JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 172.68.210.138

172.68.210.138 was found in our database!

This IP was reported 107 times. Confidence of Abuse is 0%: ?

ISP	Cloudflare, Inc.
Usage Type	Data Center/Web Hosting/Transit
ASN	AS13335
Domain Name	cloudflare.com
Country	🇦🇺 Australia
City	Sydney, New South Wales

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Important Note: 172.68.210.138 is an IP address from within our whitelist belonging to the subnet 172.64.0.0/13, which we identify as: "Cloudflare Reverse Proxy".

Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who may use them for search engine spiders. However, these same entities sometimes also provide cloud servers and mail services which are easily abused. Pay special attention when trusting or distrusting these IPs.

Report 172.68.210.138

Whois 172.68.210.138

IP Abuse Reports for 172.68.210.138:

This IP address has been reported a total of 107 times from 21 distinct sources. 172.68.210.138 was first reported on September 23rd 2023, and the most recent report was 13 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 acadeova	2026-06-06 02:56:54 (13 hours ago)	🚨 Recon detected (nft drop) SRC=172.68.210.138 Observed=TCP dpt=80 in=enp0s6 ttl=56 Time=recent(jour ... show more 🚨 Recon detected (nft drop) SRC=172.68.210.138 Observed=TCP dpt=80 in=enp0s6 ttl=56 Time=recent(journalctl: 10 minutes ago) Assessment=Generic scanning / reconnaissance (PORT_SCAN) show less	Port Scan
🇺🇸 wimaxnz	2026-05-02 00:01:41 (1 month ago)	Automated report from 247 Guardian: repeated malicious activity detected. \| reason=nginx_badpath	Brute-Force SSH Port Scan
Anonymous	2026-04-08 21:50:04 (1 month ago)	\| [Dangerous/Australia] Aggressive IP 172.68.210.138 (~30 hits). Type: DoS Defender- Web server 400 ... show more \| [Dangerous/Australia] Aggressive IP 172.68.210.138 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇦🇺 greenhost.com.au	2026-04-07 10:00:07 (1 month ago)	Automated report: 144 attacks in 24h targeting privacymate via NGINX. NGINX/unauthorized: 117 on pri ... show more Automated report: 144 attacks in 24h targeting privacymate via NGINX. NGINX/unauthorized: 117 on privacymate; NGINX/probe: 27 on privacymate show less	Web App Attack
🇩🇪 abdubhai	2026-03-23 04:37:03 (2 months ago)	172.68.210.138 - - [23/Mar/2026: ...	Brute-Force
🇩🇪 lmathe	2026-02-20 06:36:43 (3 months ago)	jajusi.de 172.68.210.138 AU - [20/Feb/2026:07:36:34 +0100] 404 "GET /wp-content/plugins/hellopress/w ... show more jajusi.de 172.68.210.138 AU - [20/Feb/2026:07:36:34 +0100] 404 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 jajusi.de 172.68.210.138 AU - [20/Feb/2026:07:36:42 +0100] 404 "GET /wp-admin/setup-config.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 ... show less	Web App Attack
🇩🇪 lmathe	2026-02-04 20:33:11 (4 months ago)	jajusi.de 172.68.210.138 AU - [04/Feb/2026:21:33:10 +0100] 404 "GET /wp-content/plugins/hellopress/w ... show more jajusi.de 172.68.210.138 AU - [04/Feb/2026:21:33:10 +0100] 404 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 jajusi.de 172.68.210.138 AU - [04/Feb/2026:21:33:11 +0100] 404 "GET /wp-admin/js/widgets/doc.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 ... show less	Web App Attack
🇩🇪 lmathe	2026-01-31 09:08:54 (4 months ago)	jajusi.de 172.68.210.138 AU - [31/Jan/2026:10:08:53 +0100] 404 "GET /wp-admin/includes/ HTTP/1.1" re ... show more jajusi.de 172.68.210.138 AU - [31/Jan/2026:10:08:53 +0100] 404 "GET /wp-admin/includes/ HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 jajusi.de 172.68.210.138 AU - [31/Jan/2026:10:08:54 +0100] 404 "GET /wp-content/uploads/admin.php HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 ... show less	Web App Attack
