JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.86.97

138.68.86.97 was found in our database!

This IP was reported 47 times. Confidence of Abuse is 61%: ?

61%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.86.97

Whois 138.68.86.97

IP Abuse Reports for 138.68.86.97:

This IP address has been reported a total of 47 times from 36 distinct sources. 138.68.86.97 was first reported on March 13th 2025, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EGP Abuse Dept	2026-05-28 06:23:04 (1 week ago)	Scanning for web/db/file exploits on www.standaardkerstpakket.nl	SQL Injection Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2026-05-27 09:34:57 (1 week ago)	port=80, indicator_type=info-leak	Hacking
🇩🇪 big-cloud.nl	2026-05-25 15:01:25 (2 weeks ago)	Try to access /.git	Web App Attack
🇺🇸 TPI-Abuse	2026-05-23 22:47:28 (2 weeks ago)	(mod_security) mod_security (id:210492) triggered by 138.68.86.97 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.68.86.97 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 23 18:47:24.634452 2026] [security2:error] [pid 19355:tid 19355] [client 138.68.86.97:38682] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aaattanasio.com"] [uri "/wp-includes/build/.env"] [unique_id "ahIufKcUK_Kou9yyMHe0NwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 updown.io	2026-05-22 12:49:19 (2 weeks ago)	{"level":"info","ts":1779454158.9973066,"logger":"http.log.access.log1","msg":"handled request","req ... show more {"level":"info","ts":1779454158.9973066,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"138.68.86.97","remote_port":"60394","client_ip":"138.68.86.97","proto":"HTTP/1.1","method":"GET","host":"status.majorcadailybulletin.com","uri":"/panel","headers":{"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.majorcadailybulletin.com"}},"bytes_read":0,"user_id":"","duration":0.000523125,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}} {"level":"info","ts":1779454159.0024514,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"138.68.86.97", ... show less	DDoS Attack Web App Attack
Anonymous	2026-05-21 09:39:12 (2 weeks ago)	Bot / seems abusive / Apache connections: 117	DDoS Attack Web Spam Bad Web Bot Web App Attack
Anonymous	2026-05-21 03:17:06 (2 weeks ago)	138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /uploads/uploads/uploads/uploads/uploads/uploads/ ... show more 138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /uploads/uploads/uploads/uploads/uploads/uploads/uploads/uploads/uploads HTTP/1.1" 404 7626 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /app/xxx HTTP/1.1" 404 15629 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /admin/pages/page HTTP/1.1" 404 15632 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /user/editor.js HTTP/1.1" 404 15631 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 138.68.86.97 - - [21/May/2026:05:16:57 +0200] "GET /adminsaassasa.js HTTP/1.1" 404 15646 "-" "Mozilla/5.0 (Windows NT 10.0; Win64 ... show less	DDoS Attack
🇪🇸 pipeline.es	2026-05-20 12:28:16 (2 weeks ago)	CrowdSec wazuh-web-scan \| Wazuh rule 31151 \| Multiple web server 400 error codes from same source ip ... show more CrowdSec wazuh-web-scan \| Wazuh rule 31151 \| Multiple web server 400 error codes from same source ip. \| URL: /wp-includes/assets/application \| Log: 138.68.86.97 - - [20/May/2026:13:46:17 +0200] \"GET /wp-includes/assets/application HTTP/1.1\" 404 196 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=DE show less	Port Scan Web App Attack
🇪🇸 pipeline.es	2026-05-20 11:47:00 (2 weeks ago)	CrowdSec wazuh-web-scan \| Wazuh rule 31151 \| Multiple web server 400 error codes from same source ip ... show more CrowdSec wazuh-web-scan \| Wazuh rule 31151 \| Multiple web server 400 error codes from same source ip. \| URL: /wp-includes/js/js \| Log: 138.68.86.97 - - [20/May/2026:13:46:17 +0200] \"GET /wp-includes/js/js HTTP/1.1\" 404 196 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=DE show less	Port Scan Web App Attack
🇳🇱 EGP Abuse Dept	2026-05-20 11:29:20 (2 weeks ago)	Scanning for web/db/file exploits on www.cscv.nl	SQL Injection Bad Web Bot Web App Attack
🇳🇱 Site.eu	2026-05-20 03:51:32 (2 weeks ago)	Excessive 404/403 errors	Brute-Force
🇧🇪 cmbplf	2026-05-19 14:30:59 (2 weeks ago)	624 limiting connections by zone (2w5d20h)	DDoS Attack
🇳🇱 Savvii	2026-05-19 09:43:33 (2 weeks ago)	20 attempts against mh_ha-misbehave-ban on ethyl	Brute-Force Bad Web Bot Web App Attack
🇳🇱 MM-bot	2026-05-19 08:39:17 (2 weeks ago)	URL-probe: HTTP/1.1 GET request on /admin/pages/page (2026-05-19 10:39:17 UTC+2)	Web App Attack Hacking
🇧🇪 cmbplf	2026-05-18 13:52:57 (3 weeks ago)	2627 limiting connections by zone (22h10m59s)	DDoS Attack

Showing 1 to 15 of 47 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.254.11

🇫🇷 91.231.89.13

🇺🇸 66.228.53.4

🇫🇮 65.109.227.71

🇪🇸 46.24.47.94

🇮🇩 202.10.40.201

🇵🇰 175.107.1.117

🇺🇸 162.216.150.139

🇸🇪 155.4.244.179

🇭🇰 119.12.167.232

🇭🇰 104.208.108.166

🇺🇸 103.203.57.4

🇨🇳 101.96.200.56

🇵🇱 81.210.53.105

🇿🇦 66.8.6.130

🇸🇳 41.208.147.131

🇺🇸 2607:f8b0:400e:c07::121

🇵🇰 223.123.73.218

🇨🇳 171.118.66.88

🇩🇪 164.92.161.215