This IP address has been reported a total of
28
times from
27 distinct
sources.
138.197.29.51 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
byebyte.space auth: GET /wp-includes/wlwmanifest.xml at 2026-07-06T02:21:18Z. Honeypot path hit; fir ...
show morebyebyte.space auth: GET /wp-includes/wlwmanifest.xml at 2026-07-06T02:21:18Z. Honeypot path hit; firewall auto-banned the IP for 24h. UA: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36'. Accept-Language: 'en-US,en;q=0.5'. Accept-Encoding: 'gzip, br'. Country (CF): US. TLS info: {"scheme":"https"}.
show less
{"ClientAddr":"138.197.29.51:61701","ClientHost":"138.197.29.51","ClientPort":"61701","ClientUsernam ...
show more{"ClientAddr":"138.197.29.51:61701","ClientHost":"138.197.29.51","ClientPort":"61701","ClientUsername":"-","DownstreamContentSize":416,"DownstreamStatus":403,"Duration":378996505,"OriginContentSize":416,"OriginDuration":375498773,"OriginStatus":403,"Overhead":3497732,"RequestAddr":"www.cleveradmin.de","RequestContentSize":488,"RequestCount":411108,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/xmlrpc.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-06T03:12:51.404736795+02:00","StartUTC":"2026-07-06T01:12:51.404736795Z","TLSCipher":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","TLSVersion":"1.2","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-06T03:12:51+02:00"}
{"ClientAddr":"138.197.29.51:61701","ClientHost":"138.197.29.51","C
...
show less
Jul 6 02:27:08 mail2 Nextcloud[35487]: {"reqId":"akr2WyPg42o4sVj_VbYCIAAAANY","level":1,"time":"202 ...
show moreJul 6 02:27:08 mail2 Nextcloud[35487]: {"reqId":"akr2WyPg42o4sVj_VbYCIAAAANY","level":1,"time":"2026-07-06T00:27:08+00:00","remoteAddr":"138.197.29.51","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"138.197.29.51\" tried to access using \"cloud.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36","version":"32.0.9.2","data":{"app":"core"}}
Jul 6 02:27:08 mail2 Nextcloud[50361]: {"reqId":"akr2XBVBzkjlLvr7DrvlRAAAAZE","level":1,"time":"2026-07-06T00:27:08+00:00","remoteAddr":"138.197.29.51","user":"--","app":"core","method":"GET","url":"//wp-includes/wlwmanifest.xml","scriptName":"/index.php","message":"Trusted domain error. \"138.197.29.51\" tried to access using \"cloud.akcurate.de\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36",
...
show less