JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.105.180

138.197.105.180 was found in our database!

This IP was reported 38 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.105.180

Whois 138.197.105.180

IP Abuse Reports for 138.197.105.180:

This IP address has been reported a total of 38 times from 36 distinct sources. 138.197.105.180 was first reported on July 2nd 2021, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 BSG Webmaster	2025-06-12 07:35:07 (1 year ago)	Port scanning (Port 80)	Port Scan Hacking
🇺🇸 LotPhantom	2025-06-12 00:37:40 (1 year ago)	138.197.105.180 - - [12/Jun/2025:00:36:40 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozilla/5. ... show more 138.197.105.180 - - [12/Jun/2025:00:36:40 +0000] "GET /favicon.ico HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" "0" ... show less	Web App Attack
🇫🇷 pm33	2025-06-12 00:05:53 (1 year ago)	Probing for resource vulnerabilities HTTP(S)	Web App Attack
Anonymous	2025-06-12 00:05:16 (1 year ago)	138.197.105.180 - - [12/Jun/2025:02:05:15 +0200] "GET /upl.php HTTP/1.1" 403 344 "-" "Mozilla/5.0" . ... show more 138.197.105.180 - - [12/Jun/2025:02:05:15 +0200] "GET /upl.php HTTP/1.1" 403 344 "-" "Mozilla/5.0" ... show less	Web App Attack
🇬🇧 gurnip	2025-06-11 23:42:25 (1 year ago)	Vulnerability probe of page /systembc/password.php, not found on server.	Brute-Force Web App Attack
Anonymous	2025-06-11 23:26:48 (1 year ago)	Attempted shell / backdoor access: /1.php	Hacking Bad Web Bot
🇫🇷 Murazaki	2025-06-11 22:02:55 (1 year ago)	138.197.105.180 - - [11/Jun/2025:15:39:51 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xDE\x87x8Hj ... show more 138.197.105.180 - - [11/Jun/2025:15:39:51 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xDE\x87x8Hj\xE3\xA1\xDD\x9E\xDD\xEA\xD0\xA8M\x83\xB0k_\x17\xE44\x94\xFF\xD4\x05\xB8\xCC5{\xFE\xAA\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 500 170 "-" "-" "-" ... show less	Hacking
🇩🇪 SCHAPPY	2025-06-11 21:57:53 (1 year ago)	Web app attack detected. Host header is a numeric IP address	Web App Attack
🇨🇿 Countryman	2025-06-11 20:41:39 (1 year ago)	IPS detection: SystemBC.Botnet	Hacking
🇫🇷 masterguru	2025-06-11 20:24:49 (1 year ago)	Host header is a numeric IP address. Pattern match "^ (920350-131)	Hacking Bad Web Bot
Anonymous	2025-06-11 19:13:47 (1 year ago)	Bot detected scanning for vulnerable pages	Port Scan
Anonymous	2025-06-11 18:22:18 (1 year ago)	138.197.105.180 - - [11/Jun/2025:18:22:16 +0000] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\x16\x01\xF9 ... show more 138.197.105.180 - - [11/Jun/2025:18:22:16 +0000] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\x16\x01\xF9\x92[\x1B\x9F\x18{" 400 166 "-" "-" 138.197.105.180 - - [11/Jun/2025:18:22:18 +0000] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\x96\xF0\x9D[\xEDg\xB1\xD5\xE2\x1E\|\x16\x0F=\x9D\xFF\x8CW\xBCBa\xEF\xC0\xE1\x962\x1BK\x1B\xD09%\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 166 "-" "-" 138.197.105.180 - - [11/Jun/2025:18:22:18 +0000] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\x9E\xCA.\xBC\x09\xEB\xFD\xD3\x87P\xECy\x06S'\xB4\xD2" 400 166 "-" "-" ... show less	Brute-Force
🇷🇺 BellFix	2025-06-11 18:17:35 (1 year ago)	F2B blocked NPM	Port Scan Brute-Force Web App Attack
🇺🇸 MogBox	2025-06-11 18:11:41 (1 year ago)	(mod_security) mod_security (id:2000064) triggered by 138.197.105.180 (US/United States/-): 1 in the ... show more (mod_security) mod_security (id:2000064) triggered by 138.197.105.180 (US/United States/-): 1 in the last 3600 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Wed Jun 11 14:11:30.550466 2025] [security2:error] [pid 4120852:tid 4120890] [client 138.197.105.180:59672] ModSecurity: Access denied with code 403 (phase 2). Pattern match "Mozilla/(4\|5)\\\\.0$" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec2.rules.conf"] [line "104"] [id "2000064"] [hostname "209.59.154.179"] [uri "/upl.php"] [unique_id "aEnG0jqo6sCTWcRIWyB4-AAAAAo"] show less	Hacking
🇩🇪 pigro	2025-06-11 17:46:29 (1 year ago)	138.197.105.180 - - [11/Jun/2025:19:46:27 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xB8\x8D\x96 ... show more 138.197.105.180 - - [11/Jun/2025:19:46:27 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xB8\x8D\x968\x7F\xF6\xF4\xC0/\xED\x06\xF4\x97X\xD0\x0B\x9A-\xF6k!@??\xD3\xC6\xD2\x81\x11\xB5\xC4)\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 157 "-" "-" 138.197.105.180 - - [11/Jun/2025:19:46:29 +0200] "\x16\x03\x01\x00u\x01\x00\x00q\x03\x03\xECs\xA5v\x22\xED\xC9\x06+ \xED\xA2\x8B\x5C`\xFB\x09\xEB\x8DOSRU\xA6\x8D" 400 157 "-" "-" ... show less	Web App Attack

Showing 1 to 15 of 38 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 213.166.84.39

🇮🇹 95.228.209.224

🇬🇧 81.19.219.204

🇺🇸 74.82.47.5

🇬🇧 5.226.140.46

🇬🇧 5.226.140.16

🇹🇼 198.235.24.93

🇵🇾 190.128.241.2

🇲🇽 189.240.44.9

🇲🇽 189.219.16.249

🇷🇺 176.77.8.56

🇺🇸 172.202.118.19

🇧🇷 164.163.24.11

🇺🇸 154.92.22.13

🇭🇰 152.32.226.102

🇫🇮 147.185.133.74

🇺🇸 147.185.132.66

🇨🇳 101.89.141.184

🇺🇸 91.230.168.212

🇯🇵 47.91.24.246