138.68.69.134
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
138.68.69.134 has been reported 85 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
85 from
58 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇧🇪 boxed-it |
GET /.env (Tarpitted for 1d15h8m29s, wasted 8.06MB)
|
Web App Attack | |
| 🇫🇷 geot |
GET /.env HTTP/1.1
GET /.git/config HTTP/1.1
|
Hacking Bad Web Bot Web App Attack | |
| 🇬🇧 openstrike.co.uk |
2 attacks on VC URLs, env grabbing URLs:
GET /.git/config HTTP/1.1
GET /.env HTTP/1.1
|
Hacking | |
| 🇳🇱 NSCA-ISEU |
Web Server Exposed Git Repository Information Disclosure. VT: Malicious: 2 - Suspicious: 5. AS14061 DigitalOcean, LLC.
Org: DigitalOcean, LLC
|
Port Scan Hacking Web App Attack | |
| Anonymous |
Aggressive web scan
|
SQL Injection Bad Web Bot Web App Attack | |
| 🇨🇳 ThreatBook.io |
2025-09-11 16:23:51 /.git/config
2025-09-11 16:24:36 /.git/config
2025-09-11 16:23:51 /.env
2025-09-11 16:31:56 /.env
2025-09-11 16:31:57 /.git/config
2025-09-11 16:24:35 /.env
|
Web App Attack | |
| Anonymous |
Fuzzing/Looking for credentials files.
|
Brute-Force Web App Attack | |
| 🇺🇸 MPL |
tcp/443 (6 or more attempts)
|
Port Scan | |
| 🇬🇧 Nov |
Unauthorized HTTPS access attempt (tcp/443)
|
Port Scan | |
| 🇺🇸 anon333 |
Hacker syslog review 1757619223
|
Hacking | |
| 🇩🇪 Selckie |
fail2ban: NGINX unusual impact
|
Port Scan | |
| 🇨🇿 sajmon0011 |
138.68.69.134 - - [11/Sep/2025:21:19:02 +0200] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);"
...
|
Web App Attack | |
| Anonymous |
|
Brute-Force Web App Attack | |
| 🇺🇸 dexterousnetworkllc |
Sep 11 18:40:15 frontend haproxy[15398]: 138.68.69.134:36138 [11/Sep/2025:18:40:15.804] www-https~ www-https/<NOSRV> 0/-1/-1/-1/0 404 56 - - PR-- 1/1/0/0/0 0/0 {|} "GET /.env HTTP/1.1"
|
Bad Web Bot | |
| 🇳🇱 Study Bitcoin 🤗 |
Port probe to tcp/443 (https)
[srv125]
|
Port Scan Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown