JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.128.62

138.197.128.62

Recent Activity

20 reports found in our database

24% ▲ ▲ ▲ Elevated

Abuse confidence score ?

ISP

DigitalOcean, LLC

Usage Type

Data Center/Web Hosting/Transit

ASN

AS14061

Domain Name

digitalocean.com

Country

🇨🇦 Canada

City

Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Top Reporter Countries (Last 60 Days)

Example preview

Report Categories (Last 60 Days)

Example preview

Reports Activity

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 138.197.128.62:

This IP address has been reported a total of 20 times from 18 distinct sources. 138.197.128.62 was first reported on December 27th 2024, and the most recent report was 4 hours ago. In the last 60 days, the top reporter locations were: Germany with 1 report; France with 1 report; United States of America with 1 report. The most common categories in these recent reports were: Brute-Force 3 times; SSH 3 times; Port Scan 2 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 m2jest1c	2026-09-12 19:49:04 (4 hours ago)	2026-09-12T15:49:03.670581 rhel-20gb-ash-1 sshd[2871536]: error: kex_exchange_identification: Connec ... show more 2026-09-12T15:49:03.670581 rhel-20gb-ash-1 sshd[2871536]: error: kex_exchange_identification: Connection closed by remote host 2026-09-12T15:49:03.670619 rhel-20gb-ash-1 sshd[2871536]: Connection closed by 138.197.128.62 port 50604 ... show less	Brute-Force SSH
🇫🇷 Danguole Rasalaite Memorial 🇱🇹	2026-09-12 11:17:52 (13 hours ago)	Danguole Rasalaite Memorial 🇱🇹 \| Unauthorized probe detected and blocked: 2026-09-12T13:17:51.135761 ... show more Danguole Rasalaite Memorial 🇱🇹 \| Unauthorized probe detected and blocked: 2026-09-12T13:17:51.135761+02:00 danguole kernel: [160000.246806] [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:66:be:85:c0:69:11:cd:17:ed:08:00 SRC=138.197.128.62 DST=169.58.236.194 LEN=40 TOS=0x00 PREC=0x00 TTL=54 ID=54321 PROTO=TCP SPT=12345 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0 show less	Port Scan Brute-Force SSH
Anonymous	2026-09-12 05:52:15 (18 hours ago)	denied SSH access attempt. destination port 22.	Port Scan Brute-Force SSH
🇳🇱 alexbfr	2026-02-21 20:28:35 (6 months ago)	Fail2Ban Report, sshd jail: banned after 5 failed attempts.	Brute-Force SSH
🇬🇧 pearbright	2026-02-21 19:15:41 (6 months ago)	2026-02-21T19:13:10.361706+00:00 srv1093252 sshd-session[3165313]: Failed password for root from 138 ... show more 2026-02-21T19:13:10.361706+00:00 srv1093252 sshd-session[3165313]: Failed password for root from 138.197.128.62 port 43254 ssh2 2026-02-21T19:14:22.364222+00:00 srv1093252 sshd-session[3165342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.128.62 user=root 2026-02-21T19:14:24.176692+00:00 srv1093252 sshd-session[3165342]: Failed password for root from 138.197.128.62 port 58702 ssh2 2026-02-21T19:15:38.237889+00:00 srv1093252 sshd-session[3165371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.128.62 user=root 2026-02-21T19:15:40.492516+00:00 srv1093252 sshd-session[3165371]: Failed password for root from 138.197.128.62 port 50872 ssh2 ... show less	Brute-Force SSH
🇨🇳 さいとうあすか	2026-02-21 19:10:19 (6 months ago)	Feb 22 03:10:16 pbs sshd[3898603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Feb 22 03:10:16 pbs sshd[3898603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.128.62 user=root Feb 22 03:10:18 pbs sshd[3898603]: Failed password for root from 138.197.128.62 port 41278 ssh2 ... show less	Brute-Force SSH
🇩🇪 KPS	2026-02-21 09:16:31 (6 months ago)	PortscanM	Port Scan
🇩🇪 iNetWorker	2026-02-21 08:00:43 (6 months ago)	firewall-block, port(s): 8888/tcp	Port Scan
🇺🇸 MPL	2025-10-29 01:51:03 (10 months ago)	tcp/8082	Port Scan
🇺🇸 MPL	2025-10-29 01:51:03 (10 months ago)	tcp/8082 (2 or more attempts)	Port Scan
🇺🇸 creations.works	2025-10-29 01:34:44 (10 months ago)	Blocked by UFW on vds [8888/tcp] Source port: 61014 TTL: 242 Packet length: 44 TOS: 0x00 This repor ... show more Blocked by UFW on vds [8888/tcp] Source port: 61014 TTL: 242 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 QUADEMU Abuse Dpt	2025-10-29 01:03:28 (10 months ago)	Noxious/Nuisible/вредоносный Host.	Port Scan Exploited Host
🇺🇸 xmission.com	2025-10-24 07:17:58 (10 months ago)	Blocked by UFW (TCP on 8443) Source port: 61002 TTL: 241 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8443) Source port: 61002 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 138.197.128.62) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 Altai	2025-08-02 06:41:59 (1 year ago)	Blocked by UFW on Jellyfin [8082/tcp] Source port: 61009 TTL: 242 Packet length: 44 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [8082/tcp] Source port: 61009 TTL: 242 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 EGP Abuse Dept	2025-03-27 01:53:57 (1 year ago)	Unauthorized connection to proxy port 8080	Port Scan Hacking

Showing 1 to 15 of 20 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇭 104.244.73.136

🇺🇸 91.230.168.78

🇨🇦 85.217.149.71

🇨🇳 39.170.98.131

🇰🇭 2a09:bac5:46f2:1028::19c:2a8

🇩🇪 213.209.159.11

🇧🇷 205.210.31.137

🇺🇸 172.93.0.251

🇳🇱 91.92.42.140

🇫🇷 85.217.140.39

🇧🇬 79.124.56.142

🇺🇸 66.132.186.238

🇺🇸 66.132.172.234

🇳🇱 45.148.10.157

🇧🇪 34.76.212.219

🇮🇹 34.17.176.58

🇸🇪 213.65.190.48

🇲🇽 177.226.145.32

🇧🇷 177.39.66.6

🇺🇸 172.245.43.228