138.197.152.1

Classification: Malicious

138.197.152.1 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-05. Network: AS14061 DigitalOcean, LLC.

Current activity

  • Known attacker — Seen launching attacks over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SSH Attacker Blocklist.net.ua 2026-02-10 13:30:23 2026-09-05 16:52:12 attacker malicious-activity
Empty reason Blocklist.net.ua 2026-09-04 16:55:21 2026-09-04 16:55:21 attacker malicious-activity
Malicious Host AbuseIPDB 2026-01-29 00:14:43 2026-03-01 21:52:52 malicious-activity
Bruteforce login attacker Blocklist.de 2026-02-08 05:01:37 2026-02-12 05:01:33 malicious-activity
HTTP Attacker Blocklist.de 2026-02-04 03:02:08 2026-02-12 03:00:58 malicious-activity
SSH Attacker Blocklist.de 2026-01-28 11:06:07 2026-02-10 10:03:10 malicious-activity
Malicious Host HoneyDB 2026-01-29 00:00:00 2026-02-10 00:00:00 malicious-activity
Anonymizer Maltiverse 2020-04-18 03:26:01 2020-04-18 03:26:01

Tags

anonymizer ssh bruteforce bot apache ddos rfi attacker login joomla wordpress abuse

Whois information

AS name
AS14061 DigitalOcean, LLC
AS registry
arin
AS date
2016-01-26 00:00:00
AS CIDR
138.197.144.0/20
CIDR
138.197.0.0/16
Registrant
DigitalOcean, LLC
Address
101 Ave of the Americas 10th Floor
City
Toronto
State
NY
Postal code
M4S
Country
CA — Canada 🇨🇦
Contact email
[email protected], [email protected]
First indexed
2020-04-18 03:26:01
Last updated
2026-09-05 16:52:12

Malicious IPs in the same CIDR

138.197.148.150 138.197.147.248 138.197.155.203 138.197.154.118 138.197.146.59 138.197.155.72 138.197.158.200 138.197.152.229 138.197.154.9 138.197.152.223 138.197.153.44 138.197.144.34 138.197.149.131 138.197.152.1 138.197.147.6 138.197.155.154 138.197.157.0 138.197.157.130 138.197.155.246 138.197.153.228 138.197.152.130 138.197.149.29 138.197.148.39 138.197.154.149 138.197.151.117