JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.169.207

138.197.169.207 was found in our database!

This IP was reported 217 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	whm.serverassociates.com
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.169.207

Whois 138.197.169.207

IP Abuse Reports for 138.197.169.207:

This IP address has been reported a total of 217 times from 51 distinct sources. 138.197.169.207 was first reported on April 30th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-11 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇧🇷 SSP	2026-06-11 21:45:13 (1 week ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurren ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurrences: 13 Unique Ports: 1 Destination Ports: 23 First Seen: 2026-06-10 21:40 UTC Last Seen: 2026-06-10 22:45 UTC show less	IoT Targeted
🇺🇸 SSP	2026-06-11 09:00:14 (1 week ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: IoT Targeted Occurren ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: IoT Targeted Occurrences: 238 Unique Ports: 1 Destination Ports: 23 First Seen: 2026-06-10 08:55 UTC Last Seen: 2026-06-10 22:20 UTC show less	IoT Targeted
🇧🇷 SSP	2026-06-10 21:40:21 (1 week ago)	Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurren ... show more Automatically generated from firewall_v2 logs on Server_ID: SPPX01 Category: IoT Targeted Occurrences: 10 Unique Ports: 1 Destination Ports: 23 First Seen: 2026-06-10 20:00 UTC Last Seen: 2026-06-10 21:40 UTC show less	IoT Targeted
🇺🇸 SSP	2026-06-10 08:55:23 (1 week ago)	Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: IoT Targeted Occurren ... show more Automatically generated from firewall_v2 logs on Server_ID: MIAPX1 Category: IoT Targeted Occurrences: 23 Unique Ports: 1 Destination Ports: 23 First Seen: 2026-06-10 04:25 UTC Last Seen: 2026-06-10 08:55 UTC show less	IoT Targeted
🇦🇹 urnilxfgbez	2026-06-09 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇳🇱 pearbright	2026-06-09 19:56:42 (1 week ago)	2026-06-09T19:24:23.099025+00:00 mercury.fsmail.org.uk kernel: [3389503.691503] [UFW BLOCK] IN=eth0 ... show more 2026-06-09T19:24:23.099025+00:00 mercury.fsmail.org.uk kernel: [3389503.691503] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=138.197.169.207 DST=37.218.240.130 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=51637 PROTO=TCP SPT=24540 DPT=23 WINDOW=15028 RES=0x00 SYN URGP=0 2026-06-09T19:27:42.342950+00:00 mercury.fsmail.org.uk kernel: [3389702.937156] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=138.197.169.207 DST=37.218.240.130 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=51637 PROTO=TCP SPT=24540 DPT=23 WINDOW=15028 RES=0x00 SYN URGP=0 2026-06-09T19:34:31.431100+00:00 mercury.fsmail.org.uk kernel: [3390112.021516] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97:2d:00:74:83:ef:6b:c8:5d:08:00 SRC=138.197.169.207 DST=37.218.240.130 LEN=40 TOS=0x00 PREC=0x00 TTL=55 ID=51637 PROTO=TCP SPT=24540 DPT=23 WINDOW=15028 RES=0x00 SYN URGP=0 2026-06-09T19:37:31.804654+00:00 mercury.fsmail.org.uk kernel: [3390292.401891] [UFW BLOCK] IN=eth0 OUT= MAC=00:16:f8:97: ... show less	Port Scan
🇺🇸 podril1ak2.ru	2026-06-09 14:43:29 (1 week ago)	Blocked by UFW on reporterUS [23/tcp] \| SPT: 24540 \| TTL: 52 \| LEN: 40 \| TOS: 0x00 • Reported by: gi ... show more Blocked by UFW on reporterUS [23/tcp] \| SPT: 24540 \| TTL: 52 \| LEN: 40 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan IoT Targeted
🇺🇸 rjdefrancisco	2026-06-08 07:07:31 (1 week ago)	Unwanted traffic detected by honeypot on June 07, 2026: port scans (2 port 23 scans).	Port Scan Brute-Force SSH
🇦🇹 urnilxfgbez	2026-06-07 22:45:00 (1 week ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇮🇹 kgreen	2026-06-07 22:01:09 (1 week ago)	Graylog firewall DROP detected. Hits=1344, ASN=AS14061, Provider=DigitalOcean, LLC, Country=CA, Rang ... show more Graylog firewall DROP detected. Hits=1344, ASN=AS14061, Provider=DigitalOcean, LLC, Country=CA, Range=138.197.160.0/20, AbuseScore=100, Reports=205 show less	Port Scan Hacking Brute-Force Bad Web Bot Exploited Host Web App Attack SSH
🇺🇸 knock	2026-06-07 16:56:04 (1 week ago)	Knock-Knock honeypot brute-force: Telnet (1000 total hits)	Brute-Force
🇲🇿 delsio	2026-06-07 13:49:30 (1 week ago)	AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=138.197.169.20 ... show more AS37697 ntopng observed inbound attack; alert=Live Flow Malicious Fingerprint; source=138.197.169.207; destination=160.119.113.184; destination_port=23; score=120; action=bgp_blackhole_and_flowspec_discard; block_duration=18000s; reason=high-confidence ntopng_blacklisted,alert_name alert=Live Flow Malicious Fingerprint dst=160.119.113.184 port=23 show less	Port Scan Hacking
🇫🇷 security.rdmc.fr	2026-06-07 06:02:18 (1 week ago)	Port Scan Attack proto:TCP src:24540 dst:23	Port Scan
🇦🇹 urnilxfgbez	2026-06-06 22:45:00 (2 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan

Showing 1 to 15 of 217 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.108.251.61

🇻🇪 201.242.91.94

🇸🇬 152.32.220.188

🇧🇷 45.164.251.106

🇺🇸 44.167.233.173

🇹🇷 213.14.194.105

🇧🇷 177.44.71.72

🇻🇳 171.244.201.80

🇻🇳 113.183.165.151

🇳🇬 102.88.137.213

🇺🇸 92.204.138.44

🇳🇱 45.148.10.147

🇮🇪 44.155.223.49

🇨🇷 201.204.168.47

🇬🇧 178.62.74.55

🇺🇸 162.216.150.157

🇸🇬 98.159.43.86

🇺🇸 74.82.47.7

🇳🇱 72.56.66.71

🇺🇸 44.199.97.69