This IP address has been reported a total of
42
times from
36 distinct
sources.
138.68.81.99 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
France
with 9
reports;
United States of America
with 7
reports.
The most common categories in these recent reports were:
Web App Attack
19
times;
Port Scan
14
times;
Hacking
12
times;
Brute-Force
10
times;
Bad Web Bot
6
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after matched multi-pattern attack signatur ...
show moreKingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after matched multi-pattern attack signature. Evidence: AttackPattern: /cgi-bin/ (Match: /cgi-bin/)
show less
Hacking
Web App Attack
Anonymous
2026-10-28T00:56:39.708289+02:00 postfix/smtpd[2493080]: improper command pipelining after CONNECT ...
show more2026-10-28T00:56:39.708289+02:00 postfix/smtpd[2493080]: improper command pipelining after CONNECT from unknown[138.68.81.99]: \026\003\003\001\244\001\000\001\240\003\003K\237\017\354\360\214|\242\325\314\332\025\f\340:\346\342\3235\320\361\253\006
show less
Automated report (2026-10-27T22:34:53+00:00). Strange bot caught probing for vulnerable routers and ...
show moreAutomated report (2026-10-27T22:34:53+00:00). Strange bot caught probing for vulnerable routers and webservices detected.
show less
Honeypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activi ...
show moreHoneypot Finding: Telnet intrusion activity on TCP/23; successful login, command, or download activity observed.
show less
2026-10-27T21:39:47.585846+01:00 [redacted] postfix/smtps/smtpd[196769]: lost connection after CONNE ...
show more2026-10-27T21:39:47.585846+01:00 [redacted] postfix/smtps/smtpd[196769]: lost connection after CONNECT from unknown[138.68.81.99]
...
show less
Oct 27 21:12:11 atom sm-mta[20554]: 69RKCBQ6020554: rejecting commands from [138.68.81.99] [138.68.8 ...
show moreOct 27 21:12:11 atom sm-mta[20554]: 69RKCBQ6020554: rejecting commands from [138.68.81.99] [138.68.81.99] due to pre-greeting traffic after 0 seconds
Oct 27 21:12:16 atom sm-mta[20557]: 69RKCGiD020557: rejecting commands from [138.68.81.99] [138.68.81.99] due to pre-greeting traffic after 0 seconds
Oct 27 21:12:21 atom sm-mta[20558]: 69RKCLuM020558: rejecting commands from [138.68.81.99] [138.68.81.99] due to pre-greeting traffic after 0 seconds
Oct 27 21:12:26 atom sm-mta[20561]: 69RKCQLU020561: rejecting commands from [138.68.81.99] [138.68.81.99] due to pre-greeting traffic after 0 seconds
...
show less
Honeypot Finding: repeated TCP service probing on TCP/8500 (service); 2 application-level events acr ...
show moreHoneypot Finding: repeated TCP service probing on TCP/8500 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
show less