138.197.76.245

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
48 reports
26 reporters · latest 11 months ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
Clifton, New Jersey
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

138.197.76.245 has been reported 48 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
48 from 26 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 Altis Shield
Connection closed by 138.197.76.245 [preauth] or weird packet
Brute-Force SSH
🇬🇧 [email protected]
...
Brute-Force SSH
🇳🇱 homeshowdomain.nl
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-11-29.
Hacking Web App Attack SSH
🇬🇧 openstrike.co.uk
5 attacks on VC URLs: GET /.git/config HTTP/1.1
Hacking
🇫🇷 masterguru
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking Web App Attack
🇩🇪 stinpriza
common Web Exploits being scanned
Web App Attack
🇫🇮 stinpriza
Web App Attack
Web App Attack
🇮🇹 Progetto1
Website Scanning / Scraping
Bad Web Bot Exploited Host Web App Attack
🇬🇧 openstrike.co.uk
10 attacks on VC URLs: GET /.git/config HTTP/1.1
Hacking
🇬🇧 [email protected]
Web App Attack
Anonymous
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇩🇪 DocNetzwerk
(mod_security) mod_security triggered on hostname [redacted] 138.197.76.245 (US/United States/-)
SQL Injection
🇮🇩 Burayot
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 138.197.76.245 (US/United States/-): 1 in the last 3600 secs
Web App Attack
🇺🇸 TPI-Abuse
Brute-Force Bad Web Bot Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.174.2.239
🇹🇷 188.3.53.168
🇺🇦 185.17.124.169
🇺🇸 172.252.164.83
🇺🇸 172.252.109.237
🇺🇸 172.121.123.205
🇭🇰 168.76.20.229
🇨🇴 138.84.41.59
🇮🇳 122.180.242.27
🇨🇳 117.72.181.2
🇮🇳 103.174.103.177
🇺🇸 91.230.168.45
🇰🇿 81.88.148.23
🇳🇱 77.239.124.67
🇺🇸 69.124.234.82
🇺🇸 45.145.131.115
🇷🇺 31.173.12.29
🇪🇨 201.182.241.190
🇧🇷 177.70.145.92
🇺🇸 172.252.218.172
feedback