repeated TCP service probing on TCP/11211 (Memcached); 6 application-level events ... show more Honeypot Finding: repeated TCP service probing on TCP/11211 (Memcached); 6 application-level events across 6 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇩🇪 guldkage	2026-10-14 21:18:55 (2 days ago)	Unauthorized connection attempt detected from IP address 68.183.117.159 to port 11211 (ger-02) [MEMC ... show more Unauthorized connection attempt detected from IP address 68.183.117.159 to port 11211 (ger-02) [MEMCACHED] show less	Exploited Host
🇺🇸 p0tatosmash3r	2026-10-14 19:50:54 (2 days ago)	Honeypot-observed (last seen 2026-10-14 19:50 UTC): data-store/config enumeration; known exploit/adm ... show more Honeypot-observed (last seen 2026-10-14 19:50 UTC): data-store/config enumeration; known exploit/admin path probe. Evidence: path /solr/admin/cores?action=STATUS&wt=json, /solr/admin/info/system \| path /cgi-bin/authLogin.cgi, /solr/admin/cores?action=STATUS&wt=json. show less	Web App Attack Bad Web Bot
🇩🇪 Kejult	2026-10-14 18:50:50 (2 days ago)	Honeypot Finding: repeated TCP service probing on TCP/27019 (service); 5 application-level events ac ... show more Honeypot Finding: repeated TCP service probing on TCP/27019 (service); 5 application-level events across 5 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇦🇺 LiftUp Hosting	2026-10-14 18:45:58 (2 days ago)	Honeypot hit: HTTP/1.1 request on 2181 GET /solr/admin/info/system User-Agent: Go-http-client/1.1; ... show more Honeypot hit: HTTP/1.1 request on 2181 GET /solr/admin/info/system User-Agent: Go-http-client/1.1; 2181 [9] TCP show less	Hacking Bad Web Bot
🇫🇷 agroman93	2026-10-14 17:33:35 (2 days ago)	T-Pot honeypot: 148 hits on ports [9301, 11211, 15672] (automated)	Port Scan
🇫🇷 EvoX	2026-10-14 17:26:42 (2 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 29092 GET / User-Agent: Mozilla/5.0 (compatible ... show more 🛡️ Honeypot [bsts-tpot-sensor]: HTTP/1.1 request on 29092 GET / User-Agent: Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/) Accept: / Accept-Encoding: gzip; 29092 [5] TCP show less	Hacking Bad Web Bot
🇩🇪 Kejult	2026-10-14 16:58:11 (2 days ago)	Honeypot Finding: repeated TCP service probing on TCP/2181 (service); 5 application-level events acr ... show more Honeypot Finding: repeated TCP service probing on TCP/2181 (service); 5 application-level events across 5 source port(s). Sensor(s): Honeytrap. show less	Port Scan
🇺🇸 SuperCores Hosting	2026-10-14 16:04:56 (2 days ago)	[2026-10-14 16:04:56.845765] TELNET/8080 Unautorized connection, Suspicious Mirai Botnet.	IoT Targeted Brute-Force Hacking Port Scan DDoS Attack
🇫🇷 Kejult	2026-10-14 15:03:22 (3 days ago)	Honeypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection ... show more Honeypot Finding: active TCP application payload captured by Honeytrap; 7 payload-bearing connection/event(s), 739 payload byte(s) total, maximum payload 204 byte(s). Target port(s): 11211. show less	Port Scan Hacking
🇦🇹 begou.dev	2026-10-14 14:21:38 (3 days ago)	[Threat Intelligence] Port Scanning and/or Unauthorized access -> TCP/3306	Port Scan

Showing 1 to 15 of 134 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 212.30.36.151

🇺🇸 104.164.126.237

🇳🇱 87.101.2.109

🇺🇸 35.217.93.191

🇻🇪 201.211.226.110

🇪🇹 196.190.156.89

🇷🇴 193.46.255.86

🇮🇳 103.165.62.62

🇳🇱 87.101.2.227

🇳🇱 87.101.2.155

🇳🇱 87.101.2.24

🇳🇱 77.239.124.148

🇬🇭 41.215.169.34

🇵🇰 39.34.168.59

🇺🇸 34.74.3.19

🇺🇸 2606:4700:20::681a:4af

🇧🇷 179.48.18.42

🇵🇦 179.43.153.2

🇸🇬 168.144.247.73

🇺🇸 147.224.148.163