138.197.41.30
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
Abuse Reports
Total reports
45 from
41 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇫🇷 Yougow |
Secret file probing (.env/.git). Automated detection.
|
Web App Attack Bad Web Bot | |
| 🇫🇷 SpaceHost-Server |
|
Brute-Force Web App Attack | |
| 🇬🇷 ggb_st |
[2026-11-06 13:39:14] 138.197.41.30 triggered a honeypot. Requested on port 80. URI: /.git/config, UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36
...
|
Bad Web Bot Brute-Force Web App Attack Hacking SQL Injection | |
| 🇫🇷 id2i |
2026-11-06T14:38:10.029104+01:00 coraza-spoa[262622]: [client "138.197.41.30"] Coraza: Access denied (phase 2). Inbound Anomaly Score Exceeded (Total Score: 8)
|
Hacking Web App Attack | |
| 🇳🇱 debestelapp |
|
Web App Attack | |
| 🇩🇪 Progetto1 |
Detected via HAProxyScanner at 2026-11-06 13:29:01 UTC on destination port WEB (80/443). Repeated scan / connection.
|
Port Scan Hacking Brute-Force | |
| 🇫🇷 Yougow |
Secret file probing (.env/.git). Automated detection.
|
Web App Attack Bad Web Bot | |
| 🇨🇭 GAS |
Bad Bot.
138.197.41.30 - - [06/Nov/2026:14:26:03 +0100] "GET /.git/config HTTP/1.1" 402 2793 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" "REDACTED" ""
...
|
Bad Web Bot Web App Attack | |
| 🇩🇪 s@ch@ |
Jail: plesk-modsecurity | Web application attack (Plesk ModSecurity)
|
Web App Attack | |
| 🇱🇻 instant |
06.11.2026 13:13:08 Git repository scan (/.git)
|
Hacking Web App Attack | |
| Anonymous |
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
|
Hacking Web App Attack | |
| 🇳🇦 jacqueskruger |
|
Web App Attack | |
| 🇷🇺 Albram |
Tries find Web server vulnerability
...
|
Hacking Web App Attack | |
| 🇸🇰 iplusv |
Automatic report from IV firewall log.
|
Port Scan Hacking Brute-Force | |
| 🇫🇮 pixiekat |
Banned by fail2ban (modsec-tripwire, 1 hits) [msg "no source code for you"]
|
Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown