JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

128.199.48.138

Activity Trending Down

Abuse Confidence Score

1% Caution

161 reports

84 reporters · latest 3 weeks ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇳🇱 Netherlands
City: Amsterdam, North Holland

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

161 from 84 distinct reporters

First reported

January 13th 2025

Most recent report

3 weeks ago

Last 60 days

Top reporter locations 🇨🇦 Canada 2

Most common categories SSH 2 Brute-Force 2

Old reports The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-10-21 16:36:05 UTC · (3 weeks ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-10-14 13:42:29 UTC · (1 month ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇨🇦 QSC-Sentinel	2026-05-20 17:47:35 UTC · (5 months ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-10-31 20:09:40 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-30 20:09:39 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇳🇱 ATV	2025-10-30 03:05:59 UTC · (1 year ago)	Unsolicited connection attempts to port 22	Hacking SSH
🇫🇮 tjs	2025-10-29 22:32:00 UTC · (1 year ago)	ssh brute-force	Brute-Force SSH
🇮🇸 www.fransveldman.world	2025-10-29 20:55:37 UTC · (1 year ago)	Oct 29 20:55:04 ice2 sshd[303042]: Invalid user dspace from 128.199.48.138 port 45902 Oct 29 20:55:36 ice2 sshd[303057]: Invalid user dspace from 128.199.48.138 port 60010 ...	Brute-Force SSH
🇩🇰 ingereck	2025-10-29 20:51:39 UTC · (1 year ago)	Oct 29 20:49:28 transform-schauspielschule sshd[95129]: Invalid user docker from 128.199.48.138 port 36098 Oct 29 20:50:00 transform-schauspielschule sshd[95131]: Invalid user docker from 128.199.48.138 port 35968 Oct 29 20:50:34 transform-schauspiel ... show more Oct 29 20:49:28 transform-schauspielschule sshd[95129]: Invalid user docker from 128.199.48.138 port 36098 Oct 29 20:50:00 transform-schauspielschule sshd[95131]: Invalid user docker from 128.199.48.138 port 35968 Oct 29 20:50:34 transform-schauspielschule sshd[95134]: Invalid user docker from 128.199.48.138 port 42004 Oct 29 20:51:06 transform-schauspielschule sshd[95136]: Invalid user docker from 128.199.48.138 port 48936 Oct 29 20:51:38 transform-schauspielschule sshd[95138]: Invalid user docker from 128.199.48.138 port 53390 ... show less	Brute-Force SSH
🇩🇪 david1117	2025-10-29 20:51:26 UTC · (1 year ago)	Oct 29 20:49:13 web sshd[459616]: Invalid user docker from 128.199.48.138 port 56932 Oct 29 20:49:45 web sshd[459780]: Invalid user docker from 128.199.48.138 port 46070 Oct 29 20:50:19 web sshd[459911]: Invalid user docker from 128.199.48.138 port 4 ... show more Oct 29 20:49:13 web sshd[459616]: Invalid user docker from 128.199.48.138 port 56932 Oct 29 20:49:45 web sshd[459780]: Invalid user docker from 128.199.48.138 port 46070 Oct 29 20:50:19 web sshd[459911]: Invalid user docker from 128.199.48.138 port 47902 Oct 29 20:50:51 web sshd[459992]: Invalid user docker from 128.199.48.138 port 41816 Oct 29 20:51:24 web sshd[460072]: Invalid user docker from 128.199.48.138 port 44114 ... show less	Brute-Force SSH
🇩🇪 itbyhf	2025-10-29 20:51:24 UTC · (1 year ago)	Oct 29 20:49:12 rltx-geofeed sshd[432158]: Invalid user docker from 128.199.48.138 port 50554 Oct 29 20:49:45 rltx-geofeed sshd[432168]: Invalid user docker from 128.199.48.138 port 42216 Oct 29 20:50:18 rltx-geofeed sshd[432172]: Invalid user docker ... show more Oct 29 20:49:12 rltx-geofeed sshd[432158]: Invalid user docker from 128.199.48.138 port 50554 Oct 29 20:49:45 rltx-geofeed sshd[432168]: Invalid user docker from 128.199.48.138 port 42216 Oct 29 20:50:18 rltx-geofeed sshd[432172]: Invalid user docker from 128.199.48.138 port 60642 Oct 29 20:50:50 rltx-geofeed sshd[432181]: Invalid user docker from 128.199.48.138 port 38338 Oct 29 20:51:23 rltx-geofeed sshd[432185]: Invalid user docker from 128.199.48.138 port 34624 ... show less	Brute-Force SSH
