JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.12.59

138.197.12.59 was found in our database!

This IP was reported 21 times. Confidence of Abuse is 69%: ?

69%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.12.59

Whois 138.197.12.59

IP Abuse Reports for 138.197.12.59:

This IP address has been reported a total of 21 times from 20 distinct sources. 138.197.12.59 was first reported on September 12th 2023, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-09-18 10:22:06 (15 hours ago)	Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ... show more Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt. show less	Web App Attack Bad Web Bot
Anonymous	2026-09-16 22:31:42 (2 days ago)	Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ... show more Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt. show less	Web App Attack Bad Web Bot
🇮🇪 RoboSOC	2026-09-16 12:17:08 (2 days ago)	WordPress Core author exclude SQL Injection Vulnerability, PTR: PTR record not found	Hacking
🇨🇭 Ribeye375	2026-09-16 06:43:36 (2 days ago)	HIPS wordpress - Block tcp/0:65535	Web App Attack
🇫🇷 masterguru	2026-09-16 06:38:37 (2 days ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-193)	Hacking
🇩🇪 ger-stg-sifi1	2026-09-16 06:29:25 (2 days ago)	(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php	Web App Attack
🇮🇹 VHosting	2026-09-16 06:20:04 (2 days ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇺🇸 OceanTreasure	2026-09-16 05:20:08 (2 days ago)	tcp/80; WordPress wp-login.php probe: "GET /wp-login.php" @ 2026-09-16T05:15:55Z	Web App Attack
🇵🇱 Budyn	2026-09-16 04:59:44 (2 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: dont-eat-the-pudding.top \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇬🇧 pinguin	2026-09-16 04:46:18 (2 days ago)	Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method ... show more Triggered Cloudflare WAF (firewallManaged) from US. Action taken: LOG Protocol: HTTP/1.1 (GET method) Endpoint: /wp-login.php UA: Mozilla/5.0 This report was generated by: https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB show less	Bad Web Bot
🇩🇪 todix	2026-09-16 04:17:37 (2 days ago)	Web App Attack Exploid from 138.197.12.59	Web App Attack
🇺🇸 FurrIX vIX	2026-08-09 04:54:37 (1 month ago)	2026-08-09T00:54:36.290004-04:00 mail postfix/submission/smtpd[719567]: improper command pipelining ... show more 2026-08-09T00:54:36.290004-04:00 mail postfix/submission/smtpd[719567]: improper command pipelining after CONNECT from unknown[138.197.12.59]: GET / HTTP/1.1\r\nHost: 204.12.237.194\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20 2026-08-09T00:54:37.312135-04:00 mail postfix/submission/smtpd[719567]: improper command pipelining after CONNECT from unknown[138.197.12.59]: GET /favicon.ico HTTP/1.1\r\nHost: 204.12.237.194\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142. ... show less	Brute-Force
🇺🇸 Aurealize	2026-08-09 04:04:44 (1 month ago)	firewall port scanning detected. 2 or more observation(s) from 2026-08-09T04:04:44.000Z through 2026 ... show more firewall port scanning detected. 2 or more observation(s) from 2026-08-09T04:04:44.000Z through 2026-08-09T04:04:44.000Z. show less	Port Scan
🇺🇸 Axel	2026-08-09 03:46:33 (1 month ago)	Blocked by UFW on MVI [12000/tcp] \| SPT: 61003 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on MVI [12000/tcp] \| SPT: 61003 \| TTL: 239 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 centurion	2026-08-09 03:14:06 (1 month ago)	Blocked by UFW on ns03 [1177/tcp] Source port: 61001 TTL: 239 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on ns03 [1177/tcp] Source port: 61001 TTL: 239 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 15 of 21 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 199.45.154.115

🇺🇸 165.22.41.116

🇭🇰 152.32.168.34

🇺🇸 138.199.42.185

🇷🇺 93.100.229.201

🇩🇪 69.5.169.232

🇱🇹 62.60.130.242

🇨🇦 57.134.142.191

🇭🇰 45.10.175.89

🇩🇪 34.32.0.94

🇳🇱 193.47.62.69

🇧🇷 179.176.210.17

🇩🇪 172.68.110.254

🇦🇷 148.227.75.156

🇮🇳 103.191.204.229

🇮🇩 103.99.27.125

🇫🇷 91.231.89.80

🇧🇬 78.128.114.166

🇺🇸 52.201.105.128

🇯🇵 20.222.103.62