JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.234.154

138.68.234.154 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.234.154

Whois 138.68.234.154

IP Abuse Reports for 138.68.234.154:

This IP address has been reported a total of 54 times from 42 distinct sources. 138.68.234.154 was first reported on April 14th 2026, and the most recent report was 44 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 LRob.fr	2026-07-01 04:00:06 (44 minutes ago)	WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail	Web App Attack
🇬🇧 Axel	2026-07-01 03:50:25 (53 minutes ago)	Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.old Ser ... show more Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.env.old Server: UK-01 show less	Web App Attack Hacking SQL Injection
Anonymous	2026-07-01 03:40:06 (1 hour ago)	138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /private/.env HTTP/1.1" 404 450 "-" "Mozilla/5. ... show more 138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /private/.env HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /private/.env HTTP/1.1" 404 289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /var/.env HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /var/.env HTTP/1.1" 404 289 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran)" 138.68.234.154 - - [01/Jul/2026:05:40:04 +0200] "GET /docker-compose.yml HTTP/1.1" 404 450 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap ... show less	Bad Web Bot Web App Attack
🇧🇪 voormedia	2026-07-01 02:53:07 (1 hour ago)	Accessed trap at '/.env'	Web App Attack
🇬🇧 AvonleaConsulting	2026-07-01 02:29:43 (2 hours ago)	Scanning unused Default website or suspicious access to valid sites from IP marked as abusive	Bad Web Bot Web App Attack
🇺🇸 Matthew Ping	2026-07-01 01:45:03 (2 hours ago)	ModSecurity rule 949110 triggered on d865. Web application attack blocked by CSF/LFD.	Web App Attack Hacking
🇬🇧 innovacommunications	2026-07-01 01:35:03 (3 hours ago)	Reported from Imunify360 blocklist	Brute-Force SSH
🇳🇱 Savvii	2026-07-01 01:26:14 (3 hours ago)	20 attempts against mh-misbehave-ban on ozone	Brute-Force Bad Web Bot Web App Attack
🇺🇸 CounterScrape	2026-07-01 00:02:32 (4 hours ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.0 MB. show less	Bad Web Bot Port Scan
🇳🇱 wlt-blocker	2026-06-30 23:31:50 (5 hours ago)	Unauthorized access to webpage admin	Web App Attack
Anonymous	2026-06-30 22:43:05 (6 hours ago)	Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.s ... show more Bot / scanning and/or hacking attempts: GET /.env.old HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env.save HTTP/1.1, GET /.env HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.dev HTTP/1.1, GET /.env.local HTTP/1.1, GET /config HTTP/1.1, GET / HTTP/1.1 show less	Hacking Web App Attack
🇩🇪 wpadm4	2026-06-30 22:06:40 (6 hours ago)	(wordpress) Failed login wp-login.php or xmlrpc.php	Web App Attack
Anonymous	2026-06-30 22:02:03 (6 hours ago)	Http Port:80 (http_status:404) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ... show more Http Port:80 (http_status:404) - Agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36 (Silvy X Ran) show less	Web App Attack
🇮🇹 VHosting	2026-06-30 21:35:03 (7 hours ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-06-30 20:44:30 (7 hours ago)	(mod_security) mod_security (id:210492) triggered by 138.68.234.154 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210492) triggered by 138.68.234.154 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 30 16:44:23.011812 2026] [security2:error] [pid 7681:tid 7681] [client 138.68.234.154:51440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4115thewestford.com"] [uri "/.env.staging"] [unique_id "akQqpyWFUqMrqaJl4Ej9VAAAADE"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇼 211.75.3.37

🇸🇪 146.247.229.78

🇰🇷 52.231.68.47

🇮🇱 5.29.17.118

🇺🇸 162.216.149.247

🇻🇳 160.22.170.38

🇦🇹 150.251.225.223

🇺🇸 103.215.74.26

🇳🇱 91.92.40.231

🇩🇪 54.93.229.124

🇩🇪 18.192.61.231

🇩🇪 3.127.149.184

🇬🇧 2.57.17.252

🇳🇱 2a02:4780:d:4e4::1

🇨🇳 221.10.187.253

🇺🇸 216.218.206.115

🇺🇸 185.180.141.13

🇺🇸 147.185.132.198

🇰🇷 125.142.37.91

🇨🇳 111.55.73.84