174.138.52.91
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- DigitalOcean, LLC
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS14061
- Domain Name
- digitalocean.com
- Country
- 🇺🇸 United States of America
- City
- Clifton, New Jersey
Abuse Reports
Total reports
58 from
28 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| Anonymous |
DNS AXFR Attempt
|
DNS Compromise | |
| 🇺🇸 MPL |
tcp/5555
|
Port Scan | |
| 🇺🇸 cybsecaoccol |
multiple malicious connection attempts on tcp port 445 - dr
|
DDoS Attack Port Scan Hacking Brute-Force | |
| Anonymous |
denied traffic to a honeypot network. destination port 445.
|
Port Scan Hacking | |
| 🇩🇪 Admins@FBN |
FW-PortScan: Traffic Blocked srcport=61000 dstport=8883
|
Port Scan | |
| 🇫🇷 IRISIO |
scans/SQL injection/spam posts : 241 queries
|
Web App Attack SQL Injection | |
| Anonymous |
Attempted access to sensitive endpoint (/.env.prod) detected. Automated scan or unauthorized probing.
|
Web App Attack | |
| 🇩🇪 grassau.com |
*Port Scan* detected from 174.138.52.91 (US/United States/New Jersey/Clifton/-).
|
Port Scan | |
| 🇫🇷 LRob |
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
|
Web App Attack | |
| 🇮🇳 Genhost |
SCANNING OF PHP SHELL FILES
|
Brute-Force SSH | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇫🇷 IRISIO |
scans/SQL injection/spam posts : 121 queries
|
Web App Attack SQL Injection | |
| 🇳🇱 ParaBug |
174.138.52.91 - - [05/May/2026:10:40:39 +0200] "GET /.s3cfg HTTP/1.1" 301 500 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/131.0.0.0 Safari/537.36"
...
|
Phishing Brute-Force Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack | |
| 🇺🇸 TPI-Abuse |
|
Brute-Force Bad Web Bot Web App Attack |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown