AbuseIPDB » 138.197.19.166

138.197.19.166 was found in our database!

This IP was reported 24,349 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 138.197.19.166

Whois 138.197.19.166

IP Abuse Reports for 138.197.19.166:

This IP address has been reported a total of 24,349 times from 1,440 distinct sources. 138.197.19.166 was first reported on November 21st 2020, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
Anonymous	01 Oct 2023	$f2bV_matches	Brute-Force SSH
tjiricek	28 Sep 2023	Aug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreAug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.19.166 Aug 20 09:23:12 raspberrypi sshd[15307]: Failed password for invalid user server from 138.197.19.166 port 58982 ssh2 show less	Brute-Force SSH
tjiricek	26 Sep 2023	Aug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreAug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.19.166 Aug 20 09:23:12 raspberrypi sshd[15307]: Failed password for invalid user server from 138.197.19.166 port 58982 ssh2 show less	Brute-Force SSH
tjiricek	15 Sep 2023	Aug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreAug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.19.166 Aug 20 09:23:12 raspberrypi sshd[15307]: Failed password for invalid user server from 138.197.19.166 port 58982 ssh2 show less	Brute-Force SSH
ipcop.net	11 Sep 2023	Malicious activity detected from 138.197.19.166.	Brute-Force
ipcop.net	11 Sep 2023	Malicious activity detected from 138.197.19.166.	Brute-Force
ipcop.net	11 Sep 2023	Malicious activity detected from 138.197.19.166.	Brute-Force
tjiricek	10 Sep 2023	Aug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreAug 20 09:23:10 raspberrypi sshd[15307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.19.166 Aug 20 09:23:12 raspberrypi sshd[15307]: Failed password for invalid user server from 138.197.19.166 port 58982 ssh2 show less	Brute-Force SSH
psauxit	10 Sep 2023	Fail2Ban - SSHD brute-force SSH server	SSH
ipcop.net	04 Sep 2023	Jul 11 19:38:58 router02.imr-richtsfeld.de sshd[651306]: Disconnected from authenticating user root ... show moreJul 11 19:38:58 router02.imr-richtsfeld.de sshd[651306]: Disconnected from authenticating user root 138.197.19.166 port 55658 [preauth] Jul 11 19:44:15 router02.imr-richtsfeld.de sshd[651955]: Invalid user test from 138.197.19.166 port 44130 Jul 11 19:44:15 router02.imr-richtsfeld.de sshd[651955]: Disconnected from invalid user test 138.197.19.166 port 44130 [preauth] Jul 11 19:45:17 router02.imr-richtsfeld.de sshd[652110]: Disconnected from authenticating user root 138.197.19.166 port 35710 [preauth] Jul 11 19:46:18 router02.imr-richtsfeld.de sshd[652261]: Invalid user test from 138.197.19.166 port 55524 show less	Brute-Force
ipcop.net	04 Sep 2023	Malicious activity detected from 138.197.19.166.	Brute-Force
ipcop.net	04 Sep 2023	Malicious activity detected from 138.197.19.166.	Brute-Force
ipcop.net	03 Sep 2023	Jul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40 ... show moreJul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40874 Jul 11 04:24:23 router02.mth-medical.com sshd[4104574]: Disconnected from invalid user hmn 138.197.19.166 port 40874 [preauth] Jul 11 04:28:14 router02.mth-medical.com sshd[4104993]: Disconnected from authenticating user root 138.197.19.166 port 54622 [preauth] Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Invalid user student from 138.197.19.166 port 49268 Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Disconnected from invalid user student 138.197.19.166 port 49268 [preauth] show less	Brute-Force
ipcop.net	03 Sep 2023	Jul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40 ... show moreJul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40874 Jul 11 04:24:23 router02.mth-medical.com sshd[4104574]: Disconnected from invalid user hmn 138.197.19.166 port 40874 [preauth] Jul 11 04:28:14 router02.mth-medical.com sshd[4104993]: Disconnected from authenticating user root 138.197.19.166 port 54622 [preauth] Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Invalid user student from 138.197.19.166 port 49268 Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Disconnected from invalid user student 138.197.19.166 port 49268 [preauth] show less	Brute-Force
ipcop.net	03 Sep 2023	Jul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40 ... show moreJul 11 04:24:22 router02.mth-medical.com sshd[4104574]: Invalid user hmn from 138.197.19.166 port 40874 Jul 11 04:24:23 router02.mth-medical.com sshd[4104574]: Disconnected from invalid user hmn 138.197.19.166 port 40874 [preauth] Jul 11 04:28:14 router02.mth-medical.com sshd[4104993]: Disconnected from authenticating user root 138.197.19.166 port 54622 [preauth] Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Invalid user student from 138.197.19.166 port 49268 Jul 11 04:29:11 router02.mth-medical.com sshd[4105097]: Disconnected from invalid user student 138.197.19.166 port 49268 [preauth] show less	Brute-Force

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