JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.161.245

138.197.161.245 was found in our database!

This IP was reported 2,560 times. Confidence of Abuse is 14%: ?

14%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.161.245

Whois 138.197.161.245

IP Abuse Reports for 138.197.161.245:

This IP address has been reported a total of 2,560 times from 726 distinct sources. 138.197.161.245 was first reported on October 18th 2023, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-05-26 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇬🇧 PeravixGroup	2026-05-26 02:23:26 (1 month ago)	Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDI ... show more Honeypot detection: MongoDB unauthorized access / exploitation attempt on port 27017. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-05-26 01:42:46 (1 month ago)	tcp/80 (2 or more attempts)	Port Scan
🇳🇱 EGP Abuse Dept	2026-05-26 01:38:55 (1 month ago)	Unauthorized connection to RDP port 3389	Port Scan Hacking
🇦🇹 Pingger Shikkoken	2026-03-16 04:49:21 (4 months ago)	2026-03-16T04:49:21+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-03-16T04:49:21+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=138.197.161.245 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=10904 PROTO=TCP SPT=61005 DPT=8888 WINDOW=1025 RES=0x00 SYN URGP=0 show less	Hacking
🇺🇸 MPL	2026-03-16 04:16:31 (4 months ago)	tcp/8001	Port Scan
🇦🇹 urnilxfgbez	2026-03-15 23:45:00 (4 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇷🇺 GoXLd	2026-03-15 21:35:36 (4 months ago)	2026-03-15T22:35:33.532460+01:00 gXdNODE2 sshd-session[1293930]: pam_unix(sshd:auth): authentication ... show more 2026-03-15T22:35:33.532460+01:00 gXdNODE2 sshd-session[1293930]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 user=root 2026-03-15T22:35:35.581098+01:00 gXdNODE2 sshd-session[1293930]: Failed password for root from 138.197.161.245 port 55834 ssh2 ... show less	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-03-15 21:32:33 (4 months ago)	2026-03-15T23:32:30.108027propilvipalvelutfi sshd[3336591]: Invalid user sina from 138.197.161.245 p ... show more 2026-03-15T23:32:30.108027propilvipalvelutfi sshd[3336591]: Invalid user sina from 138.197.161.245 port 43152 2026-03-15T23:32:30.267058propilvipalvelutfi sshd[3336591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 2026-03-15T23:32:32.599836propilvipalvelutfi sshd[3336591]: Failed password for invalid user sina from 138.197.161.245 port 43152 ssh2 ... show less	Brute-Force SSH
🇫🇷 Sayrix	2026-03-15 21:17:47 (4 months ago)	Mar 15 21:17:28 Sayrix2 sshd[123152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show more Mar 15 21:17:28 Sayrix2 sshd[123152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 Mar 15 21:17:30 Sayrix2 sshd[123152]: Failed password for invalid user sina2 from 138.197.161.245 port 51446 ssh2 Mar 15 21:17:35 Sayrix2 sshd[123154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 user=root Mar 15 21:17:37 Sayrix2 sshd[123154]: Failed password for root from 138.197.161.245 port 48254 ssh2 Mar 15 21:17:40 Sayrix2 sshd[123156]: Invalid user audi from 138.197.161.245 port 48268 ... show less	Brute-Force SSH
🇩🇪 TostHost	2026-03-15 21:17:38 (4 months ago)	Fail2Ban detected SSH brute-force attack	Brute-Force SSH
🇫🇮 bittiguru.fi	2026-03-15 21:17:30 (4 months ago)	2026-03-15T23:17:25.077860propilvipalvelutfi sshd[3336230]: Invalid user sina2 from 138.197.161.245 ... show more 2026-03-15T23:17:25.077860propilvipalvelutfi sshd[3336230]: Invalid user sina2 from 138.197.161.245 port 52696 2026-03-15T23:17:26.762978propilvipalvelutfi sshd[3336230]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 2026-03-15T23:17:28.990728propilvipalvelutfi sshd[3336230]: Failed password for invalid user sina2 from 138.197.161.245 port 52696 ssh2 ... show less	Brute-Force SSH
🇷🇺 GoXLd	2026-03-15 21:15:27 (4 months ago)	2026-03-15T22:15:23.690261+01:00 gXdNODE2 sshd-session[1293891]: pam_unix(sshd:auth): authentication ... show more 2026-03-15T22:15:23.690261+01:00 gXdNODE2 sshd-session[1293891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.245 user=root 2026-03-15T22:15:25.962436+01:00 gXdNODE2 sshd-session[1293891]: Failed password for root from 138.197.161.245 port 44276 ssh2 ... show less	Brute-Force SSH
🇩🇪 aorth	2026-03-15 21:15:15 (4 months ago)	Mar 15 22:15:15 Failed password for invalid user root from 138.197.161.245 port 52770	Brute-Force SSH
🇨🇭 ALPHANET	2026-03-15 21:14:51 (4 months ago)	SSH honeypot 2 login attempt	Hacking Brute-Force Exploited Host SSH

Showing 1 to 15 of 2560 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 112.86.146.178

🇯🇵 8.216.17.97

🇰🇷 218.150.184.241

🇺🇸 185.198.240.254

🇮🇳 115.246.52.219

🇺🇸 91.193.232.220

🇳🇱 80.82.77.33

🇬🇧 54.38.79.136

🇨🇦 47.55.188.155

🇳🇱 195.178.110.223

🇧🇬 185.125.243.139

🇺🇸 91.193.232.205

🇺🇸 91.193.232.202

🇩🇪 91.13.99.37

🇺🇸 54.172.145.72

🇸🇬 43.153.192.165

🇮🇶 37.238.39.15

🇹🇷 5.181.85.100

🇧🇷 2804:1c80:151a:ab00:49f7:6957:21cd:17b3

🇺🇸 205.210.31.78