AbuseIPDB » 138.197.179.94

Check an IP Address, Domain Name, or Subnet

e.g. 3.239.236.140, microsoft.com, or 5.188.10.0/24

138.197.179.94 was found in our database!

This IP was reported 893 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	New York City, New York

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.197.179.94

Whois 138.197.179.94

IP Abuse Reports for 138.197.179.94:

This IP address has been reported a total of 893 times from 90 distinct sources. 138.197.179.94 was first reported on June 17th 2020, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
rakkor	01 Jan 2021	2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" whi ... show more2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.197.179.94, server: , request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-fdf1d4a0-1ee6-4ddf-8a4a-bf7184d3fc60.sock:", host: "mail.rakkor.uk" show less	Brute-Force Web App Attack
rakkor	31 Dec 2020	2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" whi ... show more2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.197.179.94, server: , request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-fdf1d4a0-1ee6-4ddf-8a4a-bf7184d3fc60.sock:", host: "mail.rakkor.uk" show less	Brute-Force Web App Attack
Findus LeChat	27 Dec 2020	Attempt to hack Wordpress Login, XMLRPC or other login	Hacking
ManagedStack	23 Dec 2020	Unauthorized path/IP Access (full log not revealed as it contains sensitive data)	Hacking Web App Attack
dbip	23 Dec 2020	138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5 ... show more138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:18:33:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:18:33:07 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 ... show less	Brute-Force Web App Attack
security.rdmc.fr	23 Dec 2020	Automatic report - Banned IP Access	Web App Attack
HJ5Ss4Ju	23 Dec 2020	WordPress wp-login brute force :: 138.197.179.94 0.072 - [23/Dec/2020:14:29:45 0000] [censored_1] " ... show moreWordPress wp-login brute force :: 138.197.179.94 0.072 - [23/Dec/2020:14:29:45 0000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 2389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "HTTP/1.1" show less	Hacking Brute-Force Web App Attack
plzenskypruvodce.cz	23 Dec 2020	Dec 23 06:08:45 b-vps wordpress(gpfans.cz)[1040391]: Authentication attempt for unknown user buchtic ... show moreDec 23 06:08:45 b-vps wordpress(gpfans.cz)[1040391]: Authentication attempt for unknown user buchtic from 138.197.179.94 ... show less	Brute-Force
computerdoc	22 Dec 2020	xmlrpc attack	DDoS Attack Web App Attack
dbip	22 Dec 2020	138.197.179.94 - - [23/Dec/2020:01:56:40 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5 ... show more138.197.179.94 - - [23/Dec/2020:01:56:40 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:01:56:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:01:56:46 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:01:56:46 +0100] "POST /wp-login.php HTTP/1.1" 200 2672 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:01:56:52 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [23/Dec/2020:01:56:52 +0100] "POST /wp-login.php HTTP/1.1" 200 2673 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... show less	Brute-Force Web App Attack
rakkor	22 Dec 2020	2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" whi ... show more2020/09/27 14:34:16 [error] 13560#13560: 51400 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 138.197.179.94, server: , request: "GET /wp-login.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-fdf1d4a0-1ee6-4ddf-8a4a-bf7184d3fc60.sock:", host: "mail.rakkor.uk" show less	Brute-Force Web App Attack
MortimerCat	19 Dec 2020	Attempting to access Wordpress login on a honeypot or private system.	Web App Attack
Bytemark	19 Dec 2020	138.197.179.94 - - [19/Dec/2020:17:53:46 +0000] "GET /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5 ... show more138.197.179.94 - - [19/Dec/2020:17:53:46 +0000] "GET /wp-login.php HTTP/1.1" 200 2106 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:17:53:46 +0000] "POST /wp-login.php HTTP/1.1" 200 2196 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:17:53:51 +0000] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" show less	Brute-Force Web App Attack
computerdoc	19 Dec 2020	xmlrpc attack	DDoS Attack Web App Attack
dbip	19 Dec 2020	138.197.179.94 - - [19/Dec/2020:14:22:28 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5 ... show more138.197.179.94 - - [19/Dec/2020:14:22:28 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:14:22:34 +0100] "POST /wp-login.php HTTP/1.1" 200 2698 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:14:22:39 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:14:22:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2697 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:14:22:45 +0100] "GET /wp-login.php HTTP/1.1" 200 2566 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 138.197.179.94 - - [19/Dec/2020:14:22:45 +0100] "POST /wp-login.php HTTP/1.1" 200 2696 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... show less	Brute-Force Web App Attack