JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.68.102.202

138.68.102.202 was found in our database!

This IP was reported 45 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.68.102.202

Whois 138.68.102.202

IP Abuse Reports for 138.68.102.202:

This IP address has been reported a total of 45 times from 39 distinct sources. 138.68.102.202 was first reported on May 25th 2026, and the most recent report was 10 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Justin F. \| AS204464	2026-06-04 10:58:43 (10 hours ago)	Honeypot [nx-infrastructure]: Empty payload (likely service probe); 8500 [14] TCP Reported by: Justi ... show more Honeypot [nx-infrastructure]: Empty payload (likely service probe); 8500 [14] TCP Reported by: Justin F. show less	Port Scan
🇬🇧 Apache	2026-06-04 08:31:59 (12 hours ago)	(mod_security) mod_security (id:920350) triggered by 138.68.102.202 (DE/Germany/-): 5 in the last 30 ... show more (mod_security) mod_security (id:920350) triggered by 138.68.102.202 (DE/Germany/-): 5 in the last 300 secs (CF_ENABLE) show less	Brute-Force Web App Attack
🇺🇸 gu-alvareza	2026-06-04 07:05:37 (14 hours ago)	Nmap.Script.Scanner	Port Scan
🇯🇵 mkaraki	2026-06-03 23:39:57 (21 hours ago)	1780529996 # Service_probe # SIGNATURE_SEND # source_ip:138.68.102.202 # dst_port:80 ...	Port Scan
🇬🇧 PeravixGroup	2026-06-03 19:51:58 (1 day ago)	Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 110. Sev ... show more Honeypot detection: SIP/VoIP unauthorized registration / call routing abuse attempt on port 110. Severity: HIGH. Aaran.cloud show less	Hacking Brute-Force
🇺🇸 Zestysoft	2026-06-03 10:33:27 (1 day ago)	2026-06-03T10:33:20.930283+00:00 mail dovecot: imap-login: Disconnected: Connection closed: read(siz ... show more 2026-06-03T10:33:20.930283+00:00 mail dovecot: imap-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (disconnected before auth was ready, waited 0 secs): user=<>, rip=138.68.102.202, lip=172.17.100.207, TLS handshaking: read(size=1026) failed: Connection reset by peer, session=<ms3g9FZTR52KRGbK> 2026-06-03T10:33:27.186213+00:00 mail dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00018C:SSL routines::version too low (no auth attempts in 6 secs): user=<>, rip=138.68.102.202, lip=172.17.100.207, TLS handshaking: SSL_accept() failed: error:0A00018C:SSL routines::version too low, session=<x0JA9VZTD16KRGbK> ... show less	Brute-Force
🇬🇧 PeravixGroup	2026-06-03 05:40:39 (1 day ago)	Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severit ... show more Honeypot detection: Kubernetes API unauthorized access / cluster abuse attempt on port 6443. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 Jack P	2026-06-03 01:56:35 (1 day ago)	Attempted brute force scan ...	Port Scan Brute-Force
🇷🇸 Smel	2026-06-03 01:49:06 (1 day ago)	Mail/25/465/587-993/995 Probe, Reject, BadAuth, Hack, SPAM -	Email Spam Hacking Brute-Force
Anonymous	2026-06-03 00:30:36 (1 day ago)	Requested unexistent endpoint (Wordpress login, etc.)	Web App Attack
🇳🇱 0xffffffff	2026-06-02 21:49:37 (1 day ago)	[2026-06-03 00:49:35.732632] [authz_core:error] [pid 1355499:tid 129484531361472] [client 138.68.102 ... show more [2026-06-03 00:49:35.732632] [authz_core:error] [pid 1355499:tid 129484531361472] [client 138.68.102.202:10229] AH01630: client denied by server configuration: /var/www// , error_notes:unsupported-protocol , URI:'/' [2026-06-03 00:49:35.787881] [authz_core:error] [pid 1355500:tid 129484763866816] [client 138.68.102.202:16453] AH01630: client denied by server configuration: /var/www//odinhttpcall1780436975 , error_notes:wrong-host , URI:'/odinhttpcall1780436975' [2026-06-03 00:49:35.812848] [authz_core:error] [pid 1355499:tid 129484514576064] [client 138.68.102.202:32299] AH01630: client denied by server configuration: /var/www//sdk , error_notes:wrong-host , URI:'/sdk' [2026-06-03 00:49:35.892660] [authz_core:error] [pid 1355500:tid 129484755474112] [client 138.68.102.202:31055] AH01630: client denied by server configuration: /var/www//HNAP1 , error_notes:wrong-host , URI:'/HNAP1' [2026-06-03 00:49:35.908683] [authz_core:error] [pid 1355499:tid 129484780652224] [client 138.68.102.202:26131] AH01630: clien show less	Web App Attack Bad Web Bot
Anonymous	2026-06-02 18:45:35 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 9042 [31] TCP Reported by: https://github.com/se ... show more Honeypot hit: Empty payload (likely service probe); 9042 [31] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-02 14:03:43 (2 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 6000 [14] TCP Reported by DisPaisy ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 6000 [14] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 aks4226	2026-06-02 09:25:09 (2 days ago)	Attacking common web applications. (n01)	Web App Attack
🇺🇸 gu-alvareza	2026-06-02 07:05:43 (2 days ago)	Nmap.Script.Scanner	Port Scan

Showing 1 to 15 of 45 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇸🇾 109.238.158.200

🇩🇪 185.91.127.85

🇺🇸 172.253.251.123

🇺🇸 147.185.132.54

🇯🇵 35.243.97.8

🇯🇵 35.200.72.104

🇧🇷 205.210.31.194

🇵🇪 190.119.63.98

🇮🇩 180.148.25.65

🇹🇭 150.95.82.21

🇫🇷 141.94.19.216

🇨🇳 111.85.244.46

🇿🇦 105.225.100.40

🇸🇬 43.172.196.38

🇩🇪 37.114.61.43

🇨🇦 4.205.28.179

🇺🇸 172.214.209.153

🇺🇸 143.42.1.71

🇮🇳 122.176.156.82

🇮🇱 85.65.68.45