138.68.105.9
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
23 from
17 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
IP matched detection query 50 and more bad rqs apache.
|
Hacking Bad Web Bot Brute-Force Web App Attack | |
| 🇩🇪 FeG Deutschland |
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
|
Exploited Host Web App Attack | |
| Anonymous |
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force Web App Attack Hacking | |
| 🇩🇪 konseptit |
(wordpress) Failed wordpress login from 138.68.105.9 (DE/Germany/-)
|
Brute-Force | |
| 🇮🇹 VHosting |
Detected WordPress attack from different servers
|
Brute-Force Web App Attack | |
| 🇫🇷 masterguru |
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)
|
Hacking | |
| 🇫🇷 Tilellit.PRO |
WP Armour Plugin detection
|
Web Spam Brute-Force | |
| 🇫🇮 toolbit.online |
Automated web enumeration activity detected - 4 suspicious requests probing multiple common application paths within 6 minutes. Not banned: stayed below automatic ban thresholds.
|
Bad Web Bot Web App Attack | |
| Anonymous |
Reported by internal abuse tracking
|
DDoS Attack Web App Attack | |
| Anonymous |
60001/tcp (1 or more attempts)
|
Port Scan | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.105.9 (DE/Germany/-): 2 in the last 3600 secs (0-193)
|
Hacking | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.105.9 (DE/Germany/-): 1 in the last 3600 secs (0-201)
|
Hacking | |
| 🇺🇸 xmission.com |
Blocked by UFW (TCP on 8808)
Source port: 61003
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 138.68.105.9) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇳🇱 StopAbuse |
tcp/443
|
Port Scan | |
| 🇺🇸 RAP |
2025-03-09 03:45:06 UTC Unauthorized activity to TCP port 8088. Web App
|
Port Scan Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown