JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.162.56

138.197.162.56 was found in our database!

This IP was reported 1,375 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇨🇦 Canada
City	Toronto, Ontario

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.162.56

Whois 138.197.162.56

IP Abuse Reports for 138.197.162.56:

This IP address has been reported a total of 1,375 times from 451 distinct sources. 138.197.162.56 was first reported on January 18th 2023, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 xmission.com	2025-10-22 05:23:16 (8 months ago)	Blocked by UFW (TCP on 8088) Source port: 61015 TTL: 240 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 8088) Source port: 61015 TTL: 240 Packet length: 44 TOS: 0x08 This report (for 138.197.162.56) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 ericshim.me	2025-09-30 05:02:00 (9 months ago)	Cowrie honeypot hit at 2025-09-29T18:00:26.266621Z	Brute-Force SSH
🇦🇺 shomerdns.com	2025-09-29 21:16:43 (9 months ago)	Sep 29 21:16:39 lenny sshd[1546828]: Invalid user apache from 138.197.162.56 port 41214 Sep 29 21:16 ... show more Sep 29 21:16:39 lenny sshd[1546828]: Invalid user apache from 138.197.162.56 port 41214 Sep 29 21:16:40 lenny sshd[1546828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 Sep 29 21:16:42 lenny sshd[1546828]: Failed password for invalid user apache from 138.197.162.56 port 41214 ssh2 show less	Brute-Force SSH
Anonymous	2025-09-29 21:16:30 (9 months ago)	2025-09-29T22:16:24+02:00 lb-1 sshd[989933]: pam_unix(sshd:auth): authentication failure; logname= u ... show more 2025-09-29T22:16:24+02:00 lb-1 sshd[989933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T22:16:26+02:00 lb-1 sshd[989933]: Failed password for invalid user phpmyadmin from 138.197.162.56 port 35210 ssh2 2025-09-29T23:16:29+02:00 lb-1 sshd[996934]: Invalid user apache from 138.197.162.56 port 34726 2025-09-29T23:16:29+02:00 lb-1 sshd[996934]: Invalid user apache from 138.197.162.56 port 34726 ... show less	Brute-Force SSH
🇮🇩 Diskominfo Lumajang	2025-09-29 20:20:03 (9 months ago)	Security Event Detected by SOC Diskominfo Lumajang: event=ssh, hits=19	Brute-Force SSH
🇮🇹 alph44	2025-09-29 20:16:39 (9 months ago)	SSH brute force attack detected: 5 failed attempts	Brute-Force
🇩🇪 SUNDAIR	2025-09-29 20:16:36 (9 months ago)	(sshd) Failed SSH login from 138.197.162.56 (CA/Canada/Ontario/Toronto/-/[redacted])	Brute-Force SSH
🇦🇺 shomerdns.com	2025-09-29 20:16:25 (9 months ago)	Sep 29 20:16:21 lenny sshd[1546670]: Invalid user ds from 138.197.162.56 port 44504 Sep 29 20:16:21 ... show more Sep 29 20:16:21 lenny sshd[1546670]: Invalid user ds from 138.197.162.56 port 44504 Sep 29 20:16:21 lenny sshd[1546670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 Sep 29 20:16:24 lenny sshd[1546670]: Failed password for invalid user ds from 138.197.162.56 port 44504 ssh2 show less	Brute-Force SSH
Anonymous	2025-09-29 20:16:25 (9 months ago)	$f2bV_matches	Brute-Force SSH
Anonymous	2025-09-29 20:16:24 (9 months ago)	2025-09-29T22:16:09+02:00 lb-1 sshd[989907]: Invalid user ds from 138.197.162.56 port 42572 2025-09- ... show more 2025-09-29T22:16:09+02:00 lb-1 sshd[989907]: Invalid user ds from 138.197.162.56 port 42572 2025-09-29T22:16:09+02:00 lb-1 sshd[989907]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T22:16:11+02:00 lb-1 sshd[989907]: Failed password for invalid user ds from 138.197.162.56 port 42572 ssh2 2025-09-29T22:16:23+02:00 lb-1 sshd[989933]: Invalid user phpmyadmin from 138.197.162.56 port 35210 ... show less	Brute-Force SSH
🇺🇸 SuperCores Hosting	2025-09-29 20:15:29 (9 months ago)	[2025-09-29 20:15:29.696159] SSH/22 Unautorized connection. Suspicious SSH Brute-force.	Port Scan Hacking Brute-Force Exploited Host SSH
