This IP address has been reported a total of
33
times from
27 distinct
sources.
138.197.6.241 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW on vps2 [993/tcp]
Source port: 61000
TTL: 243
Packet length: 44
TOS: 0x00
This repor ...
show moreBlocked by UFW on vps2 [993/tcp]
Source port: 61000
TTL: 243
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
{"level":"info","ts":1779221375.3534586,"logger":"http.log.access.log1","msg":"handled request","req ...
show more{"level":"info","ts":1779221375.3534586,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"138.197.6.241","remote_port":"41192","client_ip":"138.197.6.241","proto":"HTTP/1.1","method":"GET","host":"updown.suite.anct.gouv.fr","uri":"/anct/..;/.git/HEAD","headers":{"Accept-Language":["en-US,en;q=0.5"],"Accept-Encoding":["identity"],"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,application/octet-stream;q=0.9,*/*;q=0.8"]}},"bytes_read":0,"user_id":"","duration":0.000057931,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://updown.suite.anct.gouv.fr/anct/..;/.git/HEAD"],"Content-Type":[]}}
{"level":"info","ts":1779221375.549256,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"138.197.6.241","remote_port":"41200","client
...
show less
Auto-ban: 18 malicious requests on 2026-03-27 (e.g., env/backup probes, brute-force, or error bursts ...
show moreAuto-ban: 18 malicious requests on 2026-03-27 (e.g., env/backup probes, brute-force, or error bursts).
show less
Scanning for installed WordPress and vulnerabilities
138.197.6.241 [27/Mar/2026:03:19:56] "GET /wp-l ...
show moreScanning for installed WordPress and vulnerabilities
138.197.6.241 [27/Mar/2026:03:19:56] "GET /wp-login.php HTTP/1.1"
show less