JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

68.183.236.168

Activity Trending Down

Abuse Confidence Score

25% Elevated

21 reports

15 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

21 from 15 distinct reporters

First reported

December 12th 2021

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇳🇱 Netherlands 4 🇩🇪 Germany 3 🇪🇸 Spain 2

Most common categories Web App Attack 11 Hacking 5 Bad Web Bot 5 Brute-Force 2 Exploited Host 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 Gem	2026-10-02 22:08:18 UTC · (1 month ago)	Unauthorized web scan.	Web App Attack
🇳🇱 Alt255	2026-09-30 04:36:37 UTC · (1 month ago)	[ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [30/Sep/2026:06:36:33 +0200] "GET /.git/config HTTP/1.1" 404 68888 "https://zes-tyemma.benjamin-tiger22-89.workers.dev/proxy?m ... show more [ti-01sc] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [30/Sep/2026:06:36:33 +0200] "GET /.git/config HTTP/1.1" 404 68888 "https://zes-tyemma.benjamin-tiger22-89.workers.dev/proxy?modify&proxyUrl=https%3A%2F%2Fscriptum-site.nl%2F.git%2Fconfig" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-29 16:27:45 UTC · (1 month ago)	[ns31.kdns.gr] httpd-config-scan: sites=www.dentmagic.gr; logs=/var/log/httpd/domains/dentmagic.gr.log; samples=/.aws/credentials \| /.env.dist	Hacking Web App Attack
🇳🇱 Alt255	2026-09-28 06:19:21 UTC · (1 month ago)	[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [28/Sep/2026:08:19:05 +0200] "GET /.git/HEAD HTTP/1.1" 404 7868 "https://super-math-e547.s7bqodks.workers.dev/proxy?modify&prox ... show more [livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [28/Sep/2026:08:19:05 +0200] "GET /.git/HEAD HTTP/1.1" 404 7868 "https://super-math-e547.s7bqodks.workers.dev/proxy?modify&proxyUrl=http%3A%2F%2Fapijansen.bdaconnect.nl%2F.git%2FHEAD" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-27 04:31:41 UTC · (1 month ago)	Failed login attempt detected by Fail2Ban in plesk-modsecurity jail	Exploited Host
🇳🇱 Alt255	2026-09-27 04:02:50 UTC · (1 month ago)	[cb-03al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [27/Sep/2026:06:02:31 +0200] "GET /.git/config HTTP/1.1" 301 517 "https://www.google.com/search?q=creativecosmeticsbusiness.nl ... show more [cb-03al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [27/Sep/2026:06:02:31 +0200] "GET /.git/config HTTP/1.1" 301 517 "https://www.google.com/search?q=creativecosmeticsbusiness.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" ... show less	Bad Web Bot Web App Attack
Anonymous	2026-09-26 03:23:24 UTC · (1 month ago)	IP matched detection query bad paths many.	Brute-Force Web App Attack
🇺🇸 TPI-Abuse	2026-09-26 01:00:22 UTC · (1 month ago)	(mod_security) mod_security (id:210492) triggered by 68.183.236.168 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 21:00:12.827863 2026] [security2:error] [pid 16310:tid 16310] [client 68.183.236.168:0] Mod ... show more (mod_security) mod_security (id:210492) triggered by 68.183.236.168 (-): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 21:00:12.827863 2026] [security2:error] [pid 16310:tid 16310] [client 68.183.236.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lafollette.construction.savingshvac.com"] [uri "/.git/config"] [unique_id "arcZHHFteE4zMsxRoFoGKwAAAB4"], referer: https://www.google.com/search?q=www.lafollette.construction.savingshvac.com show less	Brute-Force Bad Web Bot Web App Attack
🇩🇪 SCHAPPY	2026-09-25 13:55:04 UTC · (1 month ago)	Malicious activity from IP detected: crowdsecurity/http-probing.	Web App Attack Hacking
🇪🇸 robotstxt	2026-09-25 01:36:04 UTC · (1 month ago)	68.183.236.168 - - [25/Sep/2026:01:35:19 +0000] "GET /.git/HEAD HTTP/1.1" 403 77569 "https://alexcasares.com/.git/HEAD" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "-" edge="68.183.236.1 ... show more 68.183.236.168 - - [25/Sep/2026:01:35:19 +0000] "GET /.git/HEAD HTTP/1.1" 403 77569 "https://alexcasares.com/.git/HEAD" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "-" edge="68.183.236.168" 68.183.236.168 - - [25/Sep/2026:01:35:19 +0000] "GET /.env HTTP/1.1" 403 77584 "https://alexcasares.com/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "-" edge="68.183.236.168" 68.183.236.168 - - [25/Sep/2026:01:35:19 +0000] "GET /config.json HTTP/1.1" 403 15424 "https://alexcasares.com/config.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" "-" edge="68.183.236.168" 68.183.236.168 - - [25/Sep/2026:01:35:19 +0000] "GET /secrets.json HTTP/1.1" 403 15424 "https://alexcasares.com/secrets.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "-" edge="68.183.236.16 ... show less	Web App Attack
🇫🇷 masterguru	2026-09-21 04:13:16 UTC · (1 month ago)	Blocked Cloudflare Worker request. Pattern match "." at REQUEST_HEADERS:Cf-Worker. (5025-196)	Hacking
🇩🇪 Bedios GmbH	2026-09-21 01:19:50 UTC · (1 month ago)	Login credentials theft attempt	Hacking
🇳🇱 Alt255	2026-09-18 15:50:33 UTC · (1 month ago)	[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [18/Sep/2026:17:50:20 +0200] "GET /.env.backup HTTP/2.0" 301 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Geck ... show more [cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 68.183.236.168 - - [18/Sep/2026:17:50:20 +0200] "GET /.env.backup HTTP/2.0" 301 456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0" ... show less	Bad Web Bot Web App Attack
🇫🇷 masterguru	2026-09-18 10:26:09 UTC · (1 month ago)	Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)	Hacking Web App Attack
🇨🇭 4server	2026-09-09 16:58:48 UTC · (2 months ago)	[WedSep0918:58:40.4335562026][security2:error][pid2923019:tid2923241][client68.183.236.168:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"9607 ... show more [WedSep0918:58:40.4335562026][security2:error][pid2923019:tid2923241][client68.183.236.168:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".env\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.pmprogettazione.ch.81-17-25-250.cpanel.site\"][uri\"/.env\"][unique_id\"aqGQQOwgo2wqea3FTeotZQAAAc8\"]\,referer:https://www.google.com/search\?q=www.pmprogettazione.ch.81-17-25-250.cpanel.site show less	Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 208.86.26.178

🇺🇸 206.232.3.88

🇺🇸 206.232.0.182

🇬🇧 206.189.125.2

🇩🇪 202.61.252.80

🇳🇱 195.178.110.159

🇵🇱 104.28.165.104

🇵🇱 104.28.161.151

🇸🇦 79.170.53.30

🇺🇸 69.48.205.217

🇩🇴 45.172.152.74

🇮🇪 34.247.176.66

🇮🇷 5.52.84.31

🇸🇦 2a02:cb80:410b:b6b7:806f:68e9:d0ea:cd18

🇳🇱 2001:67c:4e8:f004::a

🇮🇳 223.230.8.94

🇺🇸 204.217.128.214

🇺🇸 204.217.128.198

🇺🇸 204.217.128.176

🇺🇸 204.217.128.82