138.197.146.59

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
255 reports
113 reporters ยท latest 2 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Hostname(s)
tor1-0.neon.do.prod.binaryedge.ninja
Domain Name
digitalocean.com
Country
๐Ÿ‡จ๐Ÿ‡ฆ Canada
City
Toronto, Ontario
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
255 from 113 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations ๐Ÿ‡บ๐Ÿ‡ธ United States of America 54 ๐Ÿ‡ฉ๐Ÿ‡ช Germany 26 ๐Ÿ‡ซ๐Ÿ‡ท France 8
Most common categories Port Scan 91 Brute-Force 19 Hacking 17 Web App Attack 16 Email Spam 11
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
๐Ÿ‡ฉ๐Ÿ‡ช Mr-Money
scenario: crowdsecurity/fortinet-cve-2018-13379 - events: 1
Web App Attack Hacking
๐Ÿ‡ฉ๐Ÿ‡ช larse99
Detected Scanning / Hacking activity
Port Scan Hacking
๐Ÿ‡ต๐Ÿ‡ฑ Kolobrzeg
Repeated protocol probing of VNC relay service port (unknown commands, silent or malformed connections), blocked after repeated attempts. Last seen 2026-10-31 20:39 UTC. Automated detection. AS14061 DigitalOcean, LLC.
Port Scan
๐Ÿ‡ณ๐Ÿ‡ฑ Selckie
fail2ban: NGINX unusual impact
Web App Attack
Anonymous
Web App Attack
๐Ÿ‡ซ๐Ÿ‡ท Kejult
Honeypot Finding: repeated TCP service probing on TCP/443 (HTTPS); 3 application-level events across 3 source port(s). Sensor(s): H0neytr4p.
Port Scan
๐Ÿ‡ฉ๐Ÿ‡ช Admins@FBN
FW-PortScan: Traffic Blocked srcport=48247 dstport=3389
Port Scan
Anonymous
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ OceanTreasure
tcp/6000; Unauthorized scan for remote desktop access via X11 @ 2026-10-15T17:29:54Z
Port Scan
๐Ÿ‡ง๐Ÿ‡ท ICS Labs
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-13 UTC.
Hacking
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 9090) Source port: 52430 TTL: 243 Packet length: 44 TOS: 0x00 This report (for 138.197.146.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ซ๐Ÿ‡ฎ Maxetow
Scan port: 8123 | 1 total | size=44B
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ sefinek.net
Blocked by UFW on NY01 [8083/tcp] | SPT: 52733 | TTL: 245 | LEN: 44 | TOS: 0x00 โ€ข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡บ๐Ÿ‡ธ xmission.com
Blocked by UFW (TCP on 8060) Source port: 49615 TTL: 244 Packet length: 44 TOS: 0x00 This report (for 138.197.146.59) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
๐Ÿ‡ช๐Ÿ‡ธ jiossal
IP_Trapped_MikroTik_Firewall_HoneyPot
Brute-Force

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

๐Ÿ‡ถ๐Ÿ‡ฆ 213.130.118.22
๐Ÿ‡ซ๐Ÿ‡ท 191.44.98.44
๐Ÿ‡จ๐Ÿ‡ด 190.253.73.53
๐Ÿ‡บ๐Ÿ‡ธ 185.226.198.27
๐Ÿ‡น๐Ÿ‡ผ 110.25.117.219
๐Ÿ‡ฎ๐Ÿ‡ฉ 103.168.146.172
๐Ÿ‡ต๐Ÿ‡ฑ 94.26.68.250
๐Ÿ‡บ๐Ÿ‡ธ 70.167.235.60
๐Ÿ‡ท๐Ÿ‡บ 46.72.58.7
๐Ÿ‡ฌ๐Ÿ‡ง 2.57.17.164
๐Ÿ‡ฎ๐Ÿ‡น 2a03:2880:f008:1:face:b00c:0:1
๐Ÿ‡ท๐Ÿ‡บ 178.49.109.109
๐Ÿ‡ฉ๐Ÿ‡ช 176.119.150.242
๐Ÿ‡ป๐Ÿ‡ณ 165.154.187.159
๐Ÿ‡จ๐Ÿ‡ณ 121.224.5.228
๐Ÿ‡ซ๐Ÿ‡ท 91.196.152.191
๐Ÿ‡ซ๐Ÿ‡ท 85.217.140.1
๐Ÿ‡ธ๐Ÿ‡ช 80.244.196.57
๐Ÿ‡ฎ๐Ÿ‡น 80.116.222.68
๐Ÿ‡ณ๐Ÿ‡ฑ 77.91.71.90
feedback