AbuseIPDB » 138.68.250.4
138.68.250.4 was found in our database!
This IP was reported 4 times. Confidence of
Abuse
is 21% : ?
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Hostname(s)
prod-meitnerium-us-sfo2-97.do.binaryedge.ninja
Domain Name
digitalocean.com
Country
๐บ๐ธ
United States of America
City
Santa Clara, California
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 138.68.250.4 :
This IP address has been reported a total of
4
times from
4 distinct
sources.
138.68.250.4 was first reported on
May 23rd 2026 , and the most recent report was
4 days ago .
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
๐บ๐ธ
JustMeHere
2026-06-29 09:10:46
(4 days ago)
[Mon Jun 29 05:10:38.171700 2026] [security2:error] [pid 906:tid 1064] [client 138.68.250.4:46542] M ...
show more
[Mon Jun 29 05:10:38.171700 2026] [security2:error] [pid 906:tid 1064] [client 138.68.250.4:46542] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "xc6clpfcspxztu3y.yorknation.com"] [uri "/.env"] [unique_id "akI2jrSO5xHHWsagY9Wk6gAAABM"]
...
show less
Web App Attack
๐บ๐ธ
Cyber Crusader
2026-06-18 14:53:14
(2 weeks ago)
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
๐บ๐ธ
xmission.com
2026-06-08 08:23:46
(3 weeks ago)
Blocked by UFW (TCP on 6380)
Source port: 48148
TTL: 54
Packet length: 52
TOS: 0x08
This report (fo ...
show more
Blocked by UFW (TCP on 6380)
Source port: 48148
TTL: 54
Packet length: 52
TOS: 0x08
This report (for 138.68.250.4) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-05-23 07:23:42
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 138.68.250.4 (prod-meitnerium-us-sfo2-97.do.bin ...
show more
(mod_security) mod_security (id:210492) triggered by 138.68.250.4 (prod-meitnerium-us-sfo2-97.do.binaryedge.ninja): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 03:23:38.024790 2026] [security2:error] [pid 10656:tid 10656] [client 138.68.250.4:58264] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.mydobdate.com"] [uri "/.env"] [unique_id "ahFV-utCYHAKxZoXaINeIgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Showing 1 to
4
of 4 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ
Recently Reported IPs: