JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.197.172.113

Recent Activity

Abuse confidence score ?

32% Elevated

432 reports

11 reporters · latest 6 days ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 138.197.172.113

Export CSV

This IP address has been reported a total of 432 times from 11 distinct sources. 138.197.172.113 was first reported on June 6th 2022, and the most recent report was 6 days ago. In the last 60 days, the top reporter locations were: Poland with 2 reports; United States of America with 2 reports; Germany with 1 report. The most common categories in these recent reports were: Web App Attack 5 times; Bad Web Bot 3 times; Brute-Force 2 times; SQL Injection 1 time; SSH 1 time.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇸🇪 vaia.cloud	2026-10-05 12:25:01 (6 days ago)	crowdsecurity/http-cve-probing	Brute-Force Web App Attack
🇵🇱 Budyn	2026-10-05 12:22:18 (6 days ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Unknown Bot / General Web Recon. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: panel.astropot.tech \| URI: /wp-json/batch/v1 \| UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇺🇸 Gabriel Camargo	2026-10-05 06:29:42 (1 week ago)	138.197.172.113 - - [05/Oct/2026:01:29:35 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozi ... show more 138.197.172.113 - - [05/Oct/2026:01:29:35 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.197.172.113 - - [05/Oct/2026:01:29:39 -0500] "POST /?rest_route=/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 138.197.172.113 - - [05/Oct/2026:01:29:42 -0500] "POST /wp-json/batch/v1 HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ... show less	Brute-Force SSH
🇩🇪 EGP Abuse Dept	2026-10-05 03:54:47 (1 week ago)	Scanning for web/db/file exploits on s47.sellwise.io	SQL Injection Bad Web Bot Web App Attack
🇺🇸 entangled_mongoose	2026-10-05 03:42:26 (1 week ago)	Probed /wp-login.php.	Web App Attack
🇵🇱 Budyn	2026-10-05 03:33:00 (1 week ago)	Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicio ... show more Automated threat detected by Budyn Honeypot Sinkhole. Attack type: WP Path Scanning (Recon). Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: ssh.teddypot.cloud \| URI: /wp-login.php \| UA: Mozilla/5.0 \| BODY: [Empty / GET Request] show less	Bad Web Bot Web App Attack
🇨🇭 backslash	2026-06-21 06:03:00 (3 months ago)	block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8	Bad Web Bot
🇩🇪 Trueforce Threat Report	2026-06-21 05:52:19 (3 months ago)	Automated report, trolling for resource vulnerabilities	Bad Web Bot Web App Attack
🇮🇳 Mr.Singh	2026-06-21 03:30:05 (3 months ago)	NFT blocked 138.197.172.113 on 21-Jun-2026..	Port Scan Brute-Force
🇺🇸 MPL	2026-06-21 01:18:14 (3 months ago)	tcp ports: 6936,1883 (3 or more attempts)	Port Scan
🇩🇪 ISPLtd	2024-06-11 04:37:21 (2 years ago)	Jun 11 01:37:17 SRC=138.197.172.113 PROTO=TCP SPT=38076 DPT=9999 SYN Jun 11 01:37:18 SRC=138.197.172 ... show more Jun 11 01:37:17 SRC=138.197.172.113 PROTO=TCP SPT=38076 DPT=9999 SYN Jun 11 01:37:18 SRC=138.197.172.113 PROTO=TCP SPT=38076 DPT=9999 SYN Jun 11 01:37:21 SRC=138.197.172.113 DST=62.171.188.236 ... show less	Port Scan
🇩🇪 ISPLtd	2024-06-10 11:48:45 (2 years ago)	Jun 10 08:48:41 SRC=138.197.172.113 PROTO=TCP SPT=54862 DPT=9999 SYN Jun 10 08:48:42 SRC=138.197.172 ... show more Jun 10 08:48:41 SRC=138.197.172.113 PROTO=TCP SPT=54862 DPT=9999 SYN Jun 10 08:48:42 SRC=138.197.172.113 PROTO=TCP SPT=54862 DPT=9999 SYN Jun 10 08:48:44 SRC=138.197.172.113 DST=62.171.188.236 ... show less	Port Scan
🇩🇪 ISPLtd	2024-06-07 05:48:10 (2 years ago)	Jun 7 02:48:06 SRC=138.197.172.113 PROTO=TCP SPT=40962 DPT=9999 SYN Jun 7 02:48:07 SRC=138.197.172 ... show more Jun 7 02:48:06 SRC=138.197.172.113 PROTO=TCP SPT=40962 DPT=9999 SYN Jun 7 02:48:07 SRC=138.197.172.113 PROTO=TCP SPT=40962 DPT=9999 SYN Jun 7 02:48:09 SRC=138.197.172.113 DST=62.171.188.236 ... show less	Port Scan
🇩🇪 ISPLtd	2024-06-05 19:32:03 (2 years ago)	Jun 5 16:32:00 SRC=138.197.172.113 PROTO=TCP SPT=34330 DPT=9999 SYN Jun 5 16:32:01 SRC=138.197.172 ... show more Jun 5 16:32:00 SRC=138.197.172.113 PROTO=TCP SPT=34330 DPT=9999 SYN Jun 5 16:32:01 SRC=138.197.172.113 PROTO=TCP SPT=34330 DPT=9999 SYN Jun 5 16:32:03 SRC=138.197.172.113 DST=62.171.188.236 ... show less	Port Scan
🇩🇪 ISPLtd	2024-06-05 02:08:19 (2 years ago)	Jun 4 23:08:15 SRC=138.197.172.113 PROTO=TCP SPT=40780 DPT=9999 SYN Jun 4 23:08:16 SRC=138.197.172 ... show more Jun 4 23:08:15 SRC=138.197.172.113 PROTO=TCP SPT=40780 DPT=9999 SYN Jun 4 23:08:16 SRC=138.197.172.113 PROTO=TCP SPT=40780 DPT=9999 SYN Jun 4 23:08:18 SRC=138.197.172.113 DST=62.171.188.236 ... show less	Port Scan

Showing 1 to 15 of 432 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.92.251.198

🇬🇧 185.247.137.215

🇭🇰 150.5.148.103

🇬🇧 86.38.187.22

🇭🇰 43.99.247.61

🇺🇸 34.85.160.164

🇺🇸 2620:24:c040:4::8e

🇲🇱 217.64.97.40

🇺🇸 91.230.168.28

🇺🇸 57.141.6.45

🇬🇧 35.203.210.20

🇮🇷 2.180.32.104

🇩🇪 2a02:c202:2359:6461::1

🇺🇸 216.180.246.158

🇧🇷 205.210.31.238

🇦🇲 195.250.79.2

🇲🇾 195.86.192.66

🇪🇸 172.68.135.208

🇭🇰 119.28.84.193

🇰🇷 112.220.250.20