🇩🇪 Singha58	2025-09-29 20:07:27 (9 months ago)	2025-09-29T22:07:03.829435+02:00 v220240537442267460 sshd[689664]: Failed password for invalid user ... show more 2025-09-29T22:07:03.829435+02:00 v220240537442267460 sshd[689664]: Failed password for invalid user hikvision from 138.197.162.56 port 38190 ssh2 2025-09-29T22:07:14.206404+02:00 v220240537442267460 sshd[689682]: Invalid user elasticsearch from 138.197.162.56 port 57984 2025-09-29T22:07:14.323218+02:00 v220240537442267460 sshd[689682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T22:07:16.713722+02:00 v220240537442267460 sshd[689682]: Failed password for invalid user elasticsearch from 138.197.162.56 port 57984 ssh2 2025-09-29T22:07:26.868786+02:00 v220240537442267460 sshd[689712]: Invalid user sftpuser from 138.197.162.56 port 36194 ... show less	Brute-Force SSH
🇩🇪 Singha58	2025-09-29 19:51:58 (9 months ago)	2025-09-29T21:51:32.623582+02:00 v220240537442267460 sshd[687905]: Failed password for invalid user ... show more 2025-09-29T21:51:32.623582+02:00 v220240537442267460 sshd[687905]: Failed password for invalid user opc from 138.197.162.56 port 35924 ssh2 2025-09-29T21:51:43.772108+02:00 v220240537442267460 sshd[687936]: Invalid user web from 138.197.162.56 port 58736 2025-09-29T21:51:44.128584+02:00 v220240537442267460 sshd[687936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T21:51:46.178068+02:00 v220240537442267460 sshd[687936]: Failed password for invalid user web from 138.197.162.56 port 58736 ssh2 2025-09-29T21:51:56.706978+02:00 v220240537442267460 sshd[687965]: Invalid user solana from 138.197.162.56 port 59218 ... show less	Brute-Force SSH
🇩🇪 Singha58	2025-09-29 19:36:22 (9 months ago)	2025-09-29T21:36:06.872941+02:00 v220240537442267460 sshd[686072]: Invalid user leo1 from 138.197.16 ... show more 2025-09-29T21:36:06.872941+02:00 v220240537442267460 sshd[686072]: Invalid user leo1 from 138.197.162.56 port 45700 2025-09-29T21:36:06.976415+02:00 v220240537442267460 sshd[686072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T21:36:09.588144+02:00 v220240537442267460 sshd[686072]: Failed password for invalid user leo1 from 138.197.162.56 port 45700 ssh2 2025-09-29T21:36:19.705723+02:00 v220240537442267460 sshd[686087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 user=root 2025-09-29T21:36:21.769968+02:00 v220240537442267460 sshd[686087]: Failed password for root from 138.197.162.56 port 51512 ssh2 ... show less	Brute-Force SSH
🇩🇪 Singha58	2025-09-29 19:20:37 (9 months ago)	2025-09-29T21:20:21.325614+02:00 v220240537442267460 sshd[684311]: pam_unix(sshd:auth): authenticati ... show more 2025-09-29T21:20:21.325614+02:00 v220240537442267460 sshd[684311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 user=root 2025-09-29T21:20:23.540505+02:00 v220240537442267460 sshd[684311]: Failed password for root from 138.197.162.56 port 47772 ssh2 2025-09-29T21:20:34.724108+02:00 v220240537442267460 sshd[684341]: Invalid user admin from 138.197.162.56 port 50626 2025-09-29T21:20:34.838533+02:00 v220240537442267460 sshd[684341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.162.56 2025-09-29T21:20:36.837796+02:00 v220240537442267460 sshd[684341]: Failed password for invalid user admin from 138.197.162.56 port 50626 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 1375 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇱🇹 77.90.185.16

🇧🇷 200.175.201.167

🇺🇸 162.216.150.230

🇪🇬 156.203.14.97

🇩🇪 139.59.140.35

🇭🇰 114.111.53.214

🇩🇪 64.226.93.157

🇳🇱 45.148.10.157

🇧🇼 41.216.209.67

🇵🇭 222.127.63.144

🇫🇮 178.20.210.208

🇩🇪 164.90.232.107

🇨🇴 152.200.181.42

🇧🇬 79.124.62.230

🇱🇹 62.60.130.219

🇯🇵 43.167.177.254

🇪🇸 196.196.150.124

🇨🇦 172.70.80.187

🇺🇸 162.216.149.232

🇬🇧 162.158.216.82