JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.48.44

138.68.48.44 was found in our database!

This IP was reported 29 times. Confidence of Abuse is 16%: ?

16%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.48.44

Whois 138.68.48.44

IP Abuse Reports for 138.68.48.44:

This IP address has been reported a total of 29 times from 21 distinct sources. 138.68.48.44 was first reported on November 12th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 julianalee.com	2026-07-24 15:19:00 (1 month ago)	24/Jul/26 03:57:32 #1107841 CRITICAL 1646 138.68.48.44 POST /wp-json/batch/v1 - WP vulnerabi ... show more 24/Jul/26 03:57:32 #1107841 CRITICAL 1646 138.68.48.44 POST /wp-json/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateforsaleinsaratogaca.com 24/Jul/26 03:57:32 #7925540 CRITICAL 1646 138.68.48.44 POST /?rest_route=/batch/v1 - WP vulnerability - [WordPress vulnerability] - realestateforsaleinsaratogaca.com show less	Hacking
🇨🇭 Origon	2026-07-24 12:47:07 (1 month ago)	http-cve-probing - IP: 138.68.48.44 - time="2026-07-24T14:47:07+02:00" level=info msg="(555f66b4f6a ... show more http-cve-probing - IP: 138.68.48.44 - time="2026-07-24T14:47:07+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-cve-probing by ip 138.68.48.44 (US/14061) : 4h ban on Ip 138.68.48.44" module=db show less	Web App Attack
🇫🇷 masterguru	2026-07-24 10:08:38 (1 month ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)	Hacking
🇮🇹 VHosting	2026-07-24 10:00:05 (1 month ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇫🇷 pm33	2026-07-24 09:42:01 (1 month ago)	Wordpress login attempts	Brute-Force
Anonymous	2024-04-27 10:51:25 (2 years ago)	[Sat Apr 27 12:51:23.985155 2024] [authz_core:error] [pid 7894] [client 138.68.48.44:51808] AH01630: ... show more [Sat Apr 27 12:51:23.985155 2024] [authz_core:error] [pid 7894] [client 138.68.48.44:51808] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Apr 27 12:51:24.282727 2024] [authz_core:error] [pid 26966] [client 138.68.48.44:51810] AH01630: client denied by server configuration: /etc/httpd/htdocs [Sat Apr 27 12:51:24.586941 2024] [authz_core:error] [pid 7901] [client 138.68.48.44:51822] AH01630: client denied by server configuration: /etc/httpd/htdocs ... show less	Web App Attack
🇬🇧 borisperc	2024-04-27 09:50:00 (2 years ago)	dd3f06be psmedia.mywire.org 1 high 27th 09:20:48 27th 09:20:48 138.68.48.44 US 36634 89.2 ... show more dd3f06be psmedia.mywire.org 1 high 27th 09:20:48 27th 09:20:48 138.68.48.44 US 36634 89.212.137.96 LAN 80 (http) TCP URL (89.212.137.96)/systembc/password.php systembc (malware) (static) show less	Bad Web Bot Exploited Host
🇺🇸 gu-alvareza	2024-04-27 07:05:47 (2 years ago)	SystemBC.Botnet	DDoS Attack Hacking
🇨🇿 Countryman	2024-04-27 06:40:03 (2 years ago)	IPS detection: SystemBC.Botnet	Hacking
🇩🇪 kkeyser	2024-04-27 04:27:48 (2 years ago)	\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x0F\xA3\xC8\x0E%\xCF\xC6a\xC7`\x09\xEF\x1C\xB3\|\x22\xB2\xB3L\ ... show more \x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x0F\xA3\xC8\x0E%\xCF\xC6a\xC7`\x09\xEF\x1C\xB3\|\x22\xB2\xB3L\x1A\xCF\x8D\xDA\x06\x14\x933T\x22\x9C:\x5C\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0 show less	Web App Attack
Anonymous	2024-04-27 01:19:24 (2 years ago)	Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096, ... show more Ports: 20,21,25,53,80,110,143,443,465,587,993,995,2077,2078,2079,2080,2082,2083,2086,2087,2095,2096,3306,2195; Direction: 0; Trigger: LF_CUSTOMTRIGGER show less	Brute-Force SSH
🇺🇸 WhiteFireOCN1	2024-04-26 22:48:58 (2 years ago)	11 unauthorized connection attempts to port 80 HTTP GET to / from 138[.]68[.]48[.]44:48092 - 2024-04 ... show more 11 unauthorized connection attempts to port 80 HTTP GET to / from 138[.]68[.]48[.]44:48092 - 2024-04-26T22:45:32 HTTP GET to /form[.]html from 138[.]68[.]48[.]44:48108 - 2024-04-26T22:45:33 HTTP GET to /upl[.]php from 138[.]68[.]48[.]44:48110 - 2024-04-26T22:45:34 HTTP GET to /geoip/ from 138[.]68[.]48[.]44:48140 - 2024-04-26T22:45:35 HTTP GET to /favicon[.]ico from 138[.]68[.]48[.]44:48142 - 2024-04-26T22:45:36 HTTP GET to /1[.]php from 138[.]68[.]48[.]44:48152 - 2024-04-26T22:45:36 HTTP GET to /bundle[.]js from 138[.]68[.]48[.]44:48154 - 2024-04-26T22:45:36 HTTP GET to /files/ from 138[.]68[.]48[.]44:48162 - 2024-04-26T22:45:37 show less	Port Scan Hacking Web App Attack
Anonymous	2024-04-26 22:26:29 (2 years ago)	<comment>	Web App Attack
🇺🇸 MPL	2024-04-26 22:25:25 (2 years ago)	tcp/80	Port Scan
🇺🇸 MPL	2024-04-26 22:25:25 (2 years ago)	tcp/80 (3 or more attempts)	Port Scan

Showing 1 to 15 of 29 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇷 200.105.99.79

🇺🇸 185.223.152.225

🇺🇸 165.154.182.179

🇺🇸 163.227.179.121

🇨🇴 153.67.115.239

🇺🇸 136.116.134.196

🇳🇱 94.154.46.248

🇨🇦 51.79.86.230

🇬🇧 35.203.211.168

🇬🇧 35.203.211.3

🇭🇰 2602:80d:1004::15

🇧🇪 198.235.24.185

🇧🇪 198.235.24.172

🇩🇪 194.88.98.101

🇩🇪 193.124.20.228

🇨🇴 186.148.183.47

🇸🇰 185.188.239.36

🇺🇸 172.171.233.230

🇺🇸 159.223.206.7

🇨🇳 121.40.41.46