JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.68.77.249

Activity Trending Down

Abuse Confidence Score

28% Elevated

18 reports

12 reporters · latest 1 month ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): aucasono.com
Domain Name: digitalocean.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

18 from 12 distinct reporters

First reported

March 7th 2024

Most recent report

1 month ago

Last 60 days

Top reporter locations 🇩🇪 Germany 3 🇵🇱 Poland 2 🇸🇪 Sweden 2

Most common categories Web App Attack 8 Bad Web Bot 5 Hacking 2 Brute-Force 2 Port Scan 1

Old reports The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 micropedro	2026-10-11 13:53:05 UTC · (1 month ago)	3 incidents: web scanning/attack. First: 2026-10-08 04:03, Last: 2026-10-11 09:53 UTC. Triggers: nginx-noscript,nginx-botsearch,unknown.	Port Scan Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-08 16:34:04 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.teddypot.tech \| URI: /wp-json/batch/v1 \| UA: Mo ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: kibana.teddypot.tech \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇫🇷 mrcrassi	2026-10-08 15:39:00 UTC · (1 month ago)	Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This repor ... show more Triggered Cloudflare WAF (firewallManaged) from DE. Action taken: BLOCK Protocol: HTTP/1.1 (POST method) Endpoint: /wp-json/batch/v1 UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 ghostwarriors	2026-10-08 13:50:08 UTC · (1 month ago)	Attempts against non-existent wp-login	Brute-Force Web App Attack
🇩🇪 yitzhaq	2026-10-08 13:30:24 UTC · (1 month ago)	138.68.77.249 - - [08/Oct/2026:10:02:23 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5.0" 138.68.77.249 - - [08/Oct/2026:10:02:23 +0200] "GET /wp-login.php HTTP/1.1" 404 4398 "-" "Mozilla/5.0" 138.68.77.249 - - [08/Oct/2026:15:30:21 +0200 ... show more 138.68.77.249 - - [08/Oct/2026:10:02:23 +0200] "GET /wp-login.php HTTP/1.1" 301 581 "-" "Mozilla/5.0" 138.68.77.249 - - [08/Oct/2026:10:02:23 +0200] "GET /wp-login.php HTTP/1.1" 404 4398 "-" "Mozilla/5.0" 138.68.77.249 - - [08/Oct/2026:15:30:21 +0200] "POST /wp-json/batch/v1 HTTP/1.1" 301 551 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.68.77.249 - - [08/Oct/2026:15:30:21 +0200] "GET /wp-json/batch/v1 HTTP/1.1" 403 4445 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.68.77.249 - - [08/Oct/2026:15:30:21 +0200] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 561 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.68.77.249 - - [08/Oct/2026:15:30:21 +0200] "GET /?rest_route=/batch/v1 HTTP/1.1" 403 4446 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.3 show less	Web App Attack Hacking
🇸🇪 vaia.cloud	2026-10-08 12:20:01 UTC · (1 month ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇸🇪 Per-Erik Runebert	2026-10-08 08:39:42 UTC · (1 month ago)	Excessive unauthorized requests	Hacking
🇨🇭 YF	2026-10-08 08:07:16 UTC · (1 month ago)	WordPress author enumeration	Web App Attack
🇩🇪 EGP Abuse Dept	2026-10-08 08:00:57 UTC · (1 month ago)	Scanning for web/db/file exploits on s14.sellwi.se	SQL Injection Bad Web Bot Web App Attack
🇵🇱 Budyn	2026-10-08 07:55:33 UTC · (1 month ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.astropot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 \| B ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: s3.astropot.online \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇩🇪 SurfinBirdie	2024-03-07 12:45:41 UTC · (2 years ago)	Mar 7 12:41:33 monitoring sshd[3016472]: Failed password for invalid user kbarcena from 138.68.77.249 port 58862 ssh2 Mar 7 12:43:37 monitoring sshd[3016780]: Invalid user chengg from 138.68.77.249 port 34100 Mar 7 12:43:37 monitoring sshd[3016780 ... show more Mar 7 12:41:33 monitoring sshd[3016472]: Failed password for invalid user kbarcena from 138.68.77.249 port 58862 ssh2 Mar 7 12:43:37 monitoring sshd[3016780]: Invalid user chengg from 138.68.77.249 port 34100 Mar 7 12:43:37 monitoring sshd[3016780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.77.249 Mar 7 12:43:40 monitoring sshd[3016780]: Failed password for invalid user chengg from 138.68.77.249 port 34100 ssh2 Mar 7 12:45:41 monitoring sshd[3017058]: Invalid user admin1 from 138.68.77.249 port 47998 ... show less	Brute-Force SSH
