JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.79.227

138.197.79.227 was found in our database!

This IP was reported 55 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.79.227

Whois 138.197.79.227

IP Abuse Reports for 138.197.79.227:

This IP address has been reported a total of 55 times from 37 distinct sources. 138.197.79.227 was first reported on September 17th 2023, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 EnthecSolutions	2026-07-23 22:01:32 (1 day ago)	Detected by Enthec Solutions. \| Attempts: 48 in 24h \| Target port: 5985	Port Scan Hacking
🇮🇳 evicky2002	2026-07-23 06:00:00 (2 days ago)	Confirmed malicious by STILWaters CTI platform (score=100, sources=1)	Hacking Brute-Force SSH
🇩🇪 reznekcs	2026-07-23 05:01:05 (2 days ago)	Blocked by UFW firewall	Brute-Force
🇵🇱 sefinek.net	2026-07-22 22:31:22 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 53568 ... show more Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 53568 [2], 4679 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 gbzret4d	2026-07-22 22:29:57 (2 days ago)	Honeypot [uk-production01]: Incoming HTTP traffic on port 81	Hacking Bad Web Bot
🇺🇸 drewf.ink	2026-07-22 22:07:04 (2 days ago)	[22:07] Port scanning. Port(s) scanned: UDP/161, TCP/444, TCP/623, UDP/623, UDP/3702, TCP/5000, UDP/ ... show more [22:07] Port scanning. Port(s) scanned: UDP/161, TCP/444, TCP/623, UDP/623, UDP/3702, TCP/5000, UDP/5353, TCP/5985, TCP/5986, TCP/8888 show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-22 22:03:59 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 53568 ... show more Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 53568 [2], 4680 [2] TCP show less	Port Scan
🇩🇪 EnthecSolutions	2026-07-22 22:01:06 (2 days ago)	Detected by Enthec Solutions. \| Attempts: 96 in 24h \| Target port: 5985	Port Scan Hacking
🇫🇷 EvoX	2026-07-22 21:56:18 (2 days ago)	🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 1 ... show more 🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 5989 [2], 4679 [2] TCP show less	Port Scan
🇫🇷 EvoX	2026-07-22 16:38:51 (2 days ago)	🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], ... show more 🛡️ Honeypot [bsts-tpot-sensor]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4680 [2], 5989 [2] TCP show less	Port Scan
🇵🇱 sefinek.net	2026-07-22 16:09:36 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4679 [ ... show more Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4679 [2], 53568 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇩🇪 dispaisyenterprises	2026-07-22 16:04:46 (2 days ago)	Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 169 ... show more Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4679 [2], 53568 [2] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 drewf.ink	2026-07-22 15:51:26 (2 days ago)	[15:51] Port scanning. Port(s) scanned: UDP/161, TCP/444, TCP/623, UDP/623, UDP/3702, TCP/5000, UDP/ ... show more [15:51] Port scanning. Port(s) scanned: UDP/161, TCP/444, TCP/623, UDP/623, UDP/3702, TCP/5000, UDP/5353, TCP/5985, TCP/5986, TCP/8888 show less	Port Scan
🇦🇺 LiftUp Hosting	2026-07-22 15:45:57 (2 days ago)	Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4679 [ ... show more Honeypot hit: Empty payload (likely service probe); 5986 [3], 5985 [3], 16993 [3], 16992 [3], 4679 [2], 53568 [2] TCP show less	Port Scan
🇨🇦 dpinse	2026-07-22 15:45:08 (2 days ago)	Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0 ... show more Honeypot [honeypot-ca-sensor1]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-Go show less	SSH Port Scan

Showing 1 to 15 of 55 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.228

🇳🇱 176.65.148.44

🇳🇱 45.148.10.152

🇦🇷 200.63.168.90

🇵🇱 176.53.159.197

🇺🇸 167.99.228.183

🇺🇸 162.216.149.9

🇨🇳 120.48.13.223

🇰🇷 118.37.214.187

🇷🇺 91.245.150.131

🇺🇸 91.198.95.88

🇺🇸 50.62.22.47

🇵🇱 45.141.233.69

🇮🇩 43.157.200.91

🇮🇳 20.204.14.100

🇭🇰 2404:6800:4005:c02::128

🇺🇸 213.169.231.161

🇵🇱 176.53.159.198

🇺🇸 162.216.150.116

🇺🇸 162.216.149.105