AbuseIPDB » 138.197.216.92

Check an IP Address, Domain Name, or Subnet

e.g. 44.192.47.87, microsoft.com, or 5.188.10.0/24

138.197.216.92 was found in our database!

This IP was reported 99 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.197.216.92

Whois 138.197.216.92

IP Abuse Reports for 138.197.216.92:

This IP address has been reported a total of 99 times from 64 distinct sources. 138.197.216.92 was first reported on March 14th 2022, and the most recent report was 12 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
dwmp	12 hours ago	Url probing: /wp-login.php	Web App Attack
tmiland	19 hours ago	(wordpress_login) WordPress Login Attack 138.197.216.92 (US/United States/-): 3 in the last 3600 sec ... show more(wordpress_login) WordPress Login Attack 138.197.216.92 (US/United States/-): 3 in the last 3600 secs show less	Blog Spam Brute-Force Web App Attack
Ba-Yu	20 hours ago	WordPress hacking/exploits/scanning	Web Spam Hacking Brute-Force Exploited Host Web App Attack
MSZ	30 Jun 2022	Fail2Ban triggered by plesk-wordpress Fri 01 Jul 2022 05:40:44 AM CEST	Hacking Brute-Force Web App Attack
Danse	30 Jun 2022	(wordpress) Failed wordpress login from 138.197.216.92 (US/United States/-): (CF_ENABLE)	Brute-Force
CryptoYakari	30 Jun 2022	138.197.216.92 - - [30/Jun/2022:17:45:57 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://kaan.do ... show more138.197.216.92 - - [30/Jun/2022:17:45:57 +0300] "GET /wp-login.php HTTP/1.0" 404 371 "http://kaan.dogan.gen.tr" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 138.197.216.92 - - [30/Jun/2022:17:45:57 +0300] "GET /wp-login.php HTTP/1.0" 404 201 "http://kaan.dogan.org" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 138.197.216.92 - - [30/Jun/2022:17:45:57 +0300] "GET /wordpress/wp-login.php HTTP/1.0" 404 3589 "http://kaan.dogan.org" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 138.197.216.92 - - [30/Jun/2022:17:45:57 +0300] "GET /wordpress/wp-login.php HTTP/1.0" 404 8839 "http://kaan.dogan.gen.tr" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36" 138.197.216.92 - - [30/Jun/2022:17:45:58 +0300] "GET /blog/wp-login.php HTTP/1.0" 404 3589 "http://kaan. ... show less	Web Spam Blog Spam Bad Web Bot Web App Attack
Roderic	29 Jun 2022	(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 138.197.216.92 (US/Uni ... show more(apache_scanners-2) Failed apache-scanners trigger with match [redacted] from 138.197.216.92 (US/United States/-) show less	Port Scan
faserx	31 May 2022	\[Tue May 31 19:06:55.537782 2022\] \[authz_core:error\] \[pid 25396\] \[client 138.197.216.92:40680 ... show more\[Tue May 31 19:06:55.537782 2022\] \[authz_core:error\] \[pid 25396\] \[client 138.197.216.92:40680\] AH01630: client denied by server configuration: /var/www3/, referer: https://www.bing.com show less	Hacking Web App Attack
rsiddall	31 May 2022	138.197.216.92 - - [31/May/2022:13:39:13 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://evan ... show more138.197.216.92 - - [31/May/2022:13:39:13 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://evanpresto.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 138.197.216.92 - - [31/May/2022:13:39:13 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://evanpresto.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 138.197.216.92 - - [31/May/2022:13:39:14 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://evanpresto.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 138.197.216.92 - - [31/May/2022:13:39:15 -0400] "POST /wp-login.php HTTP/1.1" 403 1809 "https://evanpresto.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36" 138.197.216.92 - - [31/May/2022:13:39:16 -0400] "POST /wp-login.php ... show less	Brute-Force
applemooz	30 May 2022	<abuseipdb_matches> ...	Brute-Force Web App Attack
tradenet	30 May 2022	138.197.216.92 - - [30/May/2022:15:39:31 -0500] "POST /wp-login.php HTTP/2.0" 200 2767 "https://blas ... show more138.197.216.92 - - [30/May/2022:15:39:31 -0500] "POST /wp-login.php HTTP/2.0" 200 2767 "https://blastertube.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 138.197.216.92 - - [30/May/2022:15:39:32 -0500] "POST /wp-login.php HTTP/2.0" 200 2760 "https://blastertube.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 138.197.216.92 - - [30/May/2022:15:39:33 -0500] "POST /wp-login.php HTTP/2.0" 200 2762 "https://blastertube.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 138.197.216.92 - - [30/May/2022:15:39:33 -0500] "POST /wp-login.php HTTP/2.0" 200 2768 "https://blastertube.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1944.0 Safari/537.36" 138.197.216.92 - - [30/May/2022:15:39:34 -0500] "POST /wp-login. ... show less	Bad Web Bot Web App Attack
Danse	29 May 2022	(wordpress) Failed wordpress login from 138.197.216.92 (US/United States/-): (CF_ENABLE)	Brute-Force
thedreamer.nl	29 May 2022	138.197.216.92 - - [29/May/2022:16:30:22 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "http://synapse ... show more138.197.216.92 - - [29/May/2022:16:30:22 +0200] "GET /wp-login.php HTTP/1.1" 301 162 "http://synapse.thedreamer.nl" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" 138.197.216.92 - - [29/May/2022:16:30:22 +0200] "GET /wp-login.php HTTP/2.0" 404 170 "http://synapse.thedreamer.nl" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36" ... show less	Bad Web Bot Web App Attack
NXTwoThou	29 May 2022	/wp-login.php	Web App Attack
SleepyHosting	28 May 2022	(WPLOGIN) WP Login Attack 138.197.216.92 (US/United States/-): 5 in the last 3600 secs	Brute-Force