This IP address has been reported a total of
7
times from
6 distinct
sources.
138.68.96.230 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 3
reports;
Switzerland
with 2
reports;
Japan
with 1
report.
The most common categories in these recent reports were:
Port Scan
4
times;
Web App Attack
3
times;
Hacking
2
times;
Bad Web Bot
2
times;
Brute-Force
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
[SatOct0302:01:34.4949642026][security2:error][pid1463812:tid1463822][client138.68.96.230:0]ModSecur ...
show more[SatOct0302:01:34.4949642026][security2:error][pid1463812:tid1463822][client138.68.96.230:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"salonesamire.ch\"][uri\"/contatti\"][unique_id\"asBF3gy5rQ2CCv4gCTyIgAAAAAg\"]
show less
[FriOct0210:31:40.0743662026][security2:error][pid2102839:tid2102890][client138.68.96.230:0]ModSecur ...
show more[FriOct0210:31:40.0743662026][security2:error][pid2102839:tid2102890][client138.68.96.230:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"bno.ch\"][uri\"/\"][unique_id\"ar9r7FI3RaGDdHdZ1E8fYwAAABQ\"]
show less
UFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly as ...
show moreUFW blocked a suspicious connection attempt to a closed or denied port. This activity is commonly associated with port scanning, service discovery, or automated internet probing. Technical: source_ip=138.68.96.230; proto=TCP; source_port=61006; target_port=44444; flags=SYN
show less
Port Scan
Anonymous
denied traffic to a honeypot network. destination port 22.
