JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.146.142

138.197.146.142 was found in our database!

This IP was reported 37 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Hostname(s)	1503859.cloudwaysapps.com
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.146.142

Whois 138.197.146.142

IP Abuse Reports for 138.197.146.142:

This IP address has been reported a total of 37 times from 21 distinct sources. 138.197.146.142 was first reported on May 21st 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Study Bitcoin 🤗	2025-08-07 02:20:46 (1 year ago)	Port probe to tcp/12000 (ibm enterprise extender sna xid exchange) [srv133]	Port Scan
🇫🇷 Altai	2025-08-05 10:58:29 (1 year ago)	Blocked by UFW on Jellyfin [8088/tcp] Source port: 61000 TTL: 242 Packet length: 44 TOS: 0x08 This ... show more Blocked by UFW on Jellyfin [8088/tcp] Source port: 61000 TTL: 242 Packet length: 44 TOS: 0x08 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇸🇪 SkyDancer	2025-06-27 09:28:42 (1 year ago)	Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by ... show more Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface. show less	Hacking Brute-Force SSH
🇺🇸 MPL	2025-05-18 12:42:01 (1 year ago)	tcp/8088 (2 or more attempts)	Port Scan
🇩🇪 scolastico	2025-04-16 21:16:52 (1 year ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Fraud VoIP Brute-Force
🇩🇪 scolastico	2025-04-15 21:07:14 (1 year ago)	[automated] IP failed to authenticate or send unauthenticated INVITE requests	Fraud VoIP Brute-Force
🇩🇪 _ArminS_	2025-04-12 14:52:46 (1 year ago)	SIP I/O/R 56715:5060 detected 2025.04.12 16:52:46 blocked until 2025.06.01 09:55:33	Fraud VoIP Brute-Force
🇨🇴 ingentar	2025-04-10 10:50:59 (1 year ago)	[2025-04-10 05:47:29] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2025-04-10 05:47:29] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:47:29.926-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6790013433500318",SessionID="0x7f7a30078300",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/62125",Challenge="15b87784",ReceivedChallenge="15b87784",ReceivedHash="938f2a0e93b4e0002c7ce3eb5c5e1fcf" [2025-04-10 05:48:17] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:48:17.578-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="67090013433500318",SessionID="0x7f7a30078300",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/57252",Challenge="0ffaa2c4",ReceivedChallenge="0ffaa2c4",ReceivedHash="5fdf0384fcceba496cff09d774c24835" [2025-04-10 05:49:00] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:49:00.385-0500",Severity="Error",Service="SIP ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2025-04-10 10:14:18 (1 year ago)	[2025-04-10 05:10:45] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2025-04-10 05:10:45] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:10:45.901-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4190013433500318",SessionID="0x7f7a300072d0",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/57883",Challenge="4730cf9b",ReceivedChallenge="4730cf9b",ReceivedHash="30aed4caf3ff8c17adcced0f172a6f5c" [2025-04-10 05:11:37] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:11:37.526-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="400190013433500318",SessionID="0x7f7a30002e80",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/64869",Challenge="3dce7331",ReceivedChallenge="3dce7331",ReceivedHash="579fcf9bc714d5f6030b16c503042564" [2025-04-10 05:12:29] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T05:12:29.554-0500",Severity="Error",Service="SI ... show less	Fraud VoIP Brute-Force
🇨🇴 ingentar	2025-04-10 09:37:50 (1 year ago)	[2025-04-10 04:34:17] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="20 ... show more [2025-04-10 04:34:17] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T04:34:17.321-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="88090013433500318",SessionID="0x7f7a3002dff0",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/50059",Challenge="4da4ceb5",ReceivedChallenge="4da4ceb5",ReceivedHash="44e716ff43df8c464871ece2dbf963cb" [2025-04-10 04:34:57] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T04:34:57.560-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="12090013433500318",SessionID="0x7f7a300a0bc0",LocalAddress="IPV4/UDP/181.143.117.59/5060",RemoteAddress="IPV4/UDP/138.197.146.142/49742",Challenge="40b6ac15",ReceivedChallenge="40b6ac15",ReceivedHash="2ed755d4418e6e3df328291d5a9cc28f" [2025-04-10 04:35:51] SECURITY[4361] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-10T04:35:51.679-0500",Severity="Error",Service="SI ... show less	Fraud VoIP Brute-Force
🇺🇸 BirdCo Telecom	2025-04-09 21:41:51 (1 year ago)		Fraud VoIP Brute-Force
🇺🇸 mc4bbs	2025-04-09 20:23:41 (1 year ago)	[2025-04-09 16:23:40] NOTICE[2201] chan_sip.c: Registration from '<sip:[email protected]:5060>' fail ... show more [2025-04-09 16:23:40] NOTICE[2201] chan_sip.c: Registration from '<sip:[email protected]:5060>' failed for '138.197.146.142:60742' - Wrong password [2025-04-09 16:23:40] SECURITY[2238] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2025-04-09T16:23:40.576-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="120",SessionID="0x7f2b6005a910",LocalAddress="IPV4/UDP/108.29.9.119/5060",RemoteAddress="IPV4/UDP/138.197.146.142/60742",Challenge="254ad99d",ReceivedChallenge="254ad99d",ReceivedHash="c98d7b7c6f0c3d8b91610b3a8eaa7911" ... show less	Fraud VoIP Brute-Force
🇳🇱 Jeff	2025-04-09 05:36:00 (1 year ago)	Since 9-4-2025	Fraud VoIP Brute-Force
🇩🇪 scolastico	2025-04-09 01:54:00 (1 year ago)	2025/04/09 03:00AM 30 pid=1 hostname=xxx source=ami event={"Event":"InvalidAccountID","Privilege":"s ... show more 2025/04/09 03:00AM 30 pid=1 hostname=xxx source=ami event={"Event":"InvalidAccountID","Privilege":"security,all","EventTV":"2025-04-09T01:00:15.405+0000","Severity":"Error","Service":"PJSIP","EventVersion":"1","AccountID":"100001","SessionID":"xxx","LocalAddress":"IPV4/UDP/xxx/5060","RemoteAddress":"IPV4/UDP/138.197.146.142/54279"} msg=Received AMI event 2025/04/09 03:00AM 30 pid=1 hostname=xxx source=ami event={"Event":"InvalidAccountID","Privilege":"security,all","EventTV":"2025-04-09T01:00:15.507+0000","Severity":"Error","Service":"PJSIP","EventVersion":"1","AccountID":"100002","SessionID":"xxx","LocalAddress":"IPV4/UDP/xxx/5060","RemoteAddress":"IPV4/UDP/138.197.146.142/54279"} msg=Received AMI event show less	Fraud VoIP Brute-Force
🇨🇭 Inaxas AG	2025-04-09 00:16:51 (1 year ago)	Inaxas Security for Asterisk banned IP after brute force credential hacking on Port 5060. Attempt ... show more Inaxas Security for Asterisk banned IP after brute force credential hacking on Port 5060. Attempt to use non existing account: 25 times between: 09/04/2025 - 00:10 and 09/04/2025 - 02:16. show less	Fraud VoIP Brute-Force

Showing 1 to 15 of 37 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇬🇧 154.16.44.126

🇨🇳 139.211.229.248

🇺🇸 66.228.62.150

🇧🇪 198.235.24.226

🇻🇪 190.97.227.11

🇨🇴 190.60.43.26

🇨🇳 118.145.154.96

🇧🇬 79.124.62.10

🇺🇸 64.62.197.178

🇫🇷 51.38.227.10

🇷🇺 45.81.33.26

🇻🇳 42.119.93.158

🇻🇳 1.54.208.35

🇺🇸 195.184.76.190

🇩🇴 191.97.106.92

🇲🇾 172.197.160.204

🇸🇪 130.78.189.159

🇻🇳 125.235.234.230

🇰🇷 119.203.251.187

🇩🇪 69.5.169.149