🇩🇪 SurfinBirdie	2024-03-07 12:16:53 UTC · (2 years ago)	Mar 7 12:12:45 monitoring sshd[3011414]: Failed password for invalid user testadmin from 138.68.77.249 port 35014 ssh2 Mar 7 12:14:47 monitoring sshd[3011728]: Invalid user desmondooi from 138.68.77.249 port 37210 Mar 7 12:14:47 monitoring sshd[30 ... show more Mar 7 12:12:45 monitoring sshd[3011414]: Failed password for invalid user testadmin from 138.68.77.249 port 35014 ssh2 Mar 7 12:14:47 monitoring sshd[3011728]: Invalid user desmondooi from 138.68.77.249 port 37210 Mar 7 12:14:47 monitoring sshd[3011728]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.77.249 Mar 7 12:14:48 monitoring sshd[3011728]: Failed password for invalid user desmondooi from 138.68.77.249 port 37210 ssh2 Mar 7 12:16:53 monitoring sshd[3012000]: Invalid user ftpuser from 138.68.77.249 port 59344 ... show less	Brute-Force SSH
🇩🇪 SurfinBirdie	2024-03-07 12:00:48 UTC · (2 years ago)	Mar 7 11:56:42 monitoring sshd[3009021]: Failed password for invalid user zhangxiaoy from 138.68.77.249 port 60008 ssh2 Mar 7 11:58:42 monitoring sshd[3009345]: Invalid user testing from 138.68.77.249 port 42638 Mar 7 11:58:42 monitoring sshd[3009 ... show more Mar 7 11:56:42 monitoring sshd[3009021]: Failed password for invalid user zhangxiaoy from 138.68.77.249 port 60008 ssh2 Mar 7 11:58:42 monitoring sshd[3009345]: Invalid user testing from 138.68.77.249 port 42638 Mar 7 11:58:42 monitoring sshd[3009345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.77.249 Mar 7 11:58:44 monitoring sshd[3009345]: Failed password for invalid user testing from 138.68.77.249 port 42638 ssh2 Mar 7 12:00:47 monitoring sshd[3009651]: Invalid user acer from 138.68.77.249 port 60150 ... show less	Brute-Force SSH
🇩🇪 SurfinBirdie	2024-03-07 11:42:49 UTC · (2 years ago)	Mar 7 11:38:57 monitoring sshd[3006433]: Failed password for invalid user a2buser from 138.68.77.249 port 35114 ssh2 Mar 7 11:40:51 monitoring sshd[3006706]: Invalid user zhaosx from 138.68.77.249 port 37014 Mar 7 11:40:51 monitoring sshd[3006706] ... show more Mar 7 11:38:57 monitoring sshd[3006433]: Failed password for invalid user a2buser from 138.68.77.249 port 35114 ssh2 Mar 7 11:40:51 monitoring sshd[3006706]: Invalid user zhaosx from 138.68.77.249 port 37014 Mar 7 11:40:51 monitoring sshd[3006706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.77.249 Mar 7 11:40:53 monitoring sshd[3006706]: Failed password for invalid user zhaosx from 138.68.77.249 port 37014 ssh2 Mar 7 11:42:47 monitoring sshd[3006985]: Invalid user postgres from 138.68.77.249 port 33910 ... show less	Brute-Force SSH
🇩🇪 ihor yalosovetsky	2024-03-07 11:32:54 UTC · (2 years ago)	2024-03-07T11:29:06.460387+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074485]: Invalid user arashsad from 138.68.77.249 port 52500 2024-03-07T11:31:00.331537+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074736]: Invalid user kerry from 138.68.77.249 port 42756 ... show more 2024-03-07T11:29:06.460387+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074485]: Invalid user arashsad from 138.68.77.249 port 52500 2024-03-07T11:31:00.331537+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074736]: Invalid user kerry from 138.68.77.249 port 42756 2024-03-07T11:31:00.331537+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074736]: Invalid user kerry from 138.68.77.249 port 42756 2024-03-07T11:32:53.471409+00:00 ubuntu-s-1vcpu-1gb-fra1-01 sshd[3074929]: Invalid user wangsen from 138.68.77.249 port 56164 ... show less	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇬🇧 212.38.189.186

🇵🇹 188.251.163.26

🇸🇬 47.128.96.181

🇬🇧 35.203.210.55

🇧🇷 187.120.73.147

🇨🇿 185.91.116.133

🇺🇸 104.243.42.159

🇮🇹 79.47.231.163

🇨🇳 36.139.216.235

🇧🇪 35.210.184.1

🇸🇬 8.222.175.160

🇸🇬 8.222.162.136

🇸🇬 8.222.161.200

🇮🇷 5.232.27.120

🇨🇳 219.140.5.37

🇪🇹 196.190.93.251

🇳🇱 192.42.116.63

🇺🇸 170.103.75.203

🇺🇸 167.99.234.147

🇴🇲 161.8.84.153