AbuseIPDB » 138.68.68.217

Check an IP Address, Domain Name, or Subnet

e.g. 3.236.80.119, microsoft.com, or 5.188.10.0/24

138.68.68.217 was found in our database!

This IP was reported 75 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.68.68.217

Whois 138.68.68.217

IP Abuse Reports for 138.68.68.217:

This IP address has been reported a total of 75 times from 31 distinct sources. 138.68.68.217 was first reported on October 6th 2022, and the most recent report was 2 months ago.

Old Reports: The most recent abuse report for this IP address is from 2 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
websase.com	16 Oct 2022	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
John Chrys.	16 Oct 2022	138.68.68.217 - - [16/Oct/2022:13:16:20 +0300] "POST /xmlrpc.php HTTP/1.1" 403 363 "-" "Mozilla/5.0 ... show more138.68.68.217 - - [16/Oct/2022:13:16:20 +0300] "POST /xmlrpc.php HTTP/1.1" 403 363 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack
octageeks.com	16 Oct 2022	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
KIsmay	15 Oct 2022	WordPress Brute Force, 5 attempts	Brute-Force Web App Attack
koji	15 Oct 2022		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
eminovic.ba	15 Oct 2022	Wordpress attack ...	Hacking Brute-Force Web App Attack
smithclass.net	15 Oct 2022	Oct 15 20:55:39 gravy wordpress(blog.smithclass.net)[2213912]: Authentication attempt for unknown us ... show moreOct 15 20:55:39 gravy wordpress(blog.smithclass.net)[2213912]: Authentication attempt for unknown user gsmithsewanee-edu from 138.68.68.217 ... show less	Hacking Brute-Force
websase.com	15 Oct 2022	WordPress XMLRPC Brute Force Attacks	Brute-Force Web App Attack
rsiddall	15 Oct 2022	138.68.68.217 - - [15/Oct/2022:13:50:29 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 ... show more138.68.68.217 - - [15/Oct/2022:13:50:29 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.68.68.217 - - [15/Oct/2022:13:53:38 -0400] "POST /xmlrpc.php HTTP/1.1" 403 1809 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force
smithclass.net	15 Oct 2022	Oct 15 15:21:46 gravy wordpress(smithclass.net)[2211973]: Authentication attempt for unknown user gs ... show moreOct 15 15:21:46 gravy wordpress(smithclass.net)[2211973]: Authentication attempt for unknown user gsmithsewanee-edu from 138.68.68.217 ... show less	Hacking Brute-Force
Anonymous	15 Oct 2022	(mod_security) mod_security (id:972687) triggered by 138.68.68.217 (DE/Germany/-): 2 in the last 360 ... show more(mod_security) mod_security (id:972687) triggered by 138.68.68.217 (DE/Germany/-): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sat Oct 15 01:19:20.840826 2022] [:error] [pid 2350289] [client 138.68.68.217:38484] [client 138.68.68.217] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "2"] [id "972687"] [msg "wp-login request blocked, no referrer"] [hostname "armazemdopetcuritiba.com.br"] [uri "/wp-login.php"] [unique_id "Y0o0yI1YzLm_9OobpK7q_wAAAAs"] [Sat Oct 15 01:19:21.906711 2022] [:error] [pid 2349222] [client 138.68.68.217:38746] [client 138.68.68.217] ModSecurity: Access denied with code 401 (phase 2). Operator EQ matched 0 at REQUEST_HEADERS. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "7"] [id "972687"] [msg "xmlrpc request blocked, no referrer"] [hostname "armazemdopetcuritiba.com.br"] [uri "/xmlrpc.php"] [unique_id "Y0o0yTuuFqZg68tjA3YhRQAAABA"] show less	Port Scan
octageeks.com	15 Oct 2022	Wordpress malicious attack:[octaxmlrpc]	Web App Attack
koji	14 Oct 2022		Web Spam Email Spam Blog Spam Bad Web Bot Web App Attack
smithclass.net	14 Oct 2022	Oct 14 20:03:50 gravy wordpress(smithclass.net)[2203356]: Authentication attempt for unknown user gs ... show moreOct 14 20:03:50 gravy wordpress(smithclass.net)[2203356]: Authentication attempt for unknown user gsmithsewanee-edu from 138.68.68.217 ... show less	Hacking Brute-Force
John Chrys.	14 Oct 2022	138.68.68.217 - - [14/Oct/2022:08:04:09 +0300] "POST /xmlrpc.php HTTP/1.1" 403 4888 "-" "Mozilla/5.0 ... show more138.68.68.217 - - [14/Oct/2022:08:04:09 +0300] "POST /xmlrpc.php HTTP/1.1" 403 4888 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... show less	Brute-Force Web App Attack