JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.159.87

138.197.159.87 was found in our database!

This IP was reported 44 times. Confidence of Abuse is 17%: ?

17%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.159.87

Whois 138.197.159.87

IP Abuse Reports for 138.197.159.87:

This IP address has been reported a total of 44 times from 36 distinct sources. 138.197.159.87 was first reported on February 27th 2025, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇮 Maxetow	2026-05-19 05:46:36 (4 weeks ago)	Scan port: 8088 \| 1 total \| size=44B	Port Scan
🇫🇮 6kilowatti	2026-05-14 15:11:55 (1 month ago)	2026-05-14T18:11:54.959941+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-05-14T18:11:54.959941+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=138.197.159.87 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=36332 PROTO=TCP SPT=61015 DPT=6939 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 MPL	2026-05-14 14:21:09 (1 month ago)	tcp/8888	Port Scan
Anonymous	2026-05-14 14:10:53 (1 month ago)	Drop from IP address 138.197.159.87 to tcp-port 5918	Port Scan
🇬🇧 thetomtaylor.co.uk	2026-04-09 05:05:08 (2 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa01]	Brute-Force SSH
🇺🇸 entangled_mongoose	2026-03-11 22:34:33 (3 months ago)	Attempted login with username root.	SSH Brute-Force
🇺🇸 pixelmemory.us	2026-03-11 22:33:41 (3 months ago)	2026-03-11T14:32:46.699035-08:00 pixelmemory sshd-session[1857483]: pam_unix(sshd:auth): authenticat ... show more 2026-03-11T14:32:46.699035-08:00 pixelmemory sshd-session[1857483]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.159.87 user=root 2026-03-11T14:32:48.415296-08:00 pixelmemory sshd-session[1857483]: Failed password for root from 138.197.159.87 port 56822 ssh2 2026-03-11T14:33:38.645321-08:00 pixelmemory sshd-session[1857590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.159.87 user=root 2026-03-11T14:33:40.471066-08:00 pixelmemory sshd-session[1857590]: Failed password for root from 138.197.159.87 port 50928 ssh2 ... show less	Brute-Force SSH
🇨🇦 nickto	2026-03-11 22:32:20 (3 months ago)	Mar 11 18:31:02 Tower sshd[3583]: srclimit_penalise: ipv4: new 138.197.159.87/32 deferred penalty of ... show more Mar 11 18:31:02 Tower sshd[3583]: srclimit_penalise: ipv4: new 138.197.159.87/32 deferred penalty of 5 seconds for penalty: failed authentication Mar 11 18:31:49 Tower sshd-session[3398919]: Connection from 138.197.159.87 port 45408 on 192.168.10.220 port 22 rdomain "" Mar 11 18:31:52 Tower sshd-session[3398919]: Failed password for root from 138.197.159.87 port 45408 ssh2 Mar 11 18:31:52 Tower sshd-session[3398919]: Connection closed by authenticating user root 138.197.159.87 port 45408 [preauth] Mar 11 18:31:52 Tower sshd[3583]: srclimit_penalise: ipv4: new 138.197.159.87/32 deferred penalty of 5 seconds for penalty: failed authentication show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2026-03-11 20:12:00 (3 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇫🇮 StopIt!	2026-03-10 13:16:59 (3 months ago)	Mar 10 10:44:47 master sshd[3324088]: Failed password for root from 138.197.159.87 port 46776 ssh2 M ... show more Mar 10 10:44:47 master sshd[3324088]: Failed password for root from 138.197.159.87 port 46776 ssh2 Mar 10 10:46:11 master sshd[3324135]: Failed password for root from 138.197.159.87 port 47992 ssh2 Mar 10 10:47:46 master sshd[3324193]: Failed password for root from 138.197.159.87 port 46820 ssh2 Mar 10 10:49:32 master sshd[3324265]: Failed password for root from 138.197.159.87 port 52820 ssh2 Mar 10 10:51:25 master sshd[3324374]: Failed password for root from 138.197.159.87 port 40386 ssh2 Mar 10 10:53:05 master sshd[3324436]: Failed password for root from 138.197.159.87 port 54260 ssh2 Mar 10 10:54:24 master sshd[3324490]: Failed password for root from 138.197.159.87 port 38206 ssh2 Mar 10 10:55:45 master sshd[3324541]: Failed password for root from 138.197.159.87 port 60226 ssh2 Mar 10 10:57:00 master sshd[3324586]: Failed password for root from 138.197.159.87 port 54822 ssh2 Mar 10 10:58:17 master sshd[3324628]: Failed password for root from 138.197.159.87 port 37654 ssh2 show less	Brute-Force SSH
🇨🇦 KIsmay	2026-03-10 09:04:59 (3 months ago)	Mar 10 02:02:03 ismay sshd[3080737]: Failed password for root from 138.197.159.87 port 41182 ssh2 Ma ... show more Mar 10 02:02:03 ismay sshd[3080737]: Failed password for root from 138.197.159.87 port 41182 ssh2 Mar 10 02:03:38 ismay sshd[3080896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.159.87 user=root Mar 10 02:03:39 ismay sshd[3080896]: Failed password for root from 138.197.159.87 port 46304 ssh2 Mar 10 02:04:57 ismay sshd[3080920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.159.87 user=root Mar 10 02:04:59 ismay sshd[3080920]: Failed password for root from 138.197.159.87 port 59310 ssh2 ... show less	Brute-Force SSH
🇩🇪 NxtGenIT	2026-03-10 08:54:39 (3 months ago)	Cowrie Honeypot hit, Event Type: cowrie.login.failed, Username: root, Password: 12345	Brute-Force
🇦🇺 aglenday	2026-03-10 08:53:59 (3 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:passw ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:password, root:123456, root:12345678 • Number of login attempts: 5 • 4 command(s) were executed during the session • Client: SSH-2.0-Go show less	Brute-Force SSH Hacking
🇩🇪 Moritz	2026-03-10 08:53:48 (3 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:passw ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:password, root:123456, root:12345678, root:1234 • Number of login attempts: 6 • 4 command(s) were executed during the session • Client: SSH-2.0-Go Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Brute-Force SSH Hacking
🇬🇧 thetomtaylor.co.uk	2026-03-10 08:53:25 (3 months ago)	Fail2Ban - [SSHD]Brute-force SSH server on sshd ... [wa02]	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇻 197.255.143.160

🇩🇪 98.67.134.192

🇲🇾 219.92.9.48

🇨🇳 202.112.47.205

🇷🇺 178.209.88.110

🇨🇦 165.245.236.62

🇺🇸 165.154.172.179

🇬🇧 118.193.64.186

🇧🇷 45.205.1.245

🇳🇱 34.90.182.246

🇺🇸 192.177.103.167

🇷🇺 185.70.129.3

🇨🇳 183.200.188.164

🇮🇳 168.144.113.130

🇳🇱 91.92.40.217

🇳🇱 89.125.242.18

🇷🇺 79.104.0.82

🇺🇸 65.49.1.96

🇫🇷 51.210.97.205

🇺🇸 50.116.72.11