JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.91.230

138.197.91.230 was found in our database!

This IP was reported 56 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.91.230

Whois 138.197.91.230

IP Abuse Reports for 138.197.91.230:

This IP address has been reported a total of 56 times from 41 distinct sources. 138.197.91.230 was first reported on February 13th 2026, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 donarev419	2026-03-05 00:25:20 (3 months ago)	Connection to port 3389 with data transfer. Data preview:	Port Scan Hacking
🇹🇷 rtbh.com.tr	2026-02-18 20:11:38 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇸🇪 EmK530	2026-02-18 11:56:18 (3 months ago)	URL flagged by RegEx: /wp-login.php	Web App Attack
🇫🇮 stinpriza	2026-02-18 10:19:52 (3 months ago)	Web App Attack	Web App Attack
🇺🇸 dtorrer	2026-02-18 09:07:56 (3 months ago)	Brute-force general attack.	Brute-Force
🇧🇪 taivas.nl	2026-02-18 05:32:38 (3 months ago)	Many_bad_calls	Web App Attack
🇺🇸 juguemosalacarioca.com	2026-02-18 05:05:17 (3 months ago)	Multiple HTTP calls attempting to GET resources using common API calls or formats on port 8080	Web App Attack
🇬🇧 yvoictra	2026-02-18 04:31:30 (3 months ago)	138.197.91.230 - - [18/Feb/2026:05:31:21 +0100] "POST /wp-login.php HTTP/1.1" 200 3774 "https://enis ... show more 138.197.91.230 - - [18/Feb/2026:05:31:21 +0100] "POST /wp-login.php HTTP/1.1" 200 3774 "https://enisosbajas.com/wp-login.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 138.197.91.230 - - [18/Feb/2026:05:31:24 +0100] "POST /wp-login.php HTTP/1.1" 200 3774 "https://enisosbajas.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 138.197.91.230 - - [18/Feb/2026:05:31:27 +0100] "POST /wp-login.php HTTP/1.1" 200 3771 "https://enisosbajas.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 138.197.91.230 - - [18/Feb/2026:05:31:29 +0100] "POST /wp-login.php HTTP/1.1" 200 3774 "https://enisosbajas.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" ... show less	Brute-Force Web App Attack
🇧🇪 taivas.nl	2026-02-18 03:32:10 (3 months ago)	Bad_requests	Bad Web Bot
🇧🇾 lns.bz	2026-02-18 02:52:23 (3 months ago)	Too many 404 requests [BY]	Web App Attack
🇫🇷 SpaceHost-Server	2026-02-17 23:27:14 (3 months ago)		Brute-Force Web App Attack
🇩🇪 itsolon	2026-02-16 12:23:21 (3 months ago)	138.197.91.230 - - [16/Feb/2026:13:23:13 +0100] "POST /wp-login.php HTTP/1.1" 200 14458 "https://www ... show more 138.197.91.230 - - [16/Feb/2026:13:23:13 +0100] "POST /wp-login.php HTTP/1.1" 200 14458 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:118.0) Gecko/20100101 Firefox/118.0" 138.197.91.230 - - [16/Feb/2026:13:23:17 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zypadhera.info%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 12871 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" 138.197.91.230 - - [16/Feb/2026:13:23:18 +0100] "POST /wp-login.php HTTP/1.1" 200 11008 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 138.197.91.230 - - [16/Feb/2026:13:23:20 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zypadhera.info%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 12871 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Macintos ... show less	Web App Attack SSH
🇩🇪 itsolon	2026-02-16 11:23:10 (3 months ago)	138.197.91.230 - - [16/Feb/2026:12:22:58 +0100] "GET /wp-login.php HTTP/1.1" 200 13893 "https://www. ... show more 138.197.91.230 - - [16/Feb/2026:12:22:58 +0100] "GET /wp-login.php HTTP/1.1" 200 13893 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:118.0) Gecko/20100101 Firefox/118.0" 138.197.91.230 - - [16/Feb/2026:12:23:07 +0100] "POST /wp-login.php HTTP/1.1" 200 11134 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15" 138.197.91.230 - - [16/Feb/2026:12:23:09 +0100] "GET /wp-login.php?redirect_to=https%3A%2F%2Fwww.zypadhera.info%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 12871 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 138.197.91.230 - - [16/Feb/2026:12:23:09 +0100] "POST /wp-login.php HTTP/1.1" 200 11127 "https://www.zypadhera.info/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17. ... show less	Web App Attack SSH
🇺🇸 Jason Howell	2026-02-16 09:14:21 (3 months ago)	138.197.91.230 - - [16/Feb/2026:03:14:14 -0600] "GET /wp-login.php HTTP/1.1" 200 4627 "-" "Mozilla/5 ... show more 138.197.91.230 - - [16/Feb/2026:03:14:14 -0600] "GET /wp-login.php HTTP/1.1" 200 4627 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 138.197.91.230 - - [16/Feb/2026:03:14:20 -0600] "POST /wp-login.php HTTP/1.1" 200 2321 "https://qcstuff.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6_1; rv:121.0) Gecko/20100101 Firefox/121.0" 138.197.91.230 - - [16/Feb/2026:03:14:20 -0600] "GET /wp-admin/index.php HTTP/1.1" 302 438 "https://qcstuff.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 138.197.91.230 - - [16/Feb/2026:03:14:20 -0600] "GET /wp-login.php?redirect_to=https%3A%2F%2Fqcstuff.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 200 4133 "https://qcstuff.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" 138.197.91.230 - - [16/Feb/2026:03:14:20 -0600] "POST ... show less	Web App Attack
🇺🇸 mind5t0rm	2026-02-16 08:31:14 (3 months ago)	(WPLOGIN) WP Login Attack 138.197.91.230 (US/United States/-): 3 in the last 3600 secs; Ports: ; Di ... show more (WPLOGIN) WP Login Attack 138.197.91.230 (US/United States/-): 3 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_TRIGGER; Logs: 138.197.91.230 - - [16/Feb/2026:15:30:59 +0700] "GET /wp-login.php HTTP/2.0" 200 2455 "https://www.google.com/search?q=wordpress" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:120.0) Gecko/20100101 Firefox/120.0" 138.197.91.230 - - [16/Feb/2026:15:31:03 +0700] "GET /wp-login.php HTTP/2.0" 200 2455 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.0.0 Safari/537.36" 138.197.91.230 - - [16/Feb/2026:15:31:10 +0700] "GET /wp-login.php?redirect_to=https%3A%2F%2Fzerowaterthailand.com%2Fwp-admin%2F&reauth=1 HTTP/2.0" 200 2460 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" show less	Port Scan

Showing 1 to 15 of 56 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 210.177.143.61

🇲🇽 187.191.48.6

🇻🇳 103.185.185.251

🇻🇳 103.75.182.132

🇮🇳 66.116.204.122

🇬🇧 45.74.0.139

🇺🇸 34.162.101.201

🇸🇬 188.239.34.167

🇵🇪 181.176.62.72

🇧🇷 170.80.41.90

🇻🇳 163.223.13.54

🇺🇸 142.248.80.174

🇭🇰 119.28.49.103

🇨🇳 118.212.121.213

🇦🇺 101.179.142.42

🇺🇸 97.107.132.90

🇧🇬 79.124.40.130

🇺🇸 71.6.241.138

🇮🇳 68.233.116.124

🇨🇳 43.143.225.178