JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.29.14

138.197.29.14 was found in our database!

This IP was reported 14 times. Confidence of Abuse is 39%: ?

39%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.29.14

Whois 138.197.29.14

IP Abuse Reports for 138.197.29.14:

This IP address has been reported a total of 14 times from 12 distinct sources. 138.197.29.14 was first reported on May 27th 2025, and the most recent report was 15 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 LiftUp Hosting	2026-06-25 06:53:10 (15 hours ago)	Honeypot hit: Unauthorized traffic on 27017/mongod	Port Scan
🇩🇪 SMi-Web	2026-06-25 06:41:12 (16 hours ago)	Blocked by firewall on hugin [27017/tcp] \| Rule: UFW \| SPT: 80 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Re ... show more Blocked by firewall on hugin [27017/tcp] \| Rule: UFW \| SPT: 80 \| TTL: 241 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 thecocasio	2026-06-25 06:37:41 (16 hours ago)	PortSentry honeypot: unsolicited TCP connection to closed decoy port 27017 (MongoDB) on a host runni ... show more PortSentry honeypot: unsolicited TCP connection to closed decoy port 27017 (MongoDB) on a host running no such service. Automated port-scan detection at 2026-06-25T06:37:41Z. show less	Port Scan
🇹🇷 Squearex	2026-06-25 06:30:09 (16 hours ago)	Automated ban by SCUMUnified Shield. Honeypot Trap Triggered (Decoy Port 27017)	Brute-Force SSH
🇺🇸 MPL	2026-06-25 06:28:04 (16 hours ago)	tcp/27017 (4 or more attempts)	Port Scan
🇺🇸 xmission.com	2026-06-25 06:24:54 (16 hours ago)	Blocked by UFW (TCP on 27017) Source port: 80 TTL: 241 Packet length: 44 TOS: 0x0A This report (for ... show more Blocked by UFW (TCP on 27017) Source port: 80 TTL: 241 Packet length: 44 TOS: 0x0A This report (for 138.197.29.14) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 femboy.cat	2026-06-11 10:56:37 (2 weeks ago)	Port scan to tcp/465 from 138.197.29.14	Brute-Force
🇺🇸 xmission.com	2026-06-09 13:37:28 (2 weeks ago)	Blocked by UFW (TCP on 15000) Source port: 61013 TTL: 241 Packet length: 44 TOS: 0x08 This report ( ... show more Blocked by UFW (TCP on 15000) Source port: 61013 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.29.14) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 DocNetzwerk	2025-11-20 07:21:04 (7 months ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 138.197.29.14 (US/Un ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 138.197.29.14 (US/United States/-) show less	Bad Web Bot
🇩🇪 LRob.fr	2025-11-20 07:15:14 (7 months ago)	Repeated 404 errors, blocked by Fail2ban in custom-404 jail	Bad Web Bot
🇺🇸 TPI-Abuse	2025-11-20 07:04:54 (7 months ago)	(mod_security) mod_security (id:210831) triggered by 138.197.29.14 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:210831) triggered by 138.197.29.14 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 20 02:04:50.416975 2025] [security2:error] [pid 8260:tid 8260] [client 138.197.29.14:58112] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url\|user-Agent\|www\\\\.weblogs\\\\.com\|(?:jakart\|vi)a\|(google\|i{0,1}explorer{0,1}\\\\.exe\|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)\|\\\\bdatacha0s\\\\b\|; widows\|\\\\\\\\r\|a(?: href=\|d(?:sarobot\|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler\|\|theprideproject.net\|F\|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "theprideproject.net"] [uri "/js/browser.min.js"] [unique_id "aR69klhEIA064W9TptEcKwAAAA0"] show less	Brute-Force Bad Web Bot Web App Attack
🇷🇴 abuse_IP_reporter	2025-05-27 02:45:04 (1 year ago)	May 27 04:55:52 server UFW BLOCK SRC=138.197.29.14 PROTO=TCP SPT=61013 DPT=80	Port Scan
🇳🇱 Study Bitcoin 🤗	2025-05-27 01:37:07 (1 year ago)	2 port probes: tcp/8081 (http), tcp/8088 [srv132,ros]	Port Scan
🇺🇸 MPL	2025-05-27 00:48:29 (1 year ago)	tcp/8090	Port Scan

Showing 1 to 14 of 14 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 209.87.169.158

🇩🇪 194.88.98.121

🇺🇸 185.198.240.163

🇨🇳 101.126.24.58

🇨🇳 47.111.234.74

🇺🇸 34.16.124.201

🇨🇦 20.104.19.65

🇺🇸 20.64.104.235

🇨🇳 14.103.105.56

🇮🇳 164.52.200.168

🇵🇹 80.172.227.22

🇸🇬 45.78.198.199

🇮🇩 43.133.148.170

🇨🇳 36.7.27.254

🇺🇸 205.210.31.50

🇸🇬 193.37.32.211

🇳🇱 192.42.116.20

🇧🇷 181.218.172.74

🇺🇸 173.255.223.49

🇺🇸 154.21.239.176