138.68.102.27
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
138.68.102.27 has been reported 37 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
37 from
32 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇭 Mario Bretscher |
|
Email Spam | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.102.27
2026-03-06 08:18:20 /
2026-03-06 08:18:21 /nice%20ports%2C/Tri%6Eity.txt%2ebak
2026-03-06 08:18:20 /
|
Web App Attack | |
| 🇳🇱 mha.fi |
Unauthorized connection attempt detected from IP address 138.68.102.27 to port 23 (DNS-NL) [m]
|
Brute-Force Exploited Host | |
| 🇩🇪 ValtonTahiri |
Honeypot hit: Unauthorized connection attempt detected on 22/SSH
• Number of sessions: 2
|
SSH Port Scan | |
| 🇫🇷 Kraften |
postfix ddos
...
|
DDoS Attack Brute-Force | |
| 🇳🇱 EGP Abuse Dept |
Unsolicited connection to port 465
|
Port Scan Hacking | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.102.27
2026-03-05 05:22:49 /
2026-03-05 05:22:49 /
|
SSH | |
| 🇩🇪 strxmpp |
138.68.102.27 - - [06/Mar/2026:00:01:46 +0100] "POST /sdk HTTP/1.1" 404 3667 "-" "Mozilla/5.0 (compatible; Odin; https://docs.getodin.com/)"
...
|
Bad Web Bot | |
| 🇺🇸 Vasili Sviridov |
: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs)
|
Brute-Force | |
| 🇩🇪 dispaisyenterprises |
Honeypot hit: Empty payload (likely service probe); 9092 [33] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
|
Port Scan | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| Anonymous |
DirectAdmin Auto Report (mail.log)
|
Brute-Force SSH | |
| 🇪🇸 masterguru |
Host header is a numeric IP address. Pattern match "^ (920350-123)
|
Hacking Bad Web Bot | |
| 🇩🇪 ManagedStack |
Probing access to unauthorized locations
|
Hacking Exploited Host Web App Attack | |
| 🇫🇷 guillaume illien |
|
Hacking Brute-Force Web App Attack SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown