138.68.91.90
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
138.68.91.90 has been reported 33 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
33 from
33 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇮🇳 evicky2002 |
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking Brute-Force SSH | |
| 🇺🇸 anon333 |
Hacker syslog review 1785591222
|
Hacking | |
| Anonymous |
Fail2Ban Log Report 138.68.91.90 - [01/Aug/2026:14:53:47 +0200] "\x00\x0E8internet\x00\x00\x00\x00\x00" 403 146 "-" "-" "-" "-"
...
|
Port Scan Hacking | |
| 🇩🇪 femboy.cat |
Port scan to tcp/443 from 138.68.91.90
|
Brute-Force | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/rdg-local-lockdown-high.
|
Bad Web Bot Web App Attack | |
| 🇺🇸 brantknudson.org |
Client sent invalid (non-HTTP) message to honeypot web server:
138.68.91.90 - - [01/Aug/2026:06:18:58 -0500] "\x00\x0E8internet\x00\x00\x00\x00\x00" 400 166 "-" "-" "-" ""
|
Web App Attack Port Scan | |
| 🇨🇳 PrivateLiu |
[AbuseIPDB auto-report] Rules: Rule3, Rule4. Region: non-CN. Non-standard HTTP methods: ; Unsupported/malformed requests: HTTP 400 responses or POST to static/read-only paths. Sample paths: . Statuses: 400. Methods: . UA: N/A
|
Hacking Bad Web Bot Web App Attack | |
| 🇩🇪 onkeltom |
Multiple unauthorized connection attempts
|
Brute-Force Hacking | |
| 🇩🇪 london2038.com |
Malformed or malicious web request
138.68.91.90 - - [01/Aug/2026:12:14:51 +0200] "\x00\x0E8internet\x00\x00\x00\x00\x00" 400 157 "-" "-"
|
Hacking Web App Attack | |
| 🇩🇰 swrlly |
1 unauthorized webserver connection
|
Web App Attack | |
| Anonymous |
Fail2Ban triggered
|
Web App Attack | |
| 🇫🇷 pm33 |
Probing for resource vulnerabilities HTTP(S)
|
Web App Attack | |
| 🇯🇵 mkaraki |
1785563625 # Service_probe # SIGNATURE_SEND # source_ip:138.68.91.90 # dst_port:443
...
|
Port Scan | |
| 🇩🇪 nidaren |
138.68.91.90 - - [01/Aug/2026:07:40:05 +0200] "\x00\x0E8internet\x00\x00\x00\x00\x00" 400 150 "-" "-"
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 anycast_ac |
[WebProtection] L4/L7 attack source · PROTO-443-SILENT-DROP · 5 hits/window
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown