JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

68.183.214.220

Neutral Activity

Abuse confidence score ?

0% Low Risk

296 reports

92 reporters · latest 11 months ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

68.183.214.220 has been reported 296 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 68.183.214.220

Export CSV

This IP address has been reported a total of 296 times from 92 distinct sources. 68.183.214.220 was first reported on October 3rd 2021, and the most recent report was 11 months ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 Sipo Chutão	2025-10-19 03:00:01 (11 months ago)	/.env	Hacking
🇧🇪 sid3windr	2025-10-16 23:19:12 (11 months ago)	GET /.env (Tarpitted for 1d15h8m30s, wasted 8.06MB)	Web App Attack
🇧🇪 sid3windr	2025-10-16 20:45:18 (11 months ago)	GET /.env (Tarpitted for 1d15h8m32s, wasted 8.06MB)	Web App Attack
Anonymous	2025-10-16 00:11:13 (11 months ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇨🇳 ThreatBook.io	2025-10-15 22:44:05 (11 months ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/68.183.214.220 2025 ... show more ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/68.183.214.220 2025-10-15 11:59:53 /.git/config 2025-10-15 11:59:52 /.env show less	Web App Attack
Anonymous	2025-10-15 15:57:08 (11 months ago)	Reported from Nginx log analysis 18. Log: 68.183.214.220 - - [15/Oct/2025:xx:xx:xx 0200] "GET /.env ... show more Reported from Nginx log analysis 18. Log: 68.183.214.220 - - [15/Oct/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" \| 68.183.214.220 - - [15/Oct/2025:xx:xx:xx 0200] "GET /.env HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" \| 68.183.214.220 - - [15/Oct/2025:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" \| 68.183.214.220 - - [15/Oct/2025:xx:xx:xx 0200] "GET /.git/config HTTP/1.1" xxx xxx "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" "-" "DE Germany Frankfurt am Main" "AS14061" "DIGITALOCEAN-ASN" show less	Port Scan Brute-Force SSH
🇩🇰 castipo	2025-10-15 15:44:58 (11 months ago)	nginx-botsearch :: 68.183.214.220 - - [15/Oct/2025:14:47:12 +0700] "GET /.env HTTP/1.1" 301 162 "-" ... show more nginx-botsearch :: 68.183.214.220 - - [15/Oct/2025:14:47:12 +0700] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 68.183.214.220 - [ip] "GET /.env HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" cfip=- cfray=- 68.183.214.220 - - [15/Oct/2025:14:47:12 +0700] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" 68.183.214.220 - [ip] "GET /.git/config HTTP/1.1" 301 162 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" cfip=- cfray=- 68.183.214.220 - - [15/Oct/2025:22:44:47 +0700] "GET /.env HTTP/1.1" 403 118 "-" "Mozilla/5.0; Keydrop.io/1.0(onlyscans.com/about);" show less	Port Scan Hacking Web App Attack
🇺🇸 kuj	2025-10-15 14:21:39 (11 months ago)	2025-10-15T08:21:38.230244-06:00 derp derper[549]: 2025/10/15 08:21:38 http: TLS handshake error fro ... show more 2025-10-15T08:21:38.230244-06:00 derp derper[549]: 2025/10/15 08:21:38 http: TLS handshake error from 68.183.214.220:49864: acme/autocert: missing server name 2025-10-15T08:21:38.512107-06:00 derp derper[549]: 2025/10/15 08:21:38 http: TLS handshake error from 68.183.214.220:49876: client sent an HTTP request to an HTTPS server 2025-10-15T08:21:38.909752-06:00 derp derper[549]: 2025/10/15 08:21:38 http: TLS handshake error from 68.183.214.220:49878: acme/autocert: missing server name ... show less	Port Scan Brute-Force
🇳🇱 Study Bitcoin 🤗	2025-10-15 13:52:46 (11 months ago)	Port probe to tcp/443 (https) [srv126]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇨🇿 Countryman	2025-10-15 13:10:51 (11 months ago)	repeated unauthorized connection attempts, host sweep, port scan	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-10-15 12:54:40 (11 months ago)	Port probe to tcp/443 (https) [srv130]	Port Scan Brute-Force Bad Web Bot Web App Attack
🇩🇪 oh.mg	2025-10-15 12:51:28 (11 months ago)	[Wed Oct 15 14:51:28.328019 2025] [security2:error] [pid 3644061:tid 3644096] [client 68.183.214.220 ... show more [Wed Oct 15 14:51:28.328019 2025] [security2:error] [pid 3644061:tid 3644096] [client 68.183.214.220:35552] [client 68.183.214.220] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "95.216.72.247"] [uri "/.env"] [unique_id "aO-Y0LV2V6RVyMVG1pR4VwAAAgY"] ... show less	Bad Web Bot Web App Attack
🇺🇸 www.winos.me	2025-10-15 12:41:59 (11 months ago)	stream fail	Web App Attack
🇺🇸 MPL	2025-10-15 12:25:14 (11 months ago)	tcp/443 (16 or more attempts)	Port Scan
Anonymous	2025-10-15 12:18:28 (11 months ago)	Fuzzing/Looking for credentials files.	Brute-Force Web App Attack

Showing 1 to 15 of 296 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇮 176.65.134.65

🇫🇷 163.172.66.206

🇷🇸 109.92.31.249

🇺🇸 76.46.16.13

🇺🇸 50.170.134.222

🇬🇭 41.242.115.84

🇬🇧 2a06:4884:d000::dd

🇰🇷 211.106.133.202

🇳🇱 109.160.32.149

🇺🇸 72.76.131.48

🇳🇱 52.233.193.61

🇰🇪 41.90.100.147

🇷🇺 213.33.204.130

🇪🇹 196.189.155.89

🇺🇸 143.198.153.119

🇮🇩 114.12.17.98

🇨🇳 111.56.156.96

🇻🇳 103.72.56.174

🇵🇱 91.150.223.168

🇫🇷 85.217.140.6