138.197.182.154
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇩🇪 Germany
- City
- Frankfurt am Main, Hesse
Abuse Reports
Total reports
255 from
164 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 anon333 |
Invalid probes to web server T0406
|
Hacking Exploited Host | |
| 🇫🇮 habs |
138.197.182.154 - - [07/Nov/2026:10:18:54 +0200] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 301 162 "-" "Go-http-client/1.1"
...
|
Web App Attack | |
| 🇫🇷 uthul |
T-Pot honeypot: 34 hits on ports [80, 4891, 11434] (automated)
|
Port Scan Web App Attack | |
| 🇹🇷 Threat.live |
Threat.live: Web Scan
|
Web App Attack | |
| 🇩🇪 EnthecSolutions |
Detected by Enthec Solutions. | Attempts: 31 in 24h | Target port: 6443
|
Port Scan Hacking | |
| 🇰🇷 eungyeol15 |
[daon] Web scan/abuse: 1 events (web_probe). paths: GET /cgi-bin/authLogin.cgi -> 400. sample: 138.197.182.154 - - [07/Nov/2026:13:59:42 +0900] "GET /cgi-bin/authLogin.cgi HTTP/1.1" 400 248 "-" "Go-http-client/1.1"
|
Web App Attack Hacking | |
| 🇫🇷 uthul |
T-Pot honeypot: 164 hits on ports [80, 10250, 11434] (automated)
|
Port Scan Web App Attack | |
| 🇩🇪 ghostwarriors |
Webpage scraping
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇧🇬 MazenHost |
1794021480 - 11/07/2026 05:18:00 Host: 138.197.182.154/138.197.182.154 Port: 143 TCP Blocked
...
|
Port Scan | |
| 🇫🇷 Kejult |
Honeypot Finding: Telnet brute-force on TCP/23; 6 failed login attempts.
|
Brute-Force | |
| 🇺🇸 Vasili Sviridov |
: Connection closed (no auth attempts in 0 secs)
|
Brute-Force | |
| 🇩🇪 quiescence.eu |
SMTP brute force - Fail2ban @ quiescence.eu
|
Brute-Force | |
| 🇩🇪 Luhte |
Unauthorised SSH/Telnet login attempt with user "GET /solr/admin/info/system HTTP/1.1" at 2026-11-07T01:26:33Z
|
Brute-Force SSH | |
| 🇳🇱 donarev419 |
Port scan detected on port 25 (connection without data transfer)
|
Port Scan | |
| 🇩🇪 Robbie |
Nov 7 00:35:43 Ubuntu-2204-jammy-amd64-base sshd[1915089]: Connection closed by 138.197.182.154 port 11492 [preauth]
...
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown