AbuseIPDB » 138.68.40.68

138.68.40.68 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 63%: ?

63%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.68.40.68

Whois 138.68.40.68

IP Abuse Reports for 138.68.40.68:

This IP address has been reported a total of 32 times from 24 distinct sources. 138.68.40.68 was first reported on August 12th 2024, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
octageeks.com	2024-08-18 04:07:48 (3 weeks ago)	Wordpress malicious attack:[octa404]	Web App Attack
octageeks.com	2024-08-16 04:08:31 (3 weeks ago)	Wordpress malicious attack:[octa404]	Web App Attack
octageeks.com	2024-08-15 04:07:45 (3 weeks ago)	Wordpress malicious attack:[octa404]	Web App Attack
gu-alvareza	2024-08-13 07:05:18 (3 weeks ago)	SystemBC.Botnet	DDoS Attack Hacking
BSG Webmaster	2024-08-13 07:00:03 (3 weeks ago)	Port scanning (Port 443)	Port Scan Hacking
Anonymous	2024-08-13 04:38:12 (3 weeks ago)	Bot / seems abusive / Apache connections: 22	DDoS Attack Web Spam Bad Web Bot Web App Attack
octageeks.com	2024-08-13 04:07:43 (3 weeks ago)	Wordpress malicious attack:[octa404]	Web App Attack
Anonymous	2024-08-13 04:00:37 (3 weeks ago)	GET /t4	Web App Attack
mw	2024-08-13 03:47:15 (3 weeks ago)	138.68.40.68 - - [12/Aug/2024:22:47:10 -0500] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT ... show more138.68.40.68 - - [12/Aug/2024:22:47:10 -0500] "GET / HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.68.40.68 - - [12/Aug/2024:22:47:11 -0500] "GET /form.html HTTP/1.1" 404 136 "-" "curl/8.1.2" 138.68.40.68 - - [12/Aug/2024:22:47:12 -0500] "GET /upl.php HTTP/1.1" 404 136 "-" "Mozilla/5.0" 138.68.40.68 - - [12/Aug/2024:22:47:14 -0500] "GET /t4 HTTP/1.1" 404 136 "-" "Mozilla/5.0" 138.68.40.68 - - [12/Aug/2024:22:47:14 -0500] "GET /geoip/ HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.68.40.68 - - [12/Aug/2024:22:47:15 -0500] "GET /favicon.ico HTTP/1.1" 404 193 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
no1knows.com	2024-08-13 03:37:28 (3 weeks ago)	2024/08/13 04:37:24 [error] 1444340#1444340: 34976 FastCGI sent in stderr: "Primary script unknown" ... show more2024/08/13 04:37:24 [error] 1444340#1444340: 34976 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.68.40.68, server: _, request: "GET /upl.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2024/08/13 04:37:25 [error] 1444340#1444340: 34981 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.68.40.68, server: _, request: "GET /1.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" 2024/08/13 04:37:25 [error] 1444340#1444340: 34983 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.68.40.68, server: _, request: "GET /systembc/password.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/www.sock:", host: "185.176.161.108" ... show less	Brute-Force Bad Web Bot
adrian Guirao	2024-08-13 02:29:46 (3 weeks ago)	Scanning for open ports and vulnerable services.	Port Scan
tg_de	2024-08-13 01:20:47 (3 weeks ago)	17 attempts since 12.08.2024 13:42:52 UTC - last search for: /password.php	Web App Attack
dzpk	2024-08-13 00:03:47 (3 weeks ago)	138.68.40.68 - - [13/Aug/2024:02:03:46 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03a\x80\x10^\xCA\ ... show more138.68.40.68 - - [13/Aug/2024:02:03:46 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03a\x80\x10^\xCA\x84\x9D\xBF\x1Bo\xCC\xCF\x9D=\xB4s%\xBD\xE0\xFA#\xC9A\x83\x01\x03\xB0\x9E/\x8B\x04=\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" show less	Web App Attack
ufn.edu.br	2024-08-12 23:07:10 (3 weeks ago)	[Mon Aug 12 20:07:07.576114 2024] [access_compat:error] [pid 13627] [client 138.68.40.68:39240] AH01 ... show more[Mon Aug 12 20:07:07.576114 2024] [access_compat:error] [pid 13627] [client 138.68.40.68:39240] AH01797: client denied by server configuration: /var/www/html/upl.php [Mon Aug 12 20:07:09.265005 2024] [access_compat:error] [pid 13575] [client 138.68.40.68:39290] AH01797: client denied by server configuration: /var/www/html/1.php [Mon Aug 12 20:07:10.132098 2024] [access_compat:error] [pid 13578] [client 138.68.40.68:39320] AH01797: client denied by server configuration: /var/www/html/password.php ... show less	Exploited Host Web App Attack
ozisp.com.au	2024-08-12 23:05:57 (3 weeks ago)	US_DigitalOcean,_<33>1723503955 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classificatio ... show moreUS_DigitalOcean,_<33>1723503955 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 138.68.40.68:49024 show less	Hacking