JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.93.57

138.68.93.57 was found in our database!

This IP was reported 24 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.93.57

Whois 138.68.93.57

IP Abuse Reports for 138.68.93.57:

This IP address has been reported a total of 24 times from 21 distinct sources. 138.68.93.57 was first reported on October 9th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇿 Countryman	2026-06-17 15:05:43 (2 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇨🇿 Countryman	2026-06-17 15:05:43 (2 days ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇺🇸 Floofie	2026-06-17 13:53:46 (2 days ago)	138.68.93.57 - - [17/Jun/2026:09:52:59 -0400] "GET /.env.save HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wind ... show more 138.68.93.57 - - [17/Jun/2026:09:52:59 -0400] "GET /.env.save HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 138.68.93.57 - - [17/Jun/2026:09:53:11 -0400] "GET /.env.bak HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 138.68.93.57 - - [17/Jun/2026:09:53:46 -0400] "GET /backup.sql HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 GabrielJST	2026-06-17 11:52:24 (2 days ago)	Port Scan detected from 138.68.93.57 (DE/Germany/-).	Port Scan
🇹🇭 Sawasdee	2026-06-17 10:42:09 (2 days ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇺🇸 TPI-Abuse	2026-06-17 09:31:11 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 138.68.93.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.68.93.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 05:31:06.175960 2026] [security2:error] [pid 21876:tid 21876] [client 138.68.93.57:45666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.11"] [uri "/.git/config"] [unique_id "ajJpWo1mSuQf6SIODPrC7wAAABc"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-06-17 08:04:10 (2 days ago)	(mod_security) mod_security (id:210492) triggered by 138.68.93.57 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.68.93.57 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 04:04:04.077276 2026] [security2:error] [pid 13542:tid 13542] [client 138.68.93.57:56784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.88"] [uri "/.git/HEAD"] [unique_id "ajJU9EqL2tyriWV6P__CDQAAABU"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 technash	2026-06-17 06:55:00 (2 days ago)	Port scanning detection [Fortinet/Sentinel]. Deny/drop traffic.	Port Scan
🇧🇷 ludarkstar99	2026-06-17 05:45:09 (2 days ago)	Blocked by os-abuseipdb; 10 hits, proto=tcp, ports=2077,2078,2082,2083,2086,2087,2095,2096,443,80	Port Scan Hacking
🇺🇸 MPL	2026-06-17 05:04:59 (2 days ago)	tcp port scan (20 or more attempts)	Port Scan
🇹🇷 Threat.live	2026-06-17 03:50:04 (2 days ago)	Suspicious Connection Attempts	Brute-Force
🇸🇪 donarev419	2026-06-17 03:40:01 (2 days ago)	Port scan detected on port 443 (connection without data transfer)	Port Scan
🇭🇰 sandra361	2026-06-17 02:46:21 (2 days ago)	Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidenc ... show more Port scan detected: 9 attempts across 9 ports (2077,2082,2083,2086,2087,2095,2096,443,80). \| Evidence: GHOST_SCAN: IN=eth0 SRC=138.68.93.57 LEN=60 TOS=0x14 PREC=0x00 TTL=50 ID=1142 DF PROTO=TCP SPT=35412 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Port Scan
🇦🇹 centurion	2026-06-17 02:29:39 (2 days ago)	Unauthorized attempt on git [2078/tcp] Source port: 39266 TTL: 55 Packet length: 60 TOS: 0x00 https: ... show more Unauthorized attempt on git [2078/tcp] Source port: 39266 TTL: 55 Packet length: 60 TOS: 0x00 https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇵🇱 sefinek.net	2026-06-17 02:09:36 (3 days ago)	Honeypot hit: Empty payload (likely service probe); 2078 [1], 2082 [1], 2077 [1], 2086 [1], 2087 [1] ... show more Honeypot hit: Empty payload (likely service probe); 2078 [1], 2082 [1], 2077 [1], 2086 [1], 2087 [1], 2083 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 185.67.33.244

🇺🇸 162.216.150.135

🇨🇳 117.40.114.65

🇺🇸 50.46.141.125

🇬🇧 35.203.211.227

🇫🇷 31.33.14.33

🇨🇱 201.186.40.161

🇨🇱 191.118.34.170

🇳🇬 102.88.137.213

🇩🇪 87.106.134.4

🇱🇹 81.30.98.144

🇷🇴 80.94.92.182

🇺🇸 40.124.172.146

🇬🇧 35.203.210.138

🇩🇪 213.209.159.236

🇨🇳 211.149.134.60

🇹🇼 198.235.24.82

🇺🇸 184.12.120.38

🇺🇸 165.227.189.1

🇭🇰 152.32.171.99