JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.78.104

138.197.78.104 was found in our database!

This IP was reported 97 times. Confidence of Abuse is 85%: ?

85%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.78.104

Whois 138.197.78.104

IP Abuse Reports for 138.197.78.104:

This IP address has been reported a total of 97 times from 35 distinct sources. 138.197.78.104 was first reported on September 8th 2024, and the most recent report was 18 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 el-brujo	2026-06-04 19:14:35 (18 hours ago)	06/04/2026-21:14:35.118209 138.197.78.104 Protocol: 6 ET SCAN Suspicious inbound to PostgreSQL port ... show more 06/04/2026-21:14:35.118209 138.197.78.104 Protocol: 6 ET SCAN Suspicious inbound to PostgreSQL port 5432 show less	Hacking
🇳🇱 StopAbuse	2026-06-04 19:00:15 (18 hours ago)	tcp/443 tcp/4433 tcp/9443 tcp/993 tcp/995	Port Scan
🇵🇱 Tankudoraiba	2026-06-04 16:32:40 (20 hours ago)	Unauthorized connection attempts on ports 443\|80	Port Scan Bad Web Bot
🇩🇪 eskilbrun	2026-06-03 11:04:55 (2 days ago)	2026-06-03T13:04:54.092190+02:00 linode1.eskil.net dovecot[320991]: imap-login: Disconnected: Connec ... show more 2026-06-03T13:04:54.092190+02:00 linode1.eskil.net dovecot[320991]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol (no auth attempts in 0 secs): user=<>, rip=138.197.78.104, lip=194.195.241.187, TLS handshaking: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol, session=<kia4ZVdT9oWKxU5o> 2026-06-03T13:04:54.097972+02:00 linode1.eskil.net dovecot[320991]: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00006C:SSL routines::bad key share (no auth attempts in 0 secs): user=<>, rip=138.197.78.104, lip=194.195.241.187, TLS handshaking: SSL_accept() failed: error:0A00006C:SSL routines::bad key share, session=<7z+4ZVdTJoaKxU5o> ... show less	Brute-Force
Anonymous	2026-06-03 02:25:39 (2 days ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇩🇪 eskilbrun	2026-06-03 00:00:41 (2 days ago)	2026-06-03T02:00:39.956772+02:00 linode1.eskil.net dovecot[257422]: imap-login: Disconnected: Connec ... show more 2026-06-03T02:00:39.956772+02:00 linode1.eskil.net dovecot[257422]: imap-login: Disconnected: Connection closed: read(size=599) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=138.197.78.104, lip=194.195.241.187, TLS handshaking: read(size=599) failed: Connection reset by peer, session=<wlA6Hk5T0qSKxU5o> 2026-06-03T02:00:39.972141+02:00 linode1.eskil.net dovecot[257422]: imap-login: Disconnected: Connection closed: read(size=597) failed: Connection reset by peer (no auth attempts in 0 secs): user=<>, rip=138.197.78.104, lip=194.195.241.187, TLS handshaking: read(size=597) failed: Connection reset by peer, session=<74w6Hk5TpKSKxU5o> 2026-06-03T02:00:40.007168+02:00 linode1.eskil.net dovecot[257422]: imap-login: Disconnected: Connection closed: read(size=595) failed: Connection reset by peer (no auth attempts in 1 secs): user=<>, rip=138.197.78.104, lip=194.195.241.187, TLS handshaking: read(size=595) failed: Connection reset by peer, session=<qhU7Hk5TyKSKxU5o ... show less	Brute-Force
🇩🇪 Progetto1	2026-05-23 04:16:01 (1 week ago)	Detected via HAProxyScanner at 2026-05-23 04:16:01 UTC on destination port WEB (80/443). Repeated sc ... show more Detected via HAProxyScanner at 2026-05-23 04:16:01 UTC on destination port WEB (80/443). Repeated scan / connection. show less	Port Scan Hacking Brute-Force
Anonymous	2026-05-22 08:09:21 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
Anonymous	2026-05-21 00:38:21 (2 weeks ago)	Unauthorized connection attempt	Port Scan Hacking Exploited Host
🇳🇱 StopAbuse	2026-05-19 20:20:53 (2 weeks ago)	tcp/3306 tcp/443 tcp/5432 tcp/8443 tcp/993	Port Scan
🇺🇸 LotPhantom	2026-05-17 11:51:22 (2 weeks ago)	2026-05-17T11:51:21.998366+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1 ... show more 2026-05-17T11:51:21.998366+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=138.197.78.104 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=4439 DF PROTO=TCP SPT=40142 DPT=8443 WINDOW=65535 RES=0x00 SYN URGP=0 2026-05-17T11:51:21.999329+00:00 bridginggaps kernel: [UFW BLOCK] IN=eth0 OUT= MAC=2e:bc:64:1d:2c:e1:fe:00:00:00:01:01:08:00 SRC=138.197.78.104 DST=157.230.217.55 LEN=40 TOS=0x00 PREC=0x00 TTL=58 ID=4442 DF PROTO=TCP SPT=40142 DPT=4433 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan Hacking
🇨🇿 lp	2026-05-16 13:35:41 (2 weeks ago)	anomaly: tcp_port_scan, 2111 > threshold 500, repeats 13293 times	Port Scan
🇫🇮 TrafficAnalyser	2026-05-14 10:57:39 (3 weeks ago)	Port scanning	Port Scan
🇺🇸 RAP	2026-05-14 08:17:06 (3 weeks ago)	2026-05-14 08:17:06 UTC Unauthorized activity to TCP port 8443. Web App	Port Scan Web App Attack
🇺🇸 xmission.com	2026-05-14 08:04:27 (3 weeks ago)	Blocked by UFW (TCP on 443) Source port: 40142 TTL: 49 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 443) Source port: 40142 TTL: 49 Packet length: 40 TOS: 0x08 This report (for 138.197.78.104) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack

Showing 1 to 15 of 97 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 213.209.159.226

🇧🇷 187.0.238.206

🇭🇰 182.160.1.207

🇸🇬 128.199.231.249

🇰🇷 112.216.129.27

🇮🇩 110.137.82.151

🇱🇹 85.206.68.80

🇵🇭 124.107.185.138

🇳🇱 204.76.203.219

🇬🇧 188.240.59.15

🇺🇸 172.236.106.113

🇩🇪 159.89.1.53

🇻🇳 115.76.51.112

🇨🇳 112.86.225.161

🇺🇸 107.172.204.15

🇻🇳 103.78.0.229

🇳🇱 81.19.216.71

🇮🇳 68.233.116.124

🇻🇳 14.186.146.187

🇩🇪 213.209.159.56