138.68.85.161
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
26 from
26 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇹🇷 Domainhizmetleri.com |
Source: DH Hunter (Honeypot) | Reason: TLS Handshake Probe (3541/tcp) [non-standard port]
|
Port Scan Hacking | |
| Anonymous |
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host | |
| 🇫🇮 geot |
GET /.bash_history HTTP/1.1
GET /config.yaml HTTP/1.1
GET /.env HTTP/1.1
|
Hacking Bad Web Bot Web App Attack | |
| 🇺🇸 Starburst SysOp Team |
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-7)
|
Hacking Bad Web Bot | |
| Anonymous |
Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (Windows; U; Windows NT 6.1; ko-KR) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27
|
Web App Attack | |
| 🇮🇪 AutosOnShow |
blocked for webapp attack | path requested: /.env | seen at 2026-05-31 15:46:44.408 |
|
Web App Attack | |
| 🇸🇬 anotherwatcher |
bad bot
|
Bad Web Bot | |
| Anonymous |
Date: 2026/05/31 23 09 03
URI: http://121.184.2.116:8000/.env
|
Web App Attack | |
| Anonymous |
138.68.85.161 - - [31/May/2026:12:36:04 +0000] "GET /.env HTTP/1.1" 404 193 "-" "Mozilla/5.0 (CentOS; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
|
Bad Web Bot Web App Attack | |
| 🇺🇸 sefinek.net |
Blocked by UFW on NY01 [8081/tcp] | SPT: 42079 | TTL: 244 | LEN: 40 | TOS: 0x08 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇫🇷 evvsk |
8080/tcp
|
Port Scan | |
| 🇬🇧 Andrew |
Blocked by UFW (TCP on port 8001).
Source port: 42079
TTL: 245
Packet length: 40
TOS: 0x00
This report (for 138.68.85.161) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇹🇷 Threat.live |
Suspicious Connection Attempts
|
Brute-Force | |
| 🇺🇸 Choice Tech LLC |
Blocked by OPNsense firewall; 3 hits, proto=tcp, ports=80,8001,8888
|
Port Scan Hacking | |
| 🇬🇧 ISPLtd |
May 31 07:18:00 138.68.85.161 TCP SPT=42079 DPT=8082 SYN
May 31 07:22:37 138.68.85.161 TCP SPT=42079 DPT=8888 SYN
May 31 07:22:43 138.68.85.161 TCP SPT=42079 DPT=8001 SYN
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown