JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.16.17

138.68.16.17 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.16.17

Whois 138.68.16.17

IP Abuse Reports for 138.68.16.17:

This IP address has been reported a total of 48 times from 41 distinct sources. 138.68.16.17 was first reported on July 4th 2024, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 viaccess_orca	2026-05-26 07:34:54 (4 weeks ago)	Automatic report from Python "IP Blocklist Generator" script	Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 viaccess_orca	2026-04-22 07:18:50 (2 months ago)	Automatic report from Python "IP Blocklist Generator" script	Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇫🇷 viaccess_orca	2026-03-23 08:18:01 (3 months ago)	Automatic report from Python "IP Blocklist Generator" script	Web Spam Port Scan Brute-Force Bad Web Bot Web App Attack
🇧🇷 SOC-BR	2026-01-05 07:18:25 (5 months ago)	Attack detected by Fortinet - backdoor: SystemBC.Botnet - 2026-01-04 22:29:45 - Source Port 50348	Port Scan Hacking
🇺🇸 gu-alvareza	2026-01-05 07:05:08 (5 months ago)	SystemBC.Botnet	DDoS Attack Hacking
🇩🇪 Mr-Money	2026-01-05 03:42:09 (5 months ago)	scenario: crowdsecurity/http-backdoors-attempts - events: 2	Hacking Web App Attack
🇩🇪 hbrks	2026-01-05 01:22:25 (5 months ago)	8 attack(s) detected, such as these: {"event":"web_block","ip":"138.68.16.17","host":"152.53.100.117 ... show more 8 attack(s) detected, such as these: {"event":"web_block","ip":"138.68.16.17","host":"152.53.100.117","request":"GET /password.php HTTP/1.1","user_agent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36","reason":"service:unknow","timestamp":"2026-01-05T01:22:25 00:00","logentry":"152.53.100.117 138.68.16.17 - - [05/Jan/2026:01:22:25 0000] GET /password.php HTTP/1.1 444 0 - Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 - matched:service:unknow"} * Report Details : https://p4u.xyz/NECX80ARWKZ/1 IP Details *: https://p4u.xyz/NECX80ARWKZ/2 show less	Web Spam Hacking Bad Web Bot
Anonymous	2026-01-05 00:48:24 (5 months ago)	138.68.16.17 - - [05/Jan/2026:01:48:23 +0100] "GET / HTTP/1.1" 301 169 "-" "curl/8.1.2"	Bad Web Bot
🇺🇸 antlac1	2026-01-04 22:12:25 (5 months ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2026-01-04 22:08:41 (5 months ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.16.17 2026-01-0 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.16.17 2026-01-04 01:05:29 /alive.php 2026-01-04 01:05:27 /ab2g 2026-01-04 01:05:28 /ab2h show less	Web App Attack
🇺🇸 EricTheRedFL	2026-01-04 20:50:18 (5 months ago)	web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:14 -0500] "\x16\x03\x01" 301 613 "-" "-" web.a ... show more web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:14 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:14 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:14 -0500] "GET / HTTP/1.1" 301 517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:14 -0500] "\x16\x03\x01" 301 613 "-" "-" web.ab-data.us:80 138.68.16.17 - - [04/Jan/2026:15:50:15 -0500] "GET /form.html HTTP/1.1" 301 535 "-" "curl/8.1.2" ... show less	Hacking Brute-Force Web App Attack
Anonymous	2026-01-04 20:18:00 (5 months ago)		Web App Attack
🇺🇸 zwebvigil	2026-01-04 20:11:49 (5 months ago)	138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET / HTTP/1.1" 401 381 "-" port=43914 "Mozilla/5.0 (Win ... show more 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET / HTTP/1.1" 401 381 "-" port=43914 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 1240 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET /form.html HTTP/1.1" 401 381 "-" port=43930 "curl/8.1.2" "-" "-" "<ipaddr>" 577 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET /upl.php HTTP/1.1" 401 381 "-" port=43938 "Mozilla/5.0" "-" "-" "<ipaddr>" 715 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET /t4 HTTP/1.1" 401 381 "-" port=43944 "Mozilla/5.0" "-" "-" "<ipaddr>" 362 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET /geoip/ HTTP/1.1" 401 381 "-" port=43948 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "-" "-" "<ipaddr>" 508 138.68.16.17 [04/Jan/2026:12:11:48 -0800] "GET /favicon.ico HTTP/1.1" 401 381 "-" port=43954 "Mozilla/5.0 (Windows NT 10.0; Win64 show less	Web App Attack
Anonymous	2026-01-04 19:46:59 (5 months ago)	[Sun Jan 04 14:46:50.182614 2026] [proxy_fcgi:error] [pid 1714991:tid 1714991] [client 138.68.16.17: ... show more [Sun Jan 04 14:46:50.182614 2026] [proxy_fcgi:error] [pid 1714991:tid 1714991] [client 138.68.16.17:46262] AH01071: Got error 'Primary script unknown' [Sun Jan 04 14:46:50.781186 2026] [proxy_fcgi:error] [pid 1717987:tid 1717987] [client 138.68.16.17:46300] AH01071: Got error 'Primary script unknown' [Sun Jan 04 14:46:51.061401 2026] [proxy_fcgi:error] [pid 1712459:tid 1712459] [client 138.68.16.17:46326] AH01071: Got error 'Primary script unknown' ... show less	Web App Attack
Anonymous	2026-01-04 19:30:18 (5 months ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.11

🇷🇴 193.32.162.200

🇰🇷 150.109.230.210

🇮🇹 83.229.8.197

🇳🇱 51.158.248.123

🇬🇧 45.82.76.101

🇫🇷 37.166.178.148

🇮🇩 36.64.131.68

🇺🇸 20.65.195.28

🇩🇪 3.69.95.234

🇨🇳 220.181.108.80

🇺🇸 208.87.242.185

🇷🇴 193.46.255.86

🇺🇸 104.236.53.110

🇯🇵 101.36.104.242

🇷🇺 91.215.85.193

🇫🇷 46.16.202.73

🇳🇱 31.14.32.4

🇫🇷 5.196.45.10

🇻🇳 160.191.89.47