JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.173.22

138.197.173.22 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.173.22

Whois 138.197.173.22

IP Abuse Reports for 138.197.173.22:

This IP address has been reported a total of 39 times from 31 distinct sources. 138.197.173.22 was first reported on November 8th 2024, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-03-30 14:53:32 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.173.22 (CA/Canada/-): 2 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.173.22 (CA/Canada/-): 2 in the last 3600 secs (0-201) show less	Hacking
🇩🇪 patrisei	2026-03-30 14:39:28 (5 months ago)	CrowdSec Drop is better than Reject: crowdsecurity/http-probing	Port Scan Web App Attack
🇺🇸 RAP	2026-03-30 07:58:01 (5 months ago)	2026-03-30 07:58:01 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇩🇪 Vegascosmetics	2026-03-27 22:51:05 (5 months ago)	Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.	Bad Web Bot
🇫🇷 masterguru	2026-03-26 16:00:19 (5 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.173.22 (CA/Canada/-): 2 in th ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.173.22 (CA/Canada/-): 2 in the last 3600 secs (0-193) show less	Hacking
🇺🇸 RAP	2026-03-26 13:24:26 (5 months ago)	2026-03-26 13:24:26 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇬🇧 Nov	2026-03-26 05:06:52 (5 months ago)	Unauthorized HTTP access attempt (tcp/80)	Port Scan
🇦🇺 MAGIC	2026-03-21 00:40:38 (5 months ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
🇮🇪 RoboSOC	2026-03-17 15:55:17 (5 months ago)	Port 22 Scan, PTR: None	Port Scan
🇬🇧 gbzret4d	2026-03-17 13:43:36 (5 months ago)	Blocked by CrowdSec. Scenario: crowdsecurity/ssh-bf	Brute-Force SSH
🇩🇪 さいとうあすか	2026-03-17 13:43:29 (5 months ago)	2026-03-17T22:43:26.093952+09:00 v2202511290309405508 sshd[1655883]: Invalid user josh from 138.197. ... show more 2026-03-17T22:43:26.093952+09:00 v2202511290309405508 sshd[1655883]: Invalid user josh from 138.197.173.22 port 58254 2026-03-17T22:43:27.007201+09:00 v2202511290309405508 sshd[1655883]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.173.22 2026-03-17T22:43:29.226678+09:00 v2202511290309405508 sshd[1655883]: Failed password for invalid user josh from 138.197.173.22 port 58254 ssh2 ... show less	Brute-Force SSH
🇺🇸 cybsecaoccol	2026-03-17 13:40:56 (5 months ago)	unauthorized connection or malicious port scan attempted on tcp port - corp	Port Scan Hacking
🇺🇸 micropedro	2026-03-17 13:40:29 (5 months ago)	3 incidents: SSH brute-force. First: 2026-03-17 09:40, Last: 2026-03-17 09:40 UTC. Triggers: non-pub ... show more 3 incidents: SSH brute-force. First: 2026-03-17 09:40, Last: 2026-03-17 09:40 UTC. Triggers: non-public-port,non-public-port,firewall-ssh. show less	Port Scan Brute-Force SSH
🇩🇪 centurion	2026-03-02 03:40:03 (6 months ago)	Blocked by UFW on ns02 [80/tcp] Source port: 61004 TTL: 241 Packet length: 44 TOS: 0x00 This report ... show more Blocked by UFW on ns02 [80/tcp] Source port: 61004 TTL: 241 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
Anonymous	2026-02-03 17:43:50 (6 months ago)	Port Scanner	Port Scan

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 2a00:1450:4013:c06::123

🇺🇦 194.44.147.61

🇨🇦 176.113.74.138

🇨🇦 173.238.59.151

🇺🇸 170.106.165.173

🇺🇸 137.184.109.166

🇮🇳 122.172.82.239

🇺🇸 104.232.79.58

🇨🇦 104.207.48.205

🇺🇸 103.143.238.100

🇸🇪 78.68.69.14

🇰🇷 59.28.78.122

🇺🇸 54.201.117.232

🇸🇪 37.120.153.72

🇧🇪 198.235.24.242

🇺🇸 198.44.134.11

🇺🇸 167.234.99.239

🇩🇪 163.5.26.80

🇺🇸 134.209.219.163

🇨🇦 134.122.44.220