🇳🇱 GlobalArt, Inc	2025-10-29 20:49:26 UTC · (1 year ago)	2025-10-29T22:48:22.199008+02:00 proxy-nl1 sshd[2604331]: Failed password for invalid user docker from 128.199.48.138 port 55188 ssh2 2025-10-29T22:48:52.833201+02:00 proxy-nl1 sshd[2604356]: Invalid user docker from 128.199.48.138 port 49774 2025-10 ... show more 2025-10-29T22:48:22.199008+02:00 proxy-nl1 sshd[2604331]: Failed password for invalid user docker from 128.199.48.138 port 55188 ssh2 2025-10-29T22:48:52.833201+02:00 proxy-nl1 sshd[2604356]: Invalid user docker from 128.199.48.138 port 49774 2025-10-29T22:48:52.842918+02:00 proxy-nl1 sshd[2604356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.48.138 2025-10-29T22:48:54.619706+02:00 proxy-nl1 sshd[2604356]: Failed password for invalid user docker from 128.199.48.138 port 49774 ssh2 2025-10-29T22:49:25.918912+02:00 proxy-nl1 sshd[2604421]: Invalid user docker from 128.199.48.138 port 55298 show less	Brute-Force SSH
🇩🇪 hserv	2025-10-29 20:48:47 UTC · (1 year ago)	2025-10-29T21:47:41.667455chnode7 sshd[824252]: Failed password for invalid user docker from 128.199.48.138 port 42050 ssh2 2025-10-29T21:48:13.080450chnode7 sshd[828741]: Invalid user docker from 128.199.48.138 port 54644 2025-10-29T21:48:13.310214c ... show more 2025-10-29T21:47:41.667455chnode7 sshd[824252]: Failed password for invalid user docker from 128.199.48.138 port 42050 ssh2 2025-10-29T21:48:13.080450chnode7 sshd[828741]: Invalid user docker from 128.199.48.138 port 54644 2025-10-29T21:48:13.310214chnode7 sshd[828741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.48.138 2025-10-29T21:48:15.731477chnode7 sshd[828741]: Failed password for invalid user docker from 128.199.48.138 port 54644 ssh2 2025-10-29T21:48:46.472045chnode7 sshd[832330]: Invalid user docker from 128.199.48.138 port 60360 ... show less	Brute-Force SSH
🇵🇱 Gornik Zabrze	2025-10-29 20:44:06 UTC · (1 year ago)	Oct 29 21:42:58 gzdatacloud01 sshd[624078]: Invalid user developer from 128.199.48.138 port 49194 Oct 29 21:42:58 gzdatacloud01 sshd[624078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.48.138 Oct ... show more Oct 29 21:42:58 gzdatacloud01 sshd[624078]: Invalid user developer from 128.199.48.138 port 49194 Oct 29 21:42:58 gzdatacloud01 sshd[624078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.48.138 Oct 29 21:42:58 gzdatacloud01 sshd[624078]: Invalid user developer from 128.199.48.138 port 49194 Oct 29 21:43:00 gzdatacloud01 sshd[624078]: Failed password for invalid user developer from 128.199.48.138 port 49194 ssh2 Oct 29 21:44:05 gzdatacloud01 sshd[624361]: Invalid user developer from 128.199.48.138 port 33006 ... show less	FTP Brute-Force Port Scan Hacking Brute-Force Bad Web Bot Web App Attack SSH
🇫🇮 hieronymousch	2025-10-29 20:28:50 UTC · (1 year ago)	Oct 29 21:28:17 franssen sshd[3658790]: Failed password for invalid user debian from 128.199.48.138 port 58622 ssh2 Oct 29 21:28:47 franssen sshd[3658804]: Connection from 128.199.48.138 port 55088 on 135.181.83.113 port 22 rdomain "" Oct 29 21:28:47 ... show more Oct 29 21:28:17 franssen sshd[3658790]: Failed password for invalid user debian from 128.199.48.138 port 58622 ssh2 Oct 29 21:28:47 franssen sshd[3658804]: Connection from 128.199.48.138 port 55088 on 135.181.83.113 port 22 rdomain "" Oct 29 21:28:47 franssen sshd[3658804]: Invalid user debian from 128.199.48.138 port 55088 Oct 29 21:28:47 franssen sshd[3658804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.48.138 Oct 29 21:28:50 franssen sshd[3658804]: Failed password for invalid user debian from 128.199.48.138 port 55088 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 222.186.68.153

🇧🇷 191.210.133.134

🇳🇱 159.223.5.51

🇨🇳 121.46.244.21

🇺🇦 46.33.33.72

🇳🇱 34.1.230.122

🇹🇷 2a03:2880:f30f:5:face:b00c:0:79f4

🇳🇱 195.178.110.30

🇮🇳 182.76.36.62

🇺🇸 172.59.215.46

🇩🇪 159.89.25.169

🇸🇬 151.192.108.144

🇺🇸 147.185.132.12

🇧🇩 103.115.116.181

🇵🇹 81.193.216.17

🇵🇱 31.130.105.219

🇩🇪 18.196.161.47

🇻🇳 14.186.120.13

🇺🇸 184.16.85.247

🇮🇳 165.101.134.122