JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.144.31

138.197.144.31 was found in our database!

This IP was reported 434 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.144.31

Whois 138.197.144.31

IP Abuse Reports for 138.197.144.31:

This IP address has been reported a total of 434 times from 83 distinct sources. 138.197.144.31 was first reported on March 21st 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 bigscoots.com	2024-05-27 05:58:24 (2 years ago)	(sshd) Failed SSH login from 138.197.144.31 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 138.197.144.31 (CA/Canada/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Jan 5 20:01:43 23577 sshd[21566]: Did not receive identification string from 138.197.144.31 port 36918 Jan 5 21:58:37 23577 sshd[26798]: Did not receive identification string from 138.197.144.31 port 55092 Jan 5 23:54:00 23577 sshd[32258]: Did not receive identification string from 138.197.144.31 port 59042 Jan 6 12:44:44 23577 sshd[3964]: Did not receive identification string from 138.197.144.31 port 34648 Jan 6 13:41:54 23577 sshd[6741]: Did not receive identification string from 138.197.144.31 port 50640 show less	Brute-Force SSH
Anonymous	2024-01-11 00:55:00 (2 years ago)	1 unauthorized access attempt(s) from 138.197.144.31	Port Scan Brute-Force
🇺🇸 MPL	2024-01-10 11:51:05 (2 years ago)	tcp/2222	Port Scan
🇩🇪 Beta	2024-01-10 11:49:48 (2 years ago)	access non open port: 2222	Port Scan
🇺🇸 MPL	2024-01-10 11:32:18 (2 years ago)	tcp/2222 (5 or more attempts)	Port Scan
🇦🇱 AlbaHost	2024-01-10 10:54:41 (2 years ago)	Bruteforce and hack attempt REPORTING!	Brute-Force SSH
Anonymous	2024-01-10 10:52:00 (2 years ago)	Jan 10 11:51:58 syscgn kernel: [2407292.289480] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e ... show more Jan 10 11:51:58 syscgn kernel: [2407292.289480] [UFW BLOCK] IN=eth0 OUT= MAC=0a:d1:7f:3c:98:09:10:0e:7e:26:f1:c0:08:00 SRC=138.197.144.31 DST=185.194.141.106 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=44239 DPT=2222 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Hacking
🇩🇪 Threat Intelligence Agency	2024-01-10 10:25:20 (2 years ago)	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2024-01-10T10:17:54Z and 2024-01- ... show more Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2024-01-10T10:17:54Z and 2024-01-10T10:25:19Z show less	Brute-Force SSH
🇸🇪 Anonymous	2024-01-10 10:03:03 (2 years ago)	Drop from IP address 138.197.144.31 to tcp-port 2222	Port Scan
Anonymous	2024-01-10 09:39:30 (2 years ago)	6 unauthorized access attempt(s) from 138.197.144.31	Port Scan Brute-Force
🇧🇪 sid3windr	2024-01-10 09:38:52 (2 years ago)	SSH port scan (Tarpitted for 20s, wasted 18B)	Port Scan SSH
🇩🇪 dwmp	2024-01-10 09:21:58 (2 years ago)	2024-01-10T10:21:55.432947mail0.dwmp.it sshd[29427]: User root from 138.197.144.31 not allowed becau ... show more 2024-01-10T10:21:55.432947mail0.dwmp.it sshd[29427]: User root from 138.197.144.31 not allowed because not listed in AllowUsers 2024-01-10T10:21:55.688358mail0.dwmp.it sshd[29431]: User root from 138.197.144.31 not allowed because not listed in AllowUsers 2024-01-10T10:21:55.715839mail0.dwmp.it sshd[29429]: User root from 138.197.144.31 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇺🇸 MPL	2024-01-10 08:46:57 (2 years ago)	tcp/2222 (3 or more attempts)	Port Scan
🇺🇸 www.narsol.org	2024-01-10 08:42:54 (2 years ago)	Jan 10 03:42:51 do1 sshd[1260992]: Unable to negotiate with 138.197.144.31 port 52348: no matching k ... show more Jan 10 03:42:51 do1 sshd[1260992]: Unable to negotiate with 138.197.144.31 port 52348: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jan 10 03:42:52 do1 sshd[1261001]: Unable to negotiate with 138.197.144.31 port 57908: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jan 10 03:42:52 do1 sshd[1261005]: Unable to negotiate with 138.197.144.31 port 35252: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jan 10 03:42:52 do1 sshd[1261007]: Unable to negotiate with 138.197.144.31 port 40794: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth] Jan 10 03:42:53 do1 sshd[1261009]: Unable to ... show less	Brute-Force SSH
🇧🇪 sid3windr	2024-01-10 08:33:40 (2 years ago)	SSH port scan (Tarpitted for 20s, wasted 31B)	Port Scan SSH

Showing 1 to 15 of 434 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.218.206.66

🇸🇬 206.189.155.150

🇳🇱 193.176.31.229

🇲🇽 187.189.181.138

🇬🇧 172.64.192.197

🇺🇸 143.42.0.20

🇨🇳 114.217.10.60

🇨🇳 114.98.63.18

🇺🇿 84.54.70.221

🇺🇸 74.114.150.250

🇩🇪 69.5.169.160

🇲🇽 189.157.59.82

🇩🇪 167.94.146.59

🇭🇰 156.239.224.104

🇨🇳 125.124.226.217

🇨🇳 101.96.203.52

🇨🇦 85.217.149.48

🇲🇩 217.156.66.34

🇳🇱 204.76.203.81

🇧🇷 168.228.153.209