JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.74.116

138.197.74.116 was found in our database!

This IP was reported 32 times. Confidence of Abuse is 61%: ?

61%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.74.116

Whois 138.197.74.116

IP Abuse Reports for 138.197.74.116:

This IP address has been reported a total of 32 times from 28 distinct sources. 138.197.74.116 was first reported on March 8th 2021, and the most recent report was 19 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 homeshowdomain.nl	2026-06-03 21:59:13 (19 hours ago)	Auto-ban: 16 malicious requests on 2026-06-02 (e.g., env/backup probes, brute-force, or error bursts ... show more Auto-ban: 16 malicious requests on 2026-06-02 (e.g., env/backup probes, brute-force, or error bursts). show less	Web App Attack SSH Hacking
🇳🇱 homeshowdomain.nl	2026-06-02 22:00:41 (1 day ago)	Auto-ban: >3000 req/min op 2026-06-02	Web App Attack SSH Hacking
🇺🇸 xmission.com	2026-06-02 12:23:32 (2 days ago)	Blocked by UFW (TCP on 85) Source port: 61000 TTL: 241 Packet length: 44 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 85) Source port: 61000 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.74.116) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Mangelot Hosting	2026-06-02 02:53:29 (2 days ago)	(wp_login_try) srv103 WP Login Attempt 138.197.74.116 (US/United States/-): 10 in the last 3600 secs ... show more (wp_login_try) srv103 WP Login Attempt 138.197.74.116 (US/United States/-): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: show less	Web App Attack
🇫🇷 masterguru	2026-06-02 02:51:56 (2 days ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-196)	Hacking
🇩🇪 stinpriza	2026-06-02 02:38:15 (2 days ago)	Web App Attack	Web App Attack
🇪🇸 masterguru	2026-06-02 02:36:50 (2 days ago)	wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (5001900-122)	Web App Attack
🇧🇷 Francisco Carlos	2026-06-02 02:10:13 (2 days ago)	Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, ... show more Honeypot captured 1 automated attack/scan requests (JR Save Tech). Types: credential, shell-upload, wordpress. Sample: GET /wp-login.php show less	Hacking Bad Web Bot Web App Attack
🇺🇸 interbiznw.com	2026-06-02 01:56:32 (2 days ago)	sql-malicious-activity	Hacking Brute-Force Exploited Host Web App Attack
🇩🇪 Blexyel	2026-06-02 01:47:21 (2 days ago)	138.197.74.116 - - [02/Jun/2026:03:47:21 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5. ... show more 138.197.74.116 - - [02/Jun/2026:03:47:21 +0200] "GET /wp-login.php HTTP/1.1" 301 169 "-" "Mozilla/5.0" "136.243.2.38" ... show less	Brute-Force Web App Attack
Anonymous	2026-06-02 01:43:42 (2 days ago)	138.197.74.116 - - [02/Jun/2026:01:43:42 +0000] "GET /wp-login.php HTTP/1.1" 404 2957 "-" "Mozilla/5 ... show more 138.197.74.116 - - [02/Jun/2026:01:43:42 +0000] "GET /wp-login.php HTTP/1.1" 404 2957 "-" "Mozilla/5.0" ... show less	Bad Web Bot Web App Attack
🇩🇪 EGP Abuse Dept	2026-06-02 01:34:22 (2 days ago)	Scanning for web/db/file exploits on security-seals.de	SQL Injection Bad Web Bot Web App Attack
🇷🇺 andrew.stream	2021-03-15 10:17:30 (5 years ago)	[portscan] tcp/25 [smtp] [scan/connect: 417 time(s)] *(RWIN=513,0,8192)(03151302)	DDoS Attack Port Scan
🇸🇮 dsmidge	2021-03-14 14:24:03 (5 years ago)	Mar 14 19:24:01 server postfix/smtpd[2952399]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 5 ... show more Mar 14 19:24:01 server postfix/smtpd[2952399]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> Mar 14 19:24:02 server postfix/smtpd[2952399]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> Mar 14 19:24:02 server postfix/smtpd[2952399]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> ... show less	Email Spam
🇸🇮 dsmidge	2021-03-14 14:03:52 (5 years ago)	Mar 14 19:03:50 server postfix/smtpd[2950700]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 5 ... show more Mar 14 19:03:50 server postfix/smtpd[2950700]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> Mar 14 19:03:51 server postfix/smtpd[2950700]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> Mar 14 19:03:51 server postfix/smtpd[2950700]: NOQUEUE: reject: RCPT from unknown[138.197.74.116]: 554 5.7.1 Service unavailable; Client host [138.197.74.116] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<WIN-95F3PD57RDL> ... show less	Email Spam

Showing 1 to 15 of 32 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 218.21.214.187

🇹🇷 213.14.61.157

🇮🇶 212.237.122.186

🇹🇭 202.183.141.133

🇹🇳 196.184.140.55

🇫🇮 147.185.133.99

🇺🇸 47.251.68.60

🇧🇷 45.205.1.243

🇦🇷 45.162.21.242

🇳🇱 45.148.10.152

🇬🇧 213.166.84.35

🇦🇷 200.73.131.100

🇧🇷 177.8.249.29

🇺🇸 164.90.156.35

🇻🇳 103.109.187.12

🇮🇳 103.30.81.138

🇷🇺 94.102.28.45

🇪🇸 93.176.158.24

🇺🇸 66.57.151.235

🇸🇦 46.153.52.70