138.68.86.10
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
No reports in the last 60 days
138.68.86.10 has been reported 31 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
31 from
24 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇱🇹 Evag Touf |
(mod_security) mod_security triggered on hostname [redacted] 138.68.86.10 (DE/Germany/-)
|
SQL Injection | |
| 🇫🇷 masterguru |
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.68.86.10 (DE/Germany/-): 2 in the last 3600 secs (0-196)
|
Hacking | |
| 🇺🇸 MPL |
tcp/80 (2 or more attempts)
|
Port Scan | |
| 🇱🇹 NotACaptcha |
Unauthorised access (Jan 15 10:01) SRC=138.68.86.10 LEN=44 TTL=243 ID=62283 TCP DPT=8080 WINDOW=1025 SYN
|
Port Scan | |
| 🇨🇳 ThreatBook.io |
ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.68.86.10
2026-01-11 00:51:50 /nice%20ports%2C/Tri%6Eity.txt%2ebak
2026-01-11 00:51:49 /
2026-01-11 00:51:50 /
|
SSH | |
| 🇷🇺 nyuuzyou |
{"action": "connection", "dest_ip": "0.0.0.0", "dest_port": "143", "server": "imap_server", "src_ip": "138.68.86.10", "src_port": "3759", "timestamp": "2026-01-11T14:54:32.741935"}
|
Port Scan | |
| 🇸🇬 drewf.ink |
[12:04] Port scanning. Port(s) scanned: TCP/25
|
Port Scan | |
| 🇯🇵 mkaraki |
1768128034 # Service_probe # SIGNATURE_SEND # source_ip:138.68.86.10 # dst_port:143
...
|
Port Scan | |
| 🇺🇸 Hobby Bob |
Jan 11 10:23:28 server dovecot: pop3-login: Disconnected: Connection closed: read(size=1026) failed: Connection reset by peer (no auth attempts in 0 secs): user=, rip=138.68.86.10, lip=X.X.X.X session=
|
Port Scan Hacking | |
| 🇺🇸 gu-alvareza |
Nmap.Script.Scanner
|
Port Scan | |
| 🇮🇸 timmo |
Aggressive probing of dovecot POP3 service with various SSL/TLS attacks and handshake attempts.
|
Port Scan | |
| 🇺🇸 drewf.ink |
[01:06] Port scanning. Port(s) scanned: TCP/110
|
Port Scan | |
| 🇬🇧 kiwi.network |
Web application fingerprinting: Binary file (standard input) matches
|
Hacking Exploited Host Web App Attack | |
| 🇺🇸 antlac1 |
crowdsecurity/http-probing
|
Brute-Force Web App Attack | |
| Anonymous |
2026-01-10T13:18:16.305744+01:00 rendez-vous dovecot[385552]: imap-login: Disconnected: Connection closed (no auth attempts in 0 secs): user=<>, rip=138.68.86.10, lip=*, session=<zJr2ogdIvTKKRFYK>
|
Brute-Force |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown