JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.138.122

138.68.138.122 was found in our database!

This IP was reported 28 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇬🇧 United Kingdom of Great Britain and Northern Ireland
City	London, England

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.138.122

Whois 138.68.138.122

IP Abuse Reports for 138.68.138.122:

This IP address has been reported a total of 28 times from 26 distinct sources. 138.68.138.122 was first reported on February 9th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇳 evicky2002	2026-09-17 06:00:05 (1 day ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇫🇷 ✨	2026-09-16 23:17:09 (1 day ago)	Domain : paween-you.com Rule : Method-Head 2026-09-16 23:16:34 *hidden-privacy* HEAD /new/ - 443 ... show more Domain : paween-you.com Rule : Method-Head 2026-09-16 23:16:34 *hidden-privacy* HEAD /new/ - 443 - 138.68.138.122 HTTP/2.0 Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36 http://paween-you.com/new/ paween-you.com 404 0 2 316 250 234 - - show less	Port Scan
🇦🇺 paulshipley.com.au	2026-09-16 22:39:00 (1 day ago)	paulshipley.info:443 138.68.138.122 - - [17/Sep/2026:08:38:58 +1000] "HEAD /wp/ HTTP/1.1" 404 5014 " ... show more paulshipley.info:443 138.68.138.122 - - [17/Sep/2026:08:38:58 +1000] "HEAD /wp/ HTTP/1.1" 404 5014 "http://paulshipley.info/wp/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" ... show less	Web App Attack
🇩🇪 todix	2026-09-16 22:03:48 (1 day ago)	WebAttack or semilar from 138.68.138.122	Web App Attack
🇦🇺 paulshipley.com.au	2026-09-16 21:57:05 (1 day ago)	paulshipley.com.au:443 138.68.138.122 - - [17/Sep/2026:07:57:04 +1000] "HEAD /wp/ HTTP/1.1" 404 5111 ... show more paulshipley.com.au:443 138.68.138.122 - - [17/Sep/2026:07:57:04 +1000] "HEAD /wp/ HTTP/1.1" 404 5111 "http://paulshipley.com.au/wp/" "Mozilla/5.0 (Linux; Android 14; SM-A146P) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/25.0 Chrome/123.0.6312.120 Mobile Safari/537.36" ... show less	Web App Attack
🇦🇺 Bay13	2026-09-16 21:50:40 (1 day ago)	CrowdSec:custom/http-sensitive-files	Web App Attack
🇩🇪 Vegascosmetics	2026-09-16 21:45:12 (1 day ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after admin/path reconnaissance / port-scan-like web scan. Evidence: AttackPattern: /backup/ (Match: /backup/) show less	Port Scan Hacking Web App Attack
🇩🇪 23p02732	2026-09-16 21:42:56 (1 day ago)	Automated web scanning and malicious probing	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-09-16 20:15:10 (1 day ago)	AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ↪️ Exces ... show more AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - 📂 Directory Listings (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based) show less	Hacking Bad Web Bot Web App Attack
🇺🇸 kosada.com	2026-09-16 20:07:48 (1 day ago)	Repeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 443, user ag ... show more Repeated requests for suspicious nonexistent URLs, for example: /backup/ (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36") show less	Web App Attack
Anonymous	2026-09-16 20:05:28 (1 day ago)	138.68.138.122 patrz.eu - [16/Sep/2026:22:05:27 +0200] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 ( ... show more 138.68.138.122 patrz.eu - [16/Sep/2026:22:05:27 +0200] "HEAD /wp/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" ... show less	Hacking Web App Attack
Anonymous	2026-09-16 20:00:00 (1 day ago)	Automated web attack from 138.68.138.122 against our web server. 6 malicious requests on 2026-09-16 ... show more Automated web attack from 138.68.138.122 against our web server. 6 malicious requests on 2026-09-16 (UTC), denied with HTTP 403. Classified as: probing for backup archives. Probed for site copies and backups under names such as /old/, /backup/ and /wordpress/. None exist here; all denied 403. Observed request: HEAD /wp/ (HTTP 403). Sample request: HEAD /backup/ Probed for: nonexistent/suspicious paths, WordPress endpoints. User-Agent: "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36". AS14061 DIGITALOCEAN-ASN. All timestamps are UTC. show less	Web App Attack Hacking
🇩🇪 BlueWire Hosting	2026-09-16 19:56:40 (1 day ago)	Aggressive scanning resulting into 404	Bad Web Bot
🇬🇧 myintarweb	2026-09-16 19:44:38 (1 day ago)	138.68.138.122 - - [16/Sep/2026:20:44:37 +0100] 80 "HEAD /wp/ HTTP/1.1" 301 1253 "-" "Mozilla/5.0 (L ... show more 138.68.138.122 - - [16/Sep/2026:20:44:37 +0100] 80 "HEAD /wp/ HTTP/1.1" 301 1253 "-" "Mozilla/5.0 (Linux; Android 12; TECNO CK6n) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.50 Mobile Safari/537.36" ... show less	Hacking Bad Web Bot Web App Attack
🇩🇪 filstal.org	2026-09-16 19:15:40 (1 day ago)	Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels an ... show more Web reconnaissance detected: automated probing for sensitive files, backup archives, admin panels and known vulnerability paths. show less	Hacking Brute-Force Web App Attack

Showing 1 to 15 of 28 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.255.252

🇧🇬 109.160.32.26

🇮🇩 103.164.57.37

🇸🇪 83.190.39.209

🇧🇪 34.156.121.46

🇮🇹 34.17.139.0

🇨🇱 201.214.141.254

🇲🇽 201.127.30.59

🇦🇺 137.23.28.31

🇷🇺 95.165.140.133

🇳🇱 91.92.42.27

🇺🇸 68.225.61.200

🇺🇸 48.47.11.138

🇺🇸 34.138.180.87

🇺🇸 2602:fa59:10:c38::1

🇰🇷 220.90.220.204

🇰🇪 197.248.207.139

🇳🇱 195.178.110.30

🇳🇱 193.47.62.69

🇧🇷 170.82.182.184