JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.66.141

138.68.66.141 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.66.141

Whois 138.68.66.141

IP Abuse Reports for 138.68.66.141:

This IP address has been reported a total of 21 times from 20 distinct sources. 138.68.66.141 was first reported on June 2nd 2026, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Dmitry Shesterin	2026-06-02 23:30:25 (1 day ago)	Jun 2 19:29:50 pvr sshd[465134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Jun 2 19:29:50 pvr sshd[465134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.66.141 Jun 2 19:29:52 pvr sshd[465134]: Failed password for invalid user admin from 138.68.66.141 port 41626 ssh2 Jun 2 19:30:25 pvr sshd[465163]: Invalid user orangepi from 138.68.66.141 port 39362 ... show less	Brute-Force SSH
Anonymous	2026-06-02 23:04:40 (1 day ago)	PROTO=TCP DPT=2222	Port Scan Hacking
🇦🇹 urnilxfgbez	2026-06-02 22:45:00 (1 day ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 yzfdude1	2026-06-02 22:24:59 (1 day ago)	Jun 2 16:24:25 bugs sshd[290857]: Failed password for admin from 138.68.66.141 port 47490 ssh2 Jun ... show more Jun 2 16:24:25 bugs sshd[290857]: Failed password for admin from 138.68.66.141 port 47490 ssh2 Jun 2 16:24:57 bugs sshd[290868]: Invalid user orangepi from 138.68.66.141 port 55124 Jun 2 16:24:57 bugs sshd[290868]: Failed password for invalid user orangepi from 138.68.66.141 port 55124 ssh2 ... show less	Brute-Force SSH
🇺🇸 TPI-Abuse	2026-06-02 21:58:13 (1 day ago)	(mod_security) mod_security (id:218420) triggered by 138.68.66.141 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 138.68.66.141 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 02 17:58:06.490896 2026] [security2:error] [pid 1131:tid 1131] [client 138.68.66.141:49026] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.141:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.141"] [uri "/hello.world"] [unique_id "ah9R7tVAWkDrVmcp56iLUgAAAAU"] show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-02 21:45:08 (1 day ago)	ThinkPHP 5x Remote Code Execution - HTTP (Request)	Hacking
Anonymous	2026-06-02 21:41:34 (1 day ago)	$f2bV_matches	Brute-Force SSH
🇫🇷 COMAITE	2026-06-02 21:36:16 (1 day ago)	Common web attack from 138.68.66.141.	Web App Attack
🇨🇿 lp	2026-06-02 21:19:14 (1 day ago)	SSH Brute force: 44 attempts were recorded from 138.68.66.141 2026-06-02T22:50:21+02:00 Invalid user ... show more SSH Brute force: 44 attempts were recorded from 138.68.66.141 2026-06-02T22:50:21+02:00 Invalid user admin from 138.68.66.141 port 53448 2026-06-02T22:50:51+02:00 Invalid user orangepi from 138.68.66.141 port 45788 2026-06-02T22:51:22+02:00 Connection closed by authenticating user root 138.68.66.141 port 40148 [preauth] 2026-06-02T22:51:53+02:00 Connection closed by authenticating user root 138.68.66.141 port 39660 [preauth] 2026-06-02T22:52:24+02:00 Connection closed by authenticating user root 138.68.66.141 port 47032 [preauth] 2026-06-02T22:52:55+02:00 Connection closed by authenticating user root 138.68.66.141 port 58152 [preauth] 2026-06-02T22:53:27+02:00 Connection closed by authenticating user root 138.68.66.141 port 52082 [preauth] 2026-06-02T22:53:57+02:00 Connection closed by authenticating user root 138.68.66.141 port 46478 [preauth] 2026-06-02T22:54:28+02:00 Invalid user test show less	Brute-Force SSH
🇩🇪 SkyCastle	2026-06-02 20:56:41 (1 day ago)	2026-06-02T20:56:06.814447+00:00 panel sshd[715467]: pam_unix(sshd:auth): authentication failure; lo ... show more 2026-06-02T20:56:06.814447+00:00 panel sshd[715467]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.66.141 2026-06-02T20:56:08.986735+00:00 panel sshd[715467]: Failed password for invalid user admin from 138.68.66.141 port 53222 ssh2 2026-06-02T20:56:40.810845+00:00 panel sshd[718484]: Invalid user orangepi from 138.68.66.141 port 42996 ... show less	Brute-Force SSH
🇳🇱 Savvii	2026-06-02 20:51:23 (1 day ago)	20 attempts against mh-ssh on yeti	Brute-Force SSH
🇩🇪 ghostwarriors	2026-06-02 20:50:27 (1 day ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-06-02 20:48:10 (1 day ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇩🇪 Justin F. \| AS204464	2026-06-02 20:41:29 (1 day ago)	Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credential used: admin:admi ... show more Honeypot [nx-infrastructure]: Brute-force attack detected on 23/TELNET • Credential used: admin:admin • Number of login attempts: 1 Reported by: Justin F. show less	Hacking
🇺🇸 MPL	2026-06-02 20:38:33 (1 day ago)	tcp/80 (4 or more attempts)	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 220.80.223.144

🇺🇸 185.88.102.80

🇺🇸 172.253.251.114

🇺🇸 151.240.59.176

🇮🇳 122.171.21.115

🇳🇱 87.121.69.138

🇰🇪 197.248.8.33

🇳🇱 195.178.110.30

🇷🇴 193.32.162.13

🇧🇷 179.48.33.154

🇹🇬 154.70.91.26

🇷🇴 80.94.92.187

🇳🇱 45.148.10.152

🇺🇸 38.148.249.2

🇺🇸 20.190.190.196

🇩🇪 2a02:4780:3f:2160:0:20c6:1e07:1

🇳🇱 192.142.24.156

🇺🇸 172.190.24.225

🇬🇧 89.213.48.78

🇩🇪 82.25.102.234