JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.87.21

138.197.87.21 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.87.21

Whois 138.197.87.21

IP Abuse Reports for 138.197.87.21:

This IP address has been reported a total of 115 times from 63 distinct sources. 138.197.87.21 was first reported on June 26th 2026, and the most recent report was 5 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇼 tyetriiix	2026-06-27 08:24:24 (5 minutes ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:08:24:22 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:08:24:22 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇧🇷 diego	2026-06-27 08:05:19 (24 minutes ago)	[probe-168-134] 2026-06-27 07:41:26, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-06-27 07:41:26, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less	Web App Attack
🇹🇼 tyetriiix	2026-06-27 08:04:40 (24 minutes ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:08:04:36 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:08:04:36 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇹🇼 tyetriiix	2026-06-27 07:45:21 (44 minutes ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:45:18 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:45:18 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇧🇷 diego	2026-06-27 07:40:19 (49 minutes ago)	[probe-168-134] 2026-06-27 07:11:31, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-06-27 07:11:31, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less	Web App Attack
Anonymous	2026-06-27 07:25:31 (1 hour ago)	Reported by security team. Duration: 4h Events: 68	Port Scan Brute-Force
🇧🇷 vfAcceloReporter	2026-06-27 07:24:07 (1 hour ago)	138.197.87.21 - - [27/Jun/2026:04:24:06 -0300] "POST /boaform/admin/formLogin HTTP/1.1" 404 125 "htt ... show more 138.197.87.21 - - [27/Jun/2026:04:24:06 -0300] "POST /boaform/admin/formLogin HTTP/1.1" 404 125 "http://168.181.166.192:80/admin/login.asp" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:71.0) Gecko/20100101 Firefox/71.0" ... show less	Brute-Force Web App Attack Exploited Host
🇹🇼 tyetriiix	2026-06-27 07:23:58 (1 hour ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:23:54 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:23:54 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇨🇿 Prcek	2026-06-27 07:21:49 (1 hour ago)	PortScan:HOST=138.197.87.21,DPORTS=443,8080,8888	Port Scan
🇧🇷 diego	2026-06-27 07:10:19 (1 hour ago)	[probe-168-134] 2026-06-27 06:48:35, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-06-27 06:48:35, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less	Web App Attack
🇹🇼 tyetriiix	2026-06-27 07:04:47 (1 hour ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:04:46 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:07:04:46 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇧🇷 diego	2026-06-27 06:45:19 (1 hour ago)	[probe-168-134] 2026-06-27 06:17:24, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-06-27 06:17:24, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less	Web App Attack
🇹🇼 tyetriiix	2026-06-27 06:44:31 (1 hour ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:06:44:29 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:06:44:29 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇹🇼 tyetriiix	2026-06-27 06:20:10 (2 hours ago)	Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:06:20:08 +0000] "GET /cgi-bin/luci/;stok=/local ... show more Wazuh Alert Evidence: 138.197.87.21 - - [27/Jun/2026:06:20:08 +0000] "GET /cgi-bin/luci/;stok=/locale HTTP/1.1" 404 146 "-" "-" "-" Origin: "-" CORS_Header: "-" Sent_allow_origin: "-" show less	Web App Attack
🇧🇷 diego	2026-06-27 06:15:19 (2 hours ago)	[probe-168-134] 2026-06-27 05:41:57, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HT ... show more [probe-168-134] 2026-06-27 05:41:57, Client: 138.197.87.21, Protocol: 6, Unauthorized activity to HTTP: GET /cgi-bin/luci/;stok=/locale show less	Web App Attack

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇻🇳 203.113.174.15

🇨🇳 116.179.37.177

🇨🇳 116.179.37.55

🇺🇸 8.235.34.213

🇩🇪 193.174.89.19

🇨🇱 181.42.133.30

🇷🇴 141.98.83.240

🇲🇴 125.31.2.160

🇺🇸 64.62.156.192

🇰🇷 59.15.58.148

🇳🇱 203.55.131.4

🇺🇸 200.71.127.166

🇲🇾 195.86.192.66

🇺🇸 162.216.149.85

🇬🇧 86.171.151.33

🇱🇹 62.60.130.142

🇺🇸 52.4.57.91

🇱🇹 45.227.254.170

🇺🇸 34.19.127.180

🇺🇸 13.83.236.192