138.68.243.166
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Santa Clara, California
No reports in the last 60 days
138.68.243.166 has been reported 45 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
45 from
40 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇮 bittiguru.fi |
WordPress brute force
|
Brute-Force | |
| 🇳🇱 i-turnradio.nl |
2025-12-26 @ 15:29:32 (CET) ~ Blocked based on risk assessment and prior abuse reports
|
Web App Attack | |
| 🇫🇷 solution.it |
[Fri Dec 26 14:22:09.634419 2025] [php7:error] [pid 3148277:tid 3148277] [client 138.68.243.166:51134] script '/var/www/html/xmlrpc.php' not found or unable to stat
|
Web App Attack | |
| 🇮🇩 zam |
138.68.243.166 - - [26/Dec/2025:13:21:19 +0000] "POST //xmlrpc.php HTTP/1.1" 403 199
|
Web App Attack | |
| 🇩🇪 bryth |
Wordpress login/xmlrpc abuse (Fri Dec 26 11:39:36 AM UTC 2025)
|
Hacking Web App Attack | |
| Anonymous |
IP banned by Fail2Ban in jail nginx-abusive-ips
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇹🇭 MWA SOC |
|
Hacking | |
| 🇮🇹 Rosh |
[12/26/25 12:18:05] 1 attack: //wp-includes/wlwmanifest.xml (severity 6);
|
Web App Attack | |
| 🇧🇪 voormedia |
Accessed trap at '/xmlrpc.php'
|
Web App Attack | |
| 🇩🇪 Mr-Money |
scenario: crowdsecurity/http-probing - events: 11
|
Hacking Web App Attack | |
| Anonymous |
"GET /wp-includes/wlwmanifest.xml HTTP/1.1"
|
Hacking Web App Attack | |
| 🇷🇸 Smel |
HTTP/80/443/8080 Unauthorized Probe, Hack -
|
Hacking Web App Attack | |
| 🇩🇪 tinect |
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
|
Web App Attack | |
| 🇫🇷 Jean Valjean |
Fail2ban Caboom : wp-login.php Bruteforce
|
Brute-Force Web App Attack | |
| Anonymous |
PSCSERV
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown