138.68.189.175

Classification: Malicious

138.68.189.175 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-07. Network: AS14061 DigitalOcean, LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SSH Attacker Blocklist.de 2026-03-13 10:01:49 2026-09-07 14:00:27 attacker malicious-activity
Bruteforce AbuseIPDB 2026-09-06 20:01:37 2026-09-06 22:05:05 attacker malicious-activity
SSH Attacker AbuseIPDB 2026-09-06 19:56:18 2026-09-06 22:05:05 attacker malicious-activity
Port Scanner AbuseIPDB 2026-06-23 07:17:11 2026-09-06 20:32:16 anomalous-activity attacker malicious-activity reconnaissance
Malicious Host AbuseIPDB 2026-03-13 20:14:17 2026-09-06 20:18:25 attacker compromised malicious-activity
Hacking AbuseIPDB 2026-09-06 20:01:37 2026-09-06 20:03:16 attacker malicious-activity
HTTP Attacker AbuseIPDB 2026-06-23 06:20:14 2026-06-23 07:17:11 attacker malicious-activity
Unauthorized scanning of hosts Blocklist.net.ua 2021-04-19 10:29:38 2021-05-17 05:23:18 malicious-activity
Malicious Host CIArmy 2021-04-18 10:55:52 2021-04-24 09:54:14 malicious-activity

Tags

abuse ssh bruteforce bot

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
arin
AS date
2016-01-26 00:00:00
AS CIDR
138.68.176.0/20
CIDR
138.68.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Ave of the Americas 10th Floor
City
London
State
NY
Postal code
WC1V
Country
GB — United Kingdom 🇬🇧
Contact email
[email protected], [email protected]
First indexed
2021-04-18 10:55:52
Last updated
2026-09-08 16:53:15

Malicious IPs in the same CIDR

138.68.186.93 138.68.183.21 138.68.189.175 138.68.185.142 138.68.188.238 138.68.176.88 138.68.189.162 138.68.182.50 138.68.180.72 138.68.179.162