JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.200.106

138.197.200.106 was found in our database!

This IP was reported 1,925 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Santa Clara, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.200.106

Whois 138.197.200.106

IP Abuse Reports for 138.197.200.106:

This IP address has been reported a total of 1,925 times from 698 distinct sources. 138.197.200.106 was first reported on April 21st 2026, and the most recent report was 1 minute ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇵🇱 Wepted	2026-04-24 07:18:35 (1 month ago)	2026-04-24T09:14:15.246562+02:00 axisverse sshd-session[2328365]: Invalid user art from 138.197.200. ... show more 2026-04-24T09:14:15.246562+02:00 axisverse sshd-session[2328365]: Invalid user art from 138.197.200.106 port 40470 2026-04-24T09:17:07.203862+02:00 axisverse sshd-session[2332394]: Invalid user ubuntu from 138.197.200.106 port 50134 2026-04-24T09:18:35.063215+02:00 axisverse sshd-session[2334423]: Invalid user ubuntu from 138.197.200.106 port 58148 ... show less	Brute-Force SSH
🇧🇬 sh97	2026-04-24 07:16:19 (1 month ago)	BG02-INCOG: SSH Brute Force from 138.197.200.106 at 2026-04-24 12:46:19 IST	Brute-Force SSH
🇵🇱 buratull	2026-04-24 07:15:18 (1 month ago)	2026-04-24T09:12:25.923990+02:00 pl-node sshd-session[20713]: pam_unix(sshd:auth): authentication fa ... show more 2026-04-24T09:12:25.923990+02:00 pl-node sshd-session[20713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=root 2026-04-24T09:12:28.539521+02:00 pl-node sshd-session[20713]: Failed password for root from 138.197.200.106 port 49038 ssh2 2026-04-24T09:15:15.416443+02:00 pl-node sshd-session[20740]: Invalid user anton from 138.197.200.106 port 38020 2026-04-24T09:15:15.421335+02:00 pl-node sshd-session[20740]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 2026-04-24T09:15:17.833836+02:00 pl-node sshd-session[20740]: Failed password for invalid user anton from 138.197.200.106 port 38020 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 07:12:25 (1 month ago)	138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 ... show more 138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 24 02:09:34 15865 sshd[28709]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=root Apr 24 02:09:35 15865 sshd[28709]: Failed password for root from 138.197.200.106 port 54874 ssh2 Apr 24 02:12:22 15865 sshd[29006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=root Apr 24 02:01:38 15865 sshd[27889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.55.69 user=root Apr 24 02:01:41 15865 sshd[27889]: Failed password for root from 142.93.55.69 port 59700 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 bing	2026-04-24 06:13:12 (1 month ago)	2026-04-24T02:13:08.553240 racknerd-eee1d19 sshd[834982]: pam_unix(sshd:auth): authentication failur ... show more 2026-04-24T02:13:08.553240 racknerd-eee1d19 sshd[834982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 2026-04-24T02:13:11.046358 racknerd-eee1d19 sshd[834982]: Failed password for invalid user connor from 138.197.200.106 port 33838 ssh2 ... show less	Brute-Force SSH
🇫🇮 210kur	2026-04-24 04:39:40 (1 month ago)	SSH brute-force detected from 138.197.200.106	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 03:39:46 (1 month ago)	138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 360 ... show more 138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 21:52:44 15237 sshd[1175]: Failed password for invalid user ubuntu from 79.55.224.44 port 8612 ssh2 Apr 23 22:16:04 15237 sshd[3105]: Invalid user ubuntu from 178.160.229.255 port 32810 Apr 23 22:16:06 15237 sshd[3105]: Failed password for invalid user ubuntu from 178.160.229.255 port 32810 ssh2 Apr 23 22:39:26 15237 sshd[4886]: Invalid user ubuntu from 138.197.200.106 port 56810 Apr 23 21:52:42 15237 sshd[1175]: Invalid user ubuntu from 79.55.224.44 port 8612 IP Addresses Blocked: 79.55.224.44 (IT/Italy/host-79-55-224-44.retail.telecomitalia.it) 178.160.229.255 (AM/Armenia/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 03:16:19 (1 month ago)	138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 360 ... show more 138.197.200.106 (US/United States/-), 5 distributed sshd attacks on account [ubuntu] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 23 21:51:39 18019 sshd[12277]: Invalid user ubuntu from 79.55.224.44 port 12459 Apr 23 21:51:41 18019 sshd[12277]: Failed password for invalid user ubuntu from 79.55.224.44 port 12459 ssh2 Apr 23 22:06:33 18019 sshd[15126]: Invalid user ubuntu from 138.197.200.106 port 58406 Apr 23 22:06:36 18019 sshd[15126]: Failed password for invalid user ubuntu from 138.197.200.106 port 58406 ssh2 Apr 23 22:16:10 18019 sshd[16959]: Invalid user ubuntu from 178.160.229.255 port 40828 IP Addresses Blocked: 79.55.224.44 (IT/Italy/host-79-55-224-44.retail.telecomitalia.it) show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-24 02:20:19 (1 month ago)	Unauthorized connection to FTP port 21	FTP Brute-Force Brute-Force
🇺🇸 jennij	2026-04-24 02:10:49 (1 month ago)	Fail2Ban sshd ban on sylant-stuff ...	Brute-Force SSH
🇩🇪 marcel-knorr.de	2026-04-24 00:07:42 (1 month ago)	[MK-VM1] SSH login failed	Brute-Force SSH
🇺🇸 SiteHUB Agency	2026-04-23 23:51:38 (1 month ago)	Brute force activities detected and blocked	Brute-Force
🇺🇸 bigscoots.com	2026-04-23 23:39:02 (1 month ago)	(sshd) Failed SSH login from 138.197.200.106 (US/United States/-): 5 in the last 3600 secs; Ports: * ... show more (sshd) Failed SSH login from 138.197.200.106 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 23 17:49:01 17509 sshd[13094]: Invalid user tom from 138.197.200.106 port 46986 Apr 23 17:49:03 17509 sshd[13094]: Failed password for invalid user tom from 138.197.200.106 port 46986 ssh2 Apr 23 18:37:10 17509 sshd[19428]: Invalid user radio from 138.197.200.106 port 48784 Apr 23 18:37:12 17509 sshd[19428]: Failed password for invalid user radio from 138.197.200.106 port 48784 ssh2 Apr 23 18:38:44 17509 sshd[19589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=root show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-23 21:20:44 (1 month ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-04-23 21:01:06 (1 month ago)	ssh bruteforce	Brute-Force SSH

Showing 1846 to 1860 of 1925 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2602:80d:1008::31

🇺🇸 216.194.172.68

🇳🇱 176.65.139.242

🇺🇸 173.255.223.143

🇺🇸 172.191.239.155

🇨🇬 160.113.1.246

🇨🇳 116.233.252.173

🇵🇭 110.235.163.61

🇧🇷 45.162.105.57

🇬🇧 35.203.210.36

🇺🇸 20.64.105.25

🇺🇿 5.133.121.104

🇺🇸 192.169.152.102

🇺🇸 181.214.48.205

🇻🇳 180.93.43.225

🇮🇳 122.181.103.229

🇨🇳 120.48.181.68

🇨🇳 119.255.245.44

🇻🇳 117.0.64.54

🇫🇷 91.231.89.115