JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.164.42

138.197.164.42 was found in our database!

This IP was reported 71 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.164.42

Whois 138.197.164.42

IP Abuse Reports for 138.197.164.42:

This IP address has been reported a total of 71 times from 58 distinct sources. 138.197.164.42 was first reported on June 15th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 andypiper	2026-09-19 01:03:18 (18 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-09-19 01:02:11 (18 hours ago)	Bad_requests	Bad Web Bot
🇩🇪 Vegascosmetics	2026-09-19 00:42:46 (18 hours ago)	Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ... show more Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: /wp-includes/ (Match: /wp-includes/) show less	Hacking Exploited Host Web App Attack
🇬🇧 SilverZippo	2026-09-19 00:10:06 (18 hours ago)	Web App Attack	Web App Attack
Anonymous	2026-09-18 22:16:52 (20 hours ago)	138.197.164.42 - - [18/Sep/2026:22:16:51 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 391 ... show more 138.197.164.42 - - [18/Sep/2026:22:16:51 +0000] "GET //wp-includes/wlwmanifest.xml HTTP/1.1" 404 3912 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" ... show less	Bad Web Bot Web App Attack
🇩🇪 raph	2026-09-18 22:09:29 (20 hours ago)	[Wordpress] crawler /wp-admin/, /wp-content/, etc.	Bad Web Bot Web App Attack
🇳🇱 Alt255	2026-09-18 22:08:12 (20 hours ago)	[ti-tinov] WordPress login brute-force: 5 suspicious requests detected by fail2ban jail <name>. Exam ... show more [ti-tinov] WordPress login brute-force: 5 suspicious requests detected by fail2ban jail <name>. Example: 138.197.164.42 - - \[19/Sep/2026:00:08:00 +0200\] "POST //wp-login.php HTTP/1.1" 200 4395 "https://pipportal.eu//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - \[19/Sep/2026:00:08:01 +0200\] "POST //wp-login.php HTTP/1.1" 200 4395 "https://pipportal.eu//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - \[19/Sep/2026:00:08:01 +0200\] "POST //wp-login.php HTTP/1.1" 200 4395 "https://pipportal.eu//wp-login.php" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/78.0.3904.108 Safari/537. ... show less	Brute-Force Web App Attack
🇵🇱 nakordoni.eu	2026-09-18 22:00:07 (21 hours ago)	Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ... show more Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: DigitalOcean, LLC (CA), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 100/100. show less	Bad Web Bot Web App Attack
🇮🇹 VHosting	2026-09-18 21:45:04 (21 hours ago)	Detected WordPress attack from different servers	Brute-Force Web App Attack
🇫🇷 francoisunix	2026-09-18 21:34:07 (21 hours ago)	138.197.164.42 - - [18/Sep/2026:23:33:57 +0200] "GET ///wp-login.php HTTP/1.1" 401 15049 "-" "Mozill ... show more 138.197.164.42 - - [18/Sep/2026:23:33:57 +0200] "GET ///wp-login.php HTTP/1.1" 401 15049 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "138.197.164.42" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.119 ua="unix:/var/run/php/php8.4-fpm.sock" us="401" ut="0.119" ul="15067" cs=BYPASScf_country="CA" cf_region="Ontario" cf_city="Toronto"rip=127.0.0.1 cf_ip=138.197.164.42 xff="138.197.164.42" p_xff="138.197.164.42, 138.197.164.42" 138.197.164.42 - - [18/Sep/2026:23:33:58 +0200] "POST ///xmlrpc.php HTTP/1.1" 401 420 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" "138.197.164.42" "www.eco-conscient.com" sn="www.eco-conscient.com" rt=0.116 ua="unix:/var/run/php/php8.4-fpm.sock" us="401" ut="0.117" ul="427" cs=-cf_country="CA" cf_region="Ontario" cf_city="Toronto"rip=127.0.0.1 cf_ip=138.197.164.42 xff="138.197.164.42" p_xff="138.197.164 ... show less	Web App Attack
🇺🇸 bigwavedave	2026-09-18 19:19:50 (23 hours ago)	Wordpress Attack	Web App Attack
🇩🇪 Skyrider	2026-09-18 19:16:07 (23 hours ago)	Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.	Bad Web Bot Web App Attack
Anonymous	2026-09-18 16:51:33 (1 day ago)	Malicious Probing/Bad Request	Bad Web Bot
Anonymous	2026-09-18 14:05:14 (1 day ago)	138.197.164.42 - - [18/Sep/2026:16:05:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 ... show more 138.197.164.42 - - [18/Sep/2026:16:05:12 +0200] "GET /wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - [18/Sep/2026:16:05:13 +0200] "GET /blog/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - [18/Sep/2026:16:05:13 +0200] "GET /web/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - [18/Sep/2026:16:05:13 +0200] "GET /wordpress/wp-includes/wlwmanifest.xml HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 138.197.164.42 - - [18/Sep/2026:16:05:14 +0200] "GET /website/wp-includes/wlwmanifest.xml HTT ... show less	Brute-Force Web App Attack
🇺🇸 EvilTurkey	2026-09-18 12:21:04 (1 day ago)	Web app attack against financial institution website.	Web App Attack Hacking

Showing 1 to 15 of 71 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇶🇦 78.101.146.254

🇨🇦 70.54.182.130

🇺🇸 216.201.10.174

🇵🇱 146.59.32.16

🇷🇺 94.233.10.88

🇳🇱 94.154.46.249

🇬🇧 87.236.176.229

🇺🇸 45.33.54.78

🇺🇸 20.169.55.167

🇬🇧 193.176.29.7

🇧🇷 186.215.228.155

🇮🇩 160.19.166.56

🇫🇷 51.68.111.216

🇳🇱 45.148.10.157

🇮🇳 4.240.126.25

🇮🇩 163.7.4.109

🇬🇧 144.126.238.112

🇨🇳 125.69.195.10

🇳🇱 93.123.109.6

🇷🇴 77.81.21.130