JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.197.40.136

Neutral Activity

Abuse confidence score ?

0% Low Risk

54 reports

41 reporters · latest 1 year ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1546546.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

138.197.40.136 has been reported 54 times. The most recent report is from 1 year ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 138.197.40.136

Export CSV

This IP address has been reported a total of 54 times from 41 distinct sources. 138.197.40.136 was first reported on June 26th 2025, and the most recent report was 1 year ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2025-09-12 23:34:36 (1 year ago)	suspicious paths in IIS	Web App Attack
Anonymous	2025-09-10 23:34:19 (1 year ago)	suspicious paths in IIS	Web App Attack
Anonymous	2025-09-09 10:54:46 (1 year ago)	suspicious paths in IIS	Web App Attack
🇨🇳 ThreatBook.io	2025-08-17 00:06:45 (1 year ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.197.40.136 2025-08 ... show more ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/138.197.40.136 2025-08-16 01:48:32 /t4 2025-08-16 01:48:31 / 2025-08-16 01:48:34 /password.php 2025-08-16 01:48:31 /upl.php 2025-08-16 01:48:31 /form.html 2025-08-16 01:48:32 /geoip/ 2025-08-16 01:48:34 /systembc/password.php 2025-08-16 01:48:33 /favicon.ico 2025-08-16 01:48:33 /1.php show less	Web App Attack
Anonymous	2025-08-16 23:21:13 (1 year ago)	Blocked by cpGuard/ModSecurity WAF	Web App Attack
🇫🇷 service Informatique	2025-08-16 04:00:37 (1 year ago)	GET /t4	Web App Attack
Anonymous	2025-08-16 00:11:53 (1 year ago)	Aggressive web scan	SQL Injection Bad Web Bot Web App Attack
🇩🇪 barbarella	2025-08-15 13:38:30 (1 year ago)	Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.h ... show more Multiple (7) times attack on https port 443: unsolicited access to Administrative pages (GET /form.html) 13:38:30 infected host with malware (GET /upl.php) 13:38:31 unsolicited access to nonexisting pages (GET /t4) 13:38:31 searching Geoip Security Vulnerabilities (GET /geoip/) 13:38:32 hacking attempt (GET /1.php) 13:38:33 SystemBC Malware Activity (GET /systembc/password.php) 13:38:33 Hacking attempt of vulnerable PHP Script (GET /password.php) show less	Hacking Web App Attack
🇩🇪 ISPLtd	2025-08-15 13:22:17 (1 year ago)	138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /form.html 138.197.40.136 - - [15/Aug/2025:10:2 ... show more 138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /form.html 138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /upl.php 138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /t4 138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /geoip/ 138.197.40.136 - - [15/Aug/2025:10:22:15 -0300] "GET /favicon.ico ... show less	Hacking Web App Attack
🇬🇧 [email protected]	2025-08-15 12:09:59 (1 year ago)	...	Brute-Force SSH
🇮🇪 Jim Keir	2025-08-15 11:21:01 (1 year ago)	2025-08-15 11:21:00 138.197.40.136 File scanning, blocking 138.197.40.136 for 5 minutes	Web App Attack
Anonymous	2025-08-15 11:09:47 (1 year ago)	Fail2Ban Log Report 138.197.40.136 - [15/Aug/2025:13:09:45 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x0 ... show more Fail2Ban Log Report 138.197.40.136 - [15/Aug/2025:13:09:45 +0200] "\x16\x03\x01\x00{\x01\x00\x00w\x03\x03+\xEAb\xE6\xE2\xF4\xDEM\xAF\xFA\x96\x88\xF2VH\xCB\x1E\xD2\x9FF" 403 146 "-" "-" "-" "-" ... show less	Hacking SQL Injection Web App Attack
🇦🇷 crgim	2025-08-15 10:11:37 (1 year ago)	138.197.40.136 - - [15/Aug/2025:07:11:34 -0300] "GET / HTTP/1.1" 200 5059 "http://190.189.198.27/" " ... show more 138.197.40.136 - - [15/Aug/2025:07:11:34 -0300] "GET / HTTP/1.1" 200 5059 "http://190.189.198.27/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" show less	Hacking Web App Attack
🇸🇬 simpeg-adm.bandung.go.id	2025-08-15 10:08:28 (1 year ago)	138.197.40.136 - - [15/Aug/2025:10:08:24 +0000] "GET /form.html HTTP/1.1" 404 133 "-" "curl/8.1.2" 1 ... show more 138.197.40.136 - - [15/Aug/2025:10:08:24 +0000] "GET /form.html HTTP/1.1" 404 133 "-" "curl/8.1.2" 138.197.40.136 - - [15/Aug/2025:10:08:25 +0000] "GET /upl.php HTTP/1.1" 404 133 "-" "Mozilla/5.0" 138.197.40.136 - - [15/Aug/2025:10:08:25 +0000] "GET /t4 HTTP/1.1" 404 133 "-" "Mozilla/5.0" 138.197.40.136 - - [15/Aug/2025:10:08:26 +0000] "GET /geoip/ HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.197.40.136 - - [15/Aug/2025:10:08:26 +0000] "GET /favicon.ico HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.197.40.136 - - [15/Aug/2025:10:08:27 +0000] "GET /1.php HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 138.197.40.136 - - [15/Aug/2025:10:08:27 +0000] "GET /systembc/password.php HTTP/1.1" 404 194 "-" "Mozilla/5.0 (Win ... show less	Web Spam Brute-Force Web App Attack
🇺🇸 antlac1	2025-08-15 08:24:51 (1 year ago)	crowdsecurity/http-backdoors-attempts	Brute-Force Web App Attack

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.46.13.150

🇦🇷 181.228.212.209

🇯🇵 156.227.234.198

🇧🇷 131.255.213.80

🇧🇷 131.161.123.35

🇨🇳 111.26.106.119

🇧🇩 103.120.167.63

🇹🇷 95.173.179.252

🇹🇷 88.238.42.215

🇱🇹 62.60.130.242

🇺🇸 20.80.99.65

🇮🇹 94.88.180.210

🇺🇸 76.37.32.179

🇭🇰 43.161.225.52

🇧🇩 27.147.157.132

🇹🇭 184.22.56.80

🇨🇳 180.106.83.59

🇧🇷 168.121.103.131

🇺🇸 136.242.122.71

🇵🇭 119.92.81.147