JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.73.198

138.197.73.198 was found in our database!

This IP was reported 443 times. Confidence of Abuse is 12%: ?

12%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.73.198

Whois 138.197.73.198

IP Abuse Reports for 138.197.73.198:

This IP address has been reported a total of 443 times from 121 distinct sources. 138.197.73.198 was first reported on October 14th 2022, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 masterguru	2026-05-23 05:27:18 (1 month ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.73.198 (US/United States/-): ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.73.198 (US/United States/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇵🇱 mkey	2026-05-14 07:40:04 (1 month ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS= ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_MULTIPORT \| PORTS=22,10000 \| HITS=2 \| IPSET=ADD \| FIRST=2026-05-14 09:33:12 \| LAST=2026-05-14 09:34:28. Last seen 2026-05-14 09:34:28. show less	Port Scan
🇺🇸 RAP	2026-05-14 06:54:55 (1 month ago)	2026-05-14 06:54:55 UTC Unauthorized activity to TCP port 3306.	Port Scan
🇫🇷 dwmp	2025-12-28 14:38:23 (5 months ago)	Dec 28 15:38:23 plesk postfix/smtpd[3063515]: lost connection after CONNECT from unknown[138.197.73. ... show more Dec 28 15:38:23 plesk postfix/smtpd[3063515]: lost connection after CONNECT from unknown[138.197.73.198] Dec 28 15:38:23 plesk postfix/smtpd[3063515]: lost connection after CONNECT from unknown[138.197.73.198] Dec 28 15:38:23 plesk postfix/smtpd[3063515]: lost connection after CONNECT from unknown[138.197.73.198] ... show less	Brute-Force SSH
🇩🇪 spyra.rocks	2025-03-14 11:00:46 (1 year ago)	WordPress	Web App Attack
🇦🇹 Pingger Shikkoken	2025-03-08 02:10:07 (1 year ago)	2025-03-08T02:10:07+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ... show more 2025-03-08T02:10:07+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=138.197.73.198 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=43115 DF PROTO=TCP SPT=42048 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-03-08T02:10:08+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=138.197.73.198 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=43116 DF PROTO=TCP SPT=42048 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0 2025-03-08T02:10:10+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:58:00:bb:0b:2f:d0:08:00 SRC=138.197.73.198 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x00 TTL=53 ID=64122 DF PROTO=TCP SPT=33150 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0 ... show less	Hacking Bad Web Bot
🇩🇪 spyra.rocks	2025-03-06 22:00:23 (1 year ago)	WordPress	Web App Attack
Anonymous	2025-03-05 19:32:46 (1 year ago)	Failed Wordpress Logins	Web App Attack
🇩🇪 spyra.rocks	2025-02-26 18:02:38 (1 year ago)	WordPress	Web App Attack
Anonymous	2025-02-24 18:56:29 (1 year ago)	apache vulnerability scan	Web App Attack
🇩🇪 LRob.fr	2025-02-23 23:01:11 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇩🇪 spyra.rocks	2025-02-22 16:03:19 (1 year ago)	WordPress	Web App Attack
🇩🇪 LRob.fr	2025-02-22 00:30:39 (1 year ago)	Repeated attacks detected by Fail2Ban in recidive jail	Hacking
🇹🇷 rtbh.com.tr	2025-02-21 20:49:36 (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇨🇦 KIsmay	2025-02-21 09:58:39 (1 year ago)	Feb 21 03:29:57 www4 WPAudit[3051085]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win ... show more Feb 21 03:29:57 www4 WPAudit[3051085]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" sbd-admin:sbd-admin@2019 FAIL Feb 21 03:31:16 www4 WPAudit[3051809]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" sbd-admin:sbd-admin88 FAIL Feb 21 03:59:27 www4 WPAudit[3050663]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" sbd-admin:sbd-admin98 FAIL Feb 21 04:47:07 www4 WPAudit[3062865]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" admin:siscobc123* FAIL Feb 21 04:58:38 www4 WPAudit[3062865]: 138.197.73.198 siscobc.com "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/5 ... show less	Brute-Force Web App Attack

Showing 1 to 15 of 443 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.109.252.196

🇹🇼 221.120.73.25

🇧🇴 190.129.122.12

🇨🇳 180.167.128.203

🇨🇳 111.52.39.233

🇬🇧 87.236.176.83

🇷🇺 5.188.88.23

🇨🇳 223.109.252.171

🇳🇱 195.178.110.228

🇭🇰 162.158.179.28

🇺🇸 157.55.39.12

🇻🇳 103.61.123.132

🇨🇳 223.109.255.156

🇳🇱 175.110.112.8

🇮🇹 172.213.152.46

🇺🇸 165.154.235.9

🇦🇹 152.53.3.237

🇨🇳 120.84.11.190

🇮🇳 49.207.244.28

🇨🇳 223.109.252.147