138.197.174.194
Classification: Malicious
138.197.174.194 is a malicious IP address. Reported by 5 threat sources, last seen 2026-08-24. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- VPN node — Provides anonymization that can hide an attacker.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | AbuseIPDB | 2026-08-24 01:14:37 | 2026-08-24 01:14:37 | attacker malicious-activity | |
| Known Attacker | AbuseIPDB | 2026-08-24 01:14:37 | 2026-08-24 01:14:37 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-07-13 17:29:44 | 2026-08-24 01:14:37 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-07-03 18:49:39 | 2026-08-24 01:14:37 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-07-03 07:33:03 | 2026-08-24 01:14:37 | anomalous-activity attacker malicious-activity reconnaissance | |
| HTTP Scrapper | AbuseIPDB | 2026-07-12 06:06:59 | 2026-08-14 10:38:06 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-07-13 08:15:42 | 2026-08-14 00:10:37 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-03-26 02:17:53 | 2026-08-12 09:10:50 | attacker malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-03-26 02:17:51 | 2026-08-12 09:10:48 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-07-03 18:49:39 | 2026-08-10 10:58:17 | attacker compromised malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-08-08 05:59:06 | 2026-08-08 05:59:06 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2024-05-25 11:37:13 | 2026-08-06 20:02:11 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-07-22 20:53:45 | 2026-07-22 20:53:45 | attacker malicious-activity | |
| SQL Injection | AbuseIPDB | 2026-07-14 13:23:00 | 2026-07-14 13:23:00 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-07-14 01:18:38 | 2026-07-14 01:20:59 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-07-13 11:46:39 | 2026-07-13 11:46:39 | attacker malicious-activity | |
| VPN | IPWhois.io | 2026-07-12 13:35:26 | 2026-07-12 13:35:26 | anonymization vpn | |
| Suspicious Host | AbuseIPDB | 2026-03-24 09:05:20 | 2026-03-25 23:08:13 | anomalous-activity | |
| Malicious Host | HoneyDB | 2026-03-24 00:00:00 | 2026-03-24 00:00:00 | malicious-activity |
Whois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2016-01-26 00:00:00
- AS CIDR
- 138.197.160.0/20
- CIDR
- 138.197.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- Toronto
- State
- NY
- Postal code
- M4S
- Country
- CA — Canada 🇨🇦
- Contact email
- [email protected], [email protected]
- First indexed
- 2024-05-25 11:37:13
- Last updated
- 2026-08-26 13:25:05
Malicious IPs in the same CIDR
138.197.165.171 138.197.174.172 138.197.173.94 138.197.173.249 138.197.175.165 138.197.165.12 138.197.169.42 138.197.167.14 138.197.169.166 138.197.174.121 138.197.171.237 138.197.160.183 138.197.165.254 138.197.161.145 138.197.166.134 138.197.162.152 138.197.166.178 138.197.171.178 138.197.165.63 138.197.171.227 138.197.174.62 138.197.166.108 138.197.164.127 138.197.174.194 138.197.169.248