138.197.157.0
Classification: Malicious
138.197.157.0 is a malicious IP address. Reported by 3 threat sources, last seen 2026-09-04. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-20 02:17:33 | 2026-09-04 09:10:39 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-20 02:17:31 | 2026-09-04 09:10:37 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2024-06-09 11:44:10 | 2026-09-02 20:02:24 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-25 18:36:47 | 2026-08-31 04:25:07 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-25 17:00:19 | 2026-08-31 02:23:58 | anomalous-activity attacker malicious-activity reconnaissance | |
| Malicious Host | AbuseIPDB | 2026-08-26 00:49:12 | 2026-08-29 07:59:27 | attacker compromised malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-25 18:39:54 | 2026-08-29 07:59:27 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-28 13:33:22 | 2026-08-28 13:33:22 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-26 01:05:44 | 2026-08-26 09:11:23 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-08-26 00:49:12 | 2026-08-26 01:05:44 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2025-08-07 19:13:06 | 2026-05-01 00:03:55 | anomalous-activity |
Whois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2016-01-26 00:00:00
- AS CIDR
- 138.197.144.0/20
- CIDR
- 138.197.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Toronto
- State
- NY
- Postal code
- M4S
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected]
- First indexed
- 2024-06-09 11:44:10
- Last updated
- 2026-09-04 09:10:42
Malicious IPs in the same CIDR
138.197.148.150 138.197.147.248 138.197.155.203 138.197.154.118 138.197.146.59 138.197.155.72 138.197.158.200 138.197.152.229 138.197.154.9 138.197.152.223 138.197.153.44 138.197.144.34 138.197.149.131 138.197.152.1 138.197.147.6 138.197.155.154 138.197.157.0 138.197.157.130 138.197.155.246 138.197.153.228 138.197.152.130 138.197.149.29 138.197.148.39 138.197.154.149 138.197.151.117