JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.19.5

138.197.19.5 was found in our database!

This IP was reported 39 times. Confidence of Abuse is 43%: ?

43%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.19.5

Whois 138.197.19.5

IP Abuse Reports for 138.197.19.5:

This IP address has been reported a total of 39 times from 18 distinct sources. 138.197.19.5 was first reported on November 22nd 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-06-16 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇫🇷 Duggy_Tuxy🧱	2026-06-16 03:28:35 (3 days ago)	[HP02-SRV02-FR] Blocked by SysWarden Firewall (Traffic from Malicious Hoster (ASN))	Port Scan
Anonymous	2026-06-16 03:08:29 (3 days ago)	unsolicited connect TCP dport 8882 (sport 61014)	Hacking
🇺🇸 xmission.com	2026-06-16 03:05:56 (3 days ago)	Blocked by UFW (TCP on 8881) Source port: 61007 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8881) Source port: 61007 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.19.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 xmission.com	2026-06-16 02:48:03 (3 days ago)	Blocked by UFW (TCP on 4782) Source port: 61002 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 4782) Source port: 61002 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.19.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇺🇸 MPL	2026-06-16 02:45:26 (3 days ago)	tcp/1245	Port Scan
🇺🇸 Axel	2026-06-16 02:45:05 (3 days ago)	Blocked by UFW on MVI [5000/tcp] \| SPT: 61007 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github ... show more Blocked by UFW on MVI [5000/tcp] \| SPT: 61007 \| TTL: 240 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇧🇷 somosbr	2026-02-22 15:43:28 (3 months ago)	[2026-02-22T15:43:28Z] Unsolicited scan from 138.197.19.5 to port 1245/tcp	Port Scan
🇺🇸 xmission.com	2026-02-22 15:40:15 (3 months ago)	Blocked by UFW (TCP on 8082) Source port: 61003 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8082) Source port: 61003 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.19.5) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 essinghigh	2025-12-14 17:34:41 (6 months ago)	IPS Detection: 138.197.19.5 -> DPT: 1912	Port Scan
🇱🇹 NotACaptcha	2025-11-24 11:53:09 (6 months ago)	webserver:443 [24/Nov/2025] "GET /.git/config HTTP/1.1" 403 4157 "-" "Mozilla/5.0 (Macintosh; Intel ... show more webserver:443 [24/Nov/2025] "GET /.git/config HTTP/1.1" 403 4157 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)" show less	Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 08:37:27 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 24 03:37:22.989163 2025] [security2:error] [pid 3188:tid 3188] [client 138.197.19.5:48506] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "update.accpp.link"] [uri "/.git/config"] [unique_id "aSQZQrsHpxCTwPtOMymstAAAAAI"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-24 02:11:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 21:11:24.310006 2025] [security2:error] [pid 11101:tid 11101] [client 138.197.19.5:36122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goldenvalley1.com"] [uri "/.git/config"] [unique_id "aSO-zCMkqxuJl63wwNQfOgAAAAE"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 22:38:31 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 17:38:26.450017 2025] [security2:error] [pid 28065:tid 28065] [client 138.197.19.5:37568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.alafiariverrendezvous.org"] [uri "/.git/config"] [unique_id "aSOM4sGr3z5ZIxuEmVGTbQAAAAg"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2025-11-23 21:35:34 (6 months ago)	(mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports ... show more (mod_security) mod_security (id:210492) triggered by 138.197.19.5 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 23 16:35:29.492140 2025] [security2:error] [pid 10462:tid 10462] [client 138.197.19.5:49548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calypsodirect.com"] [uri "/.git/config"] [unique_id "aSN-IVgL9j7pUA8mJ9iN2AAAAAc"] show less	Brute-Force Bad Web Bot Web App Attack

Showing 1 to 15 of 39 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 111.229.119.22

🇺🇸 104.128.72.37

🇧🇬 79.124.59.78

🇺🇸 208.109.52.213

🇪🇹 196.189.124.229

🇺🇸 184.168.21.211

🇭🇰 152.32.215.224

🇹🇼 128.14.226.125

🇰🇪 105.27.148.94

🇳🇱 91.92.40.12

🇨🇦 85.217.149.19

🇺🇸 18.118.133.200

🇺🇸 154.83.197.60

🇺🇸 129.146.243.24

🇺🇸 108.167.177.224

🇵🇱 87.251.64.158

🇩🇪 69.5.169.124

🇦🇷 45.228.189.108

🇩🇪 43.228.157.17

🇮🇳 27.123.98.26