AbuseIPDB » 138.197.161.39

138.197.161.39 was found in our database!

This IP was reported 298 times. Confidence of Abuse is 92%: ?

92%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 138.197.161.39

Whois 138.197.161.39

IP Abuse Reports for 138.197.161.39:

This IP address has been reported a total of 298 times from 103 distinct sources. 138.197.161.39 was first reported on January 9th 2022, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MPL	2024-12-24 15:16:33 (3 weeks ago)	tcp/13000 (2 or more attempts)	Port Scan
Melua	2024-12-24 15:00:07 (3 weeks ago)	Attempted connection to SSH tarpit	Brute-Force SSH
diego	2024-12-24 14:48:58 (3 weeks ago)	Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds	DDoS Attack
MAGIC	2024-12-22 01:05:03 (3 weeks ago)	VM1 Bad user agents ignoring web crawling rules. Draing bandwidth	DDoS Attack Bad Web Bot
urnilxfgbez	2024-12-10 23:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
rtbh.com.tr	2024-12-10 20:52:49 (1 month ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
zwh	2024-12-10 17:45:18 (1 month ago)	SSH Brute-Force	Brute-Force SSH
rtbh.com.tr	2024-12-10 08:52:49 (1 month ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
BadAimWeeb	2024-12-10 08:35:33 (1 month ago)	2024-12-10T08:29:26.180252+00:00 BAW-C01 sshd-session[736689]: pam_unix(sshd:auth): authentication f ... show more2024-12-10T08:29:26.180252+00:00 BAW-C01 sshd-session[736689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 2024-12-10T08:29:28.293197+00:00 BAW-C01 sshd-session[736689]: Failed password for invalid user hadoop from 138.197.161.39 port 41788 ssh2 2024-12-10T08:35:29.965387+00:00 BAW-C01 sshd-session[737093]: Invalid user hadoop from 138.197.161.39 port 59184 2024-12-10T08:35:30.264853+00:00 BAW-C01 sshd-session[737093]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 2024-12-10T08:35:32.037184+00:00 BAW-C01 sshd-session[737093]: Failed password for invalid user hadoop from 138.197.161.39 port 59184 ssh2 ... show less	Brute-Force SSH
GV	2024-12-10 08:35:15 (1 month ago)	Dec 10 09:29:02 localhost sshd\[15178\]: Invalid user hadoop from 138.197.161.39 Dec 10 09:29: ... show moreDec 10 09:29:02 localhost sshd\[15178\]: Invalid user hadoop from 138.197.161.39 Dec 10 09:29:02 localhost sshd\[15178\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 Dec 10 09:29:04 localhost sshd\[15178\]: Failed password for invalid user hadoop from 138.197.161.39 port 35364 ssh2 Dec 10 09:35:06 localhost sshd\[15936\]: Invalid user hadoop from 138.197.161.39 Dec 10 09:35:06 localhost sshd\[15936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 ... show less	Brute-Force SSH
Dentax	2024-12-10 08:33:34 (1 month ago)	2024-12-10T09:33:33.030898+01:00 nbg-www1 sshd[819742]: pam_unix(sshd:auth): authentication failure; ... show more2024-12-10T09:33:33.030898+01:00 nbg-www1 sshd[819742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 2024-12-10T09:33:34.529705+01:00 nbg-www1 sshd[819742]: Failed password for invalid user hadoop from 138.197.161.39 port 46526 ssh2 ... show less	Brute-Force SSH
Cobalt IT Inc	2024-12-10 08:32:46 (1 month ago)	Dec 10 00:26:41 server01 sshd[13639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreDec 10 00:26:41 server01 sshd[13639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 Dec 10 00:26:43 server01 sshd[13639]: Failed password for invalid user hadoop from 138.197.161.39 port 40122 ssh2 Dec 10 00:32:45 server01 sshd[29726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 ... show less	Brute-Force SSH
GV	2024-12-10 08:16:58 (1 month ago)	Dec 10 09:10:46 localhost sshd\[12857\]: Invalid user oracle from 138.197.161.39 Dec 10 09:10: ... show moreDec 10 09:10:46 localhost sshd\[12857\]: Invalid user oracle from 138.197.161.39 Dec 10 09:10:46 localhost sshd\[12857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 Dec 10 09:10:47 localhost sshd\[12857\]: Failed password for invalid user oracle from 138.197.161.39 port 39632 ssh2 Dec 10 09:16:50 localhost sshd\[14010\]: Invalid user hadoop from 138.197.161.39 Dec 10 09:16:50 localhost sshd\[14010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 ... show less	Brute-Force SSH
diego	2024-12-10 08:16:03 (1 month ago)	[rede-166-249] (sshd) Failed SSH login from 138.197.161.39 (CA/Canada/-): 5 in the last 3600 secs; P ... show more[rede-166-249] (sshd) Failed SSH login from 138.197.161.39 (CA/Canada/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Dec 10 05:03:50 sshd[13660]: Invalid user [USERNAME] from 138.197.161.39 port 42944 Dec 10 05:03:52 sshd[13660]: Failed password for invalid user [USERNAME] from 138.197.161.39 port 42944 ssh2 Dec 10 05:09:54 sshd[14098]: Invalid user [USERNAME] from 138.197.161.39 port 60342 Dec 10 05:09:56 sshd[14098]: Failed password for invalid user [USERNAME] from 138.197.161.39 port 60342 ssh2 Dec 10 05:15:58 sshd[14549]: Invalid user [USERNAME] from 138.197.161.39 port 49508 show less	Port Scan
Cobalt IT Inc	2024-12-10 08:14:30 (1 month ago)	Dec 10 00:08:25 server01 sshd[3403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show moreDec 10 00:08:25 server01 sshd[3403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 Dec 10 00:08:27 server01 sshd[3403]: Failed password for invalid user oracle from 138.197.161.39 port 44392 ssh2 Dec 10 00:14:29 server01 sshd[28403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.161.39 ... show less	Brute-Force SSH