🇩🇪 lmathe	2026-01-21 02:29:54 (4 months ago)	jajusi.de 172.68.210.138 AU - [21/Jan/2026:03:29:53 +0100] 404 "GET /wp-admin/images/ HTTP/1.1" refe ... show more jajusi.de 172.68.210.138 AU - [21/Jan/2026:03:29:53 +0100] 404 "GET /wp-admin/images/ HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 jajusi.de 172.68.210.138 AU - [21/Jan/2026:03:29:54 +0100] 404 "GET /wp-admin/images/admin.php HTTP/1.1" referer: "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 374 ... show less	Web App Attack
🇫🇷 Campus France	2026-01-13 20:52:09 (4 months ago)	[Tue Jan 13 21:52:08.396720 2026] [php:error] [pid 3360676] [client 172.68.210.138:9450] script '/va ... show more [Tue Jan 13 21:52:08.396720 2026] [php:error] [pid 3360676] [client 172.68.210.138:9450] script '/var/www/html/bak.php' not found or unable to stat, referer: https://www.google.fr/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-10 13:51:51 (4 months ago)	[Sat Jan 10 14:51:51.070009 2026] [php:error] [pid 1017245] [client 172.68.210.138:13353] script '/v ... show more [Sat Jan 10 14:51:51.070009 2026] [php:error] [pid 1017245] [client 172.68.210.138:13353] script '/var/www/html/index.php' not found or unable to stat, referer: https://www.google.com/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-06 16:48:23 (4 months ago)	[Tue Jan 06 17:48:22.921134 2026] [php:error] [pid 2455718] [client 172.68.210.138:9465] script '/va ... show more [Tue Jan 06 17:48:22.921134 2026] [php:error] [pid 2455718] [client 172.68.210.138:9465] script '/var/www/html/wp-good.php' not found or unable to stat, referer: https://www.google.com/ ... show less	Brute-Force Web App Attack
🇩🇪 lmathe	2026-01-04 21:01:05 (5 months ago)	jajusi.de 172.68.210.138 AU - [04/Jan/2026:22:00:00 +0100] 404 "GET /wp-content/plugins/hellopress/w ... show more jajusi.de 172.68.210.138 AU - [04/Jan/2026:22:00:00 +0100] 404 "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 jajusi.de 172.68.210.138 AU - [04/Jan/2026:22:01:05 +0100] 404 "GET /wp-admin/new2.php HTTP/1.1" referer: "-" "-" upstream: - response_time: - request_time: 0.000 total_bytes_sent: 311 ... show less	Web App Attack
🇫🇷 Campus France	2026-01-04 20:33:27 (5 months ago)	[Sun Jan 04 21:33:26.491347 2026] [php:error] [pid 1140970] [client 172.68.210.138:13077] script '/v ... show more [Sun Jan 04 21:33:26.491347 2026] [php:error] [pid 1140970] [client 172.68.210.138:13077] script '/var/www/html/xmrlpc.php' not found or unable to stat, referer: https://www.google.de/ ... show less	Brute-Force Web App Attack
🇫🇷 Campus France	2026-01-03 12:23:18 (5 months ago)	[Fri Jan 02 21:24:34.701799 2026] [php:error] [pid 3912923] [client 172.68.210.138:13549] script '/v ... show more [Fri Jan 02 21:24:34.701799 2026] [php:error] [pid 3912923] [client 172.68.210.138:13549] script '/var/www/html/xmrlpc.php' not found or unable to stat, referer: https://www.yahoo.com/ [Sat Jan 03 13:23:17.780205 2026] [php:error] [pid 202453] [client 172.68.210.138:11437] script '/var/www/html/akcc.php' not found or unable to stat, referer: https://www.google.co.uk/ [Sat Jan 03 13:23:17.780205 2026] [php:error] [pid 202453] [client 172.68.210.138:11437] script '/var/www/html/akcc.php' not found or unable to stat, referer: https://www.google.co.uk/ ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 107 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 147.185.132.223

🇺🇸 135.237.126.199

🇳🇬 102.91.92.247

🇺🇦 82.21.224.21

🇳🇱 77.83.39.217

🇦🇪 2.50.37.159

🇻🇳 203.113.174.95

🇺🇸 194.164.64.9

🇮🇩 180.247.245.72

🇻🇳 160.30.113.59

🇲🇩 89.35.14.14

🇷🇴 80.94.95.242

🇺🇸 71.6.134.237

🇸🇬 23.111.14.190

🇺🇸 2607:f8b0:4001:c62::127

🇰🇿 212.154.234.9

🇬🇧 188.240.59.62

🇺🇸 162.216.149.229

🇭🇰 119.246.15.94

🇹🇼 110.25.110.135