JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 86.38.238.102

86.38.238.102 was found in our database!

This IP was reported 154 times. Confidence of Abuse is 100%: ?

100%

ISP	SC Lithuanian Radio and TV Center
Usage Type	Data Center/Web Hosting/Transit
ASN	AS198020
Hostname(s)	86-38-238-102.nodes.verda.host
Domain Name	telecentras.lt
Country	🇫🇮 Finland
City	Helsinki, Uusimaa

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 86.38.238.102

Whois 86.38.238.102

IP Abuse Reports for 86.38.238.102:

This IP address has been reported a total of 154 times from 125 distinct sources. 86.38.238.102 was first reported on December 21st 2024, and the most recent report was 24 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 matatunos	2026-06-30 08:00:14 (24 seconds ago)	Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte auto ... show more Honeypot favala.es: 1 peticiones web a rutas de ataque (/wp-login, /.env, etc.) en 24h. Reporte automático. show less	Web App Attack Bad Web Bot
🇦🇱 router.al	2026-06-30 07:55:17 (5 minutes ago)	06/30/2026-07:55:17.625757 86.38.238.102 Protocol: 6 GPL WEB_SERVER 403 Forbidden	Port Scan
🇫🇮 smallhost_helsinki	2026-06-30 07:49:15 (11 minutes ago)	Tried to access non existent path: /.git	Web App Attack
Anonymous	2026-06-30 07:43:47 (16 minutes ago)	Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (X11; Linux i686; rv:43.0) Gecko/20100101 Firefox ... show more Http Port:80 (http_status:403) - Agent:Mozilla/5.0 (X11; Linux i686; rv:43.0) Gecko/20100101 Firefox/43.0 show less	Web App Attack
Anonymous	2026-06-30 07:26:53 (33 minutes ago)	[30/Jun/2026:07:26:52 +0000] host=test.lovelyrender.com server=test.lovelyrender.com ip=86.38.238.10 ... show more [30/Jun/2026:07:26:52 +0000] host=test.lovelyrender.com server=test.lovelyrender.com ip=86.38.238.102 method=GET req=/.git/config uri=/index.php status=404 bytes=14141 rt=0.068 urt=0.069 ref="-" ua="Opera/9.80 (X11; Linux x86_64; U; pl) Presto/2.7.62 Version/11.00" ... show less	Web App Attack Bad Web Bot
Anonymous	2026-06-30 07:02:45 (57 minutes ago)	(caddyscan) Scanner path probe from 86.38.238.102 (FI/Finland/86-38-238-102.nodes.verda.host): 5 in ... show more (caddyscan) Scanner path probe from 86.38.238.102 (FI/Finland/86-38-238-102.nodes.verda.host): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 86.38.238.102 - - [30/Jun/2026:06:56:10 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 86.38.238.102 - - [30/Jun/2026:06:58:55 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 86.38.238.102 - - [30/Jun/2026:06:59:45 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 86.38.238.102 - - [30/Jun/2026:07:02:38 +0000] "GET /.git/config HTTP/1.1" [REDACTED] 200 2627 86.38.238.102 - - [30/Jun/2026:07:02:42 +0000] "GET /.git/config HTTP/1.1" show less	Port Scan
🇺🇸 oralunal	2026-06-30 06:51:23 (1 hour ago)	IP banned by Fail2Ban in jail suss access.log ah-app-1 ...	Bad Web Bot Web App Attack
🇺🇸 SodaAudit.app	2026-06-30 06:43:51 (1 hour ago)	[sodaaudit.app] Web app attack. Timestamp: 2026-06-30T06:33:34.000Z. 1 probe events, 1 distinct path ... show more [sodaaudit.app] Web app attack. Timestamp: 2026-06-30T06:33:34.000Z. 1 probe events, 1 distinct path(s). Paths (payload): /.git/config show less	Web App Attack
Anonymous	2026-06-30 06:30:33 (1 hour ago)	Fail2ban jail=webexploits banned IP=86.38.238.102 after 1 hits. Reason=web probing.	Brute-Force Web App Attack
Anonymous	2026-06-30 06:24:51 (1 hour ago)	git/env leak probe	Web App Attack
🇦🇹 Starburst SysOp Team	2026-06-30 06:20:30 (1 hour ago)	Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-vie6-1)	Hacking Web App Attack
Anonymous	2026-06-30 06:19:48 (1 hour ago)	"GET /.git/config HTTP/1.1"	Hacking Web App Attack
🇱🇹 NotACaptcha	2026-06-30 06:19:10 (1 hour ago)	webserver:80 [30/Jun/2026] "GET /.git/config HTTP/1.1" 302 436 "-" "Mozilla/5.0 (Macintosh; U; Inte ... show more webserver:80 [30/Jun/2026] "GET /.git/config HTTP/1.1" 302 436 "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_6; en-us) AppleWebKit/533.20.25 (KHTML, like Gecko) Version/5.0.4 Safari/533.20.27" webserver:443 [30/Jun/2026] "GET /.git/config HTTP/1.1" 302 5756 "-" "Mozilla/5.0 (Linux; Android 9; HMA-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" show less	Web App Attack
🇮🇹 Inartis	2026-06-30 06:13:59 (1 hour ago)	86.38.238.102 - - [30/Jun/2026:08:13:58 +0200] "GET /.git/config HTTP/1.1" 404 5157 "-" "Mozilla/5.0 ... show more 86.38.238.102 - - [30/Jun/2026:08:13:58 +0200] "GET /.git/config HTTP/1.1" 404 5157 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" ... show less	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-06-30 06:02:41 (1 hour ago)	Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: Clou ... show more Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: FI, Attack patterns: Cloud secrets probing, Malicious User-Agent show less	Bad Web Bot Web App Attack

Showing 1 to 15 of 154 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 193.163.125.48

🇧🇷 187.0.238.194

🇮🇳 122.168.127.153

🇰🇷 61.84.211.107

🇸🇬 43.133.61.254

🇻🇪 38.224.158.204

🇳🇱 5.61.209.43

🇳🇱 195.178.110.26

🇨🇳 159.75.245.35

🇳🇬 152.32.141.217

🇮🇳 117.252.241.105

🇺🇸 107.173.241.217

🇸🇬 103.253.27.242

🇮🇩 103.52.115.76

🇳🇱 91.92.40.233

🇷🇴 80.94.95.211

🇧🇬 79.124.49.226

🇰🇷 59.24.133.197

🇺🇸 47.77.216.134

🇺🇸 45.156.129.73