AbuseIPDB » 138.197.145.183

138.197.145.183 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 63%: ?

63%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 138.197.145.183

Whois 138.197.145.183

IP Abuse Reports for 138.197.145.183:

This IP address has been reported a total of 50 times from 34 distinct sources. 138.197.145.183 was first reported on February 27th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ps-center	2025-05-13 12:39:31 (1 month ago)	C1-W: TCP-Scanner. Port: 22	Port Scan
geot	2025-05-13 12:35:04 (1 month ago)	GET /form.html HTTP/1.1 GET /geoip/ HTTP/1.1 GET /1.php HTTP/1.1 GET /upl.php HTTP ... show moreGET /form.html HTTP/1.1 GET /geoip/ HTTP/1.1 GET /1.php HTTP/1.1 GET /upl.php HTTP/1.1 GET /systembc/password.php HTTP/1.1 GET /password.php HTTP/1.1 GET /t4 HTTP/1.1 show less	Bad Web Bot Web App Attack
ozisp.com.au	2025-05-12 21:11:05 (1 month ago)	US_DigitalOcean,_<33>1747084264 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classificatio ... show moreUS_DigitalOcean,_<33>1747084264 [119:33:2] (http_inspect) UNESCAPED SPACE IN HTTP URI [Classification: Unknown Traffic] [Priority: 3] {TCP} 138.197.145.183:60078 show less	Hacking
Ciaran	2025-05-12 21:04:17 (1 month ago)	Honeypot hit from 138.197.145.183 targeting a server in Germany. Unauthorized HTTP access attempt to ... show moreHoneypot hit from 138.197.145.183 targeting a server in Germany. Unauthorized HTTP access attempt to path "/", "/form.html", "/upl.php", "/t4", "/geoip/" show less	Bad Web Bot Web App Attack
Network Security	2025-05-12 19:33:18 (1 month ago)	Scanning for open ports and vulnerable services.	Port Scan
Vaction	2025-05-12 19:32:56 (1 month ago)	138.197.145.183 - - [12/May/2025:21:32:56 +0200] "GET /form.html HTTP/1.1" 404 341 "-" "curl/8.1.2"	Hacking Bad Web Bot Web App Attack
crooze.net	2025-05-12 18:08:57 (1 month ago)	138.197.145.183 - - [12/May/2025:14:08:56 -0400] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x81\xB4\xD1 ... show more138.197.145.183 - - [12/May/2025:14:08:56 -0400] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03\x81\xB4\xD1\x86\x08\x0ERP\xDA\x94+oV/U\xFBk\xD6,\xAC+\x0F\xDE@\xD4*\xB5*\xA6\x84w\x15\x00\x00\x1A\xC0/\xC0+\xC0\x11\xC0\x07\xC0\x13\xC0\x09\xC0\x14\xC0" 400 150 "-" "-" ... show less	Hacking Web App Attack
Shouddy Tarano	2025-05-12 17:40:09 (1 month ago)	[Mon May 12 11:40:08.256328 2025] [authz_core:error] [pid 3335750:tid 140519585871616] [client 138.1 ... show more[Mon May 12 11:40:08.256328 2025] [authz_core:error] [pid 3335750:tid 140519585871616] [client 138.197.145.183:50796] AH01630: client denied by server configuration: /var/www/html/ [Mon May 12 11:40:08.259081 2025] [authz_core:error] [pid 3335750:tid 140519585871616] [client 138.197.145.183:50796] AH01630: client denied by server configuration: /usr/share/httpd/noindex/index.html [Mon May 12 11:40:08.382246 2025] [authz_core:error] [pid 3335517:tid 140520508577536] [client 138.197.145.183:50802] AH01630: client denied by server configuration: /var/www/html/form.html [Mon May 12 11:40:08.510473 2025] [authz_core:error] [pid 3335518:tid 140520475006720] [client 138.197.145.183:50810] AH01630: client denied by server configuration: /var/www/html/upl.php [Mon May 12 11:40:08.637568 2025] [authz_core:error] [pid 3335516:tid 140520265287424] [client 138.197.145.183:50822] AH01630: client denied by server configuration: /var/www/html/t4 ... show less	DDoS Attack Web Spam Brute-Force Web App Attack
zynex	2025-05-12 17:27:00 (1 month ago)	URL Probing: /upl.php	Web App Attack
masterguru	2025-05-12 15:58:32 (1 month ago)	Host header is a numeric IP address. Pattern match "^ (920350-159)	Hacking Bad Web Bot
MWA SOC	2025-05-12 15:48:34 (1 month ago)		Hacking
Gabriel Camargo	2025-05-12 15:16:09 (1 month ago)	138.197.145.183 - - [12/May/2025:10:16:08 -0500] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows ... show more138.197.145.183 - - [12/May/2025:10:16:08 -0500] "GET / HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.197.145.183 - - [12/May/2025:10:16:08 -0500] "GET /form.html HTTP/1.1" 404 134 "-" "curl/8.1.2" 138.197.145.183 - - [12/May/2025:10:16:08 -0500] "GET /upl.php HTTP/1.1" 404 134 "-" "Mozilla/5.0" ... show less	Brute-Force SSH
barbarella	2025-05-12 14:20:47 (1 month ago)	Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.h ... show moreMultiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.html) 14:20:48 searching Vulnerable php scripts (GET /upl.php) 14:20:49 unsolicited access to nonexisting pages (GET /t4) 14:20:49 searching Geoip Security Vulnerabilities (GET /geoip/) 14:20:50 searching Vulnerable php scripts (GET /1.php) 14:20:51 searching Vulnerable php scripts (GET /systembc/password.php) 14:20:51 searching Vulnerable php scripts (GET /password.php) show less	Hacking Web App Attack
geot	2025-05-12 13:04:34 (1 month ago)	GET /ab2h HTTP/1.1 GET /teorema505?t=1 HTTP/1.1 GET /ab2g HTTP/1.1 GET /t4 HTTP/1. ... show moreGET /ab2h HTTP/1.1 GET /teorema505?t=1 HTTP/1.1 GET /ab2g HTTP/1.1 GET /t4 HTTP/1.1 GET /alive.php HTTP/1.1 show less	Bad Web Bot Web App Attack
_ArminS_	2025-05-12 10:15:35 (1 month ago)	WEB-Scan 52497:80 detected 2025.05.12 12:15:35 blocked until 2025.07.01 05:18:22	Port Scan

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