JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

68.183.183.238

Neutral Activity

Abuse Confidence Score

0% Low Risk

98 reports

49 reporters · latest 5 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Hostname(s): tookeh.com
Domain Name: digitalocean.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

68.183.183.238 has been reported 98 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

98 from 49 distinct reporters

First reported

April 23rd 2023

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇿 FaB Property Group	2026-05-28 21:01:45 UTC · (5 months ago)	Requested file: load.php	Web App Attack
🇳🇿 FaB Property Group	2026-05-28 21:01:45 UTC · (5 months ago)	Requested file: load.php	Web App Attack
🇮🇩 sockominfo	2026-05-28 19:00:29 UTC · (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
Anonymous	2026-05-28 12:22:51 UTC · (5 months ago)	[28/May/2026:15:22:49 +0300] 177997096999.751782 68.183.183.238 59677 148.251.76.218 80 [28/May/2026:15:22:50 +0300] 177997097070.608117 68.183.183.238 59741 148.251.76.218 80	Web App Attack
🇮🇩 sockominfo	2026-05-28 09:00:28 UTC · (5 months ago)	TheHive Threat Scoring assessment: 68.183.183.238 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public- ... show more TheHive Threat Scoring assessment: 68.183.183.238 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public-Facing Application, Valid Accounts, Command and Scripting Interpreter, Application Layer Protocol, Brute Force, Account Manipulation OWASP Risk: High (L:8, I:6) Combined Score: 4.92/10 Confidence Interval: ±0.01 Status: Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇮🇩 sockominfo	2026-05-27 18:00:47 UTC · (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
Anonymous	2026-05-27 17:06:13 UTC · (5 months ago)	68.183.183.238 - - [27/May/2026:19:05:59 +0200] "GET /.well-known/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 M ... show more 68.183.183.238 - - [27/May/2026:19:05:59 +0200] "GET /.well-known/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [27/May/2026:19:05:59 +0200] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [27/May/2026:19:05:59 +0200] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 404 18235 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [27/May/2026:19:05:59 +0200] "GET /var.php HTTP/1.1" 404 18219 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) App ... show less	DDoS Attack
🇩🇪 botreporter	2026-05-27 14:46:39 UTC · (5 months ago)	CMS vulnerability/installation scanning	Brute-Force Web App Attack
🇺🇸 jormaster3k	2026-05-27 04:19:05 UTC · (5 months ago)	Attack against Apache (too many 404s)	Web App Attack
🇮🇩 sockominfo	2026-05-26 15:00:27 UTC · (5 months ago)	TheHive Threat Scoring assessment: 68.183.183.238 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public- ... show more TheHive Threat Scoring assessment: 68.183.183.238 CVSS v3.1: 0/10 (None) CVSS Vector: CVSS:3.1/AV:undefined/AC:undefined/PR:undefined/UI:undefined/S:undefined/C:undefined/I:undefined/A:undefined Bayesian Probability: 80% MITRE ATT&CK: Exploit Public-Facing Application, Valid Accounts, Command and Scripting Interpreter, Application Layer Protocol, Brute Force, Account Manipulation OWASP Risk: High (L:8, I:6) Combined Score: 4.92/10 Confidence Interval: ±0.01 Status: Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam
🇨🇿 ptlab	2026-05-26 06:45:03 UTC · (5 months ago)	Detected config_leak attack from WP-host.	Hacking Web App Attack
🇮🇩 sockominfo	2026-05-26 06:00:47 UTC · (5 months ago)	Reported by TangerangKota-CSIRT. Status: MALICIOUS	Hacking Email Spam
Anonymous	2026-05-26 05:03:19 UTC · (5 months ago)	68.183.183.238 - - [26/May/2026:07:03:10 +0200] "GET /.well-known/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 M ... show more 68.183.183.238 - - [26/May/2026:07:03:10 +0200] "GET /.well-known/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [26/May/2026:07:03:10 +0200] "GET /.well-known/pki-validation/wp-signup.php HTTP/1.1" 404 7247 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [26/May/2026:07:03:10 +0200] "GET /testwp.php?wp=1 HTTP/1.1" 404 18252 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 68.183.183.238 - - [26/May/2026:07:03:10 +0200] "GET /adriv.php HTTP/1.1" 404 18246 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 ... show less	DDoS Attack
🇫🇷 ACE-INFORMATIQUE.NC	2026-05-26 00:22:40 UTC · (5 months ago)	Fail2ban automated report	Brute-Force
🇮🇩 sockominfo	2026-05-25 21:00:40 UTC · (5 months ago)	Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: T ... show more Webshell discovery success (Response: 200). Threat Score: 8.7/10 (CRITICAL). Confidence: 70%. CVSS v3.1: 10/10 (Critical). CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. Bayesian Probability: 87%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: KNOWN_MALICIOUS. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Email Spam

Showing 1 to 15 of 98 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.217

🇨🇳 121.227.152.250

🇳🇱 200.138.46.34

🇻🇳 171.234.75.18

🇸🇪 128.127.105.184

🇨🇳 106.75.152.101

🇷🇴 80.94.92.128

🇸🇪 62.93.166.184

🇩🇪 37.221.195.225

🇫🇷 176.177.193.61

🇯🇵 164.52.120.14

🇯🇵 160.251.206.106

🇺🇸 137.184.185.11

🇻🇳 123.16.178.214

🇸🇬 94.231.206.252

🇷🇴 92.118.39.64

🇺🇸 192.178.6.196

🇺🇸 172.70.94.59

🇧🇷 170.245.198.33

🇧🇲 104.218.173.131