AbuseIPDB » 138.68.109.62

138.68.109.62 was found in our database!

This IP was reported 78 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.68.109.62

Whois 138.68.109.62

IP Abuse Reports for 138.68.109.62:

This IP address has been reported a total of 78 times from 69 distinct sources. 138.68.109.62 was first reported on December 20th 2023, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Theophile Dudreuilh	2024-08-20 16:00:00 (2 weeks ago)	SSH attempt	SSH
rtbh.com.tr	2024-08-18 20:55:31 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
BSG Webmaster	2024-08-17 07:40:03 (3 weeks ago)	138.68.109.62 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ... show more138.68.109.62 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 30s. Total bytes sent by tarpit: 38B. Report generated by Endlessh Report Generator v1.2.3 show less	Port Scan Hacking Brute-Force SSH
Rosscompozor	2024-08-17 04:11:31 (3 weeks ago)	Port scanning	Port Scan
marioselgreco	2024-08-17 01:02:03 (3 weeks ago)	Automated report from mail server logs	Email Spam Hacking Spoofing
nfsec.pl	2024-08-16 22:10:06 (3 weeks ago)	Scanning on port: 23	Port Scan
Hobby Bob	2024-08-16 21:08:08 (3 weeks ago)	Aug 16 21:08:08 server dovecot: pop3-login: Disconnected (no auth attempts in 20 secs): user=, rip=1 ... show moreAug 16 21:08:08 server dovecot: pop3-login: Disconnected (no auth attempts in 20 secs): user=, rip=138.68.109.62, lip=X.X.X.X session= show less	Port Scan Hacking
chris_yooo	2024-08-16 20:19:01 (3 weeks ago)	Aug 16 22:19:00 isp postfix/submission/smtpd[3713421]: lost connection after STARTTLS from unknown[1 ... show moreAug 16 22:19:00 isp postfix/submission/smtpd[3713421]: lost connection after STARTTLS from unknown[138.68.109.62] Aug 16 22:19:01 isp postfix/submission/smtpd[3713424]: improper command pipelining after CONNECT from unknown[138.68.109.62]: \026\003\003\001\245\001\000\001\241\003\003F\200\223\210\21123\005>\301\272D\222\037\370G\351\232\037\314\206.EE\373\276\2761Y\226[\037 \264z\253\310\v\334\213V73\315\033\265\r\032,a\034\243A\262j\204 N\257\033\206\341\311$\345\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 Aug 16 22:19:01 isp postfix/submission/smtpd[3713424]: lost connection after UNKNOWN from unknown[138.68.109.62] ... show less	Spoofing Brute-Force
Anonymous	2024-08-16 14:56:00 (3 weeks ago)	"HTTP Parser Attack,Server-Side Request Forgery (SSRF)"	Brute-Force
xor.st	2024-08-16 13:39:34 (3 weeks ago)	GET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]]<br ... show moreGET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]] Body: show less	Web App Attack
Mailguard-FRD	2024-08-16 12:07:30 (3 weeks ago)	Aug 16 14:07:28 [redacted] postfix/submission/smtpd[1464262]: lost connection after STARTTLS from un ... show moreAug 16 14:07:28 [redacted] postfix/submission/smtpd[1464262]: lost connection after STARTTLS from unknown[138.68.109.62] Aug 16 14:07:30 [redacted] postfix/submission/smtpd[1464260]: improper command pipelining aft ... show less	Email Spam Brute-Force
bgg	2024-08-16 09:18:16 (3 weeks ago)	Aug 16 11:18:15 nanopirate sshd[1874198]: refused connect from 138.68.109.62 (138.68.109.62) . ... show moreAug 16 11:18:15 nanopirate sshd[1874198]: refused connect from 138.68.109.62 (138.68.109.62) ... show less	Brute-Force SSH
Anonymous	2024-08-16 07:02:08 (3 weeks ago)	Aug 16 09:02:07 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts i ... show moreAug 16 09:02:07 rendez-vous dovecot: imap-login: Disconnected: Connection closed (no auth attempts in 30 secs): user=<>, rip=138.68.109.62, lip=*, TLS handshaking: Connection closed, session=<XSWbiccfDruKRG0+> show less	Brute-Force
RF68	2024-08-16 05:16:05 (3 weeks ago)	138.68.109.62 [15/Aug/2024 * Spam host detected, probing for vulnerabilities]	Web Spam Exploited Host Web App Attack
Riko	2024-08-16 04:00:09 (3 weeks ago)	Fail2ban SSH Bruteforce	Brute-Force SSH