JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.39.208

138.197.39.208 was found in our database!

This IP was reported 764 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.39.208

Whois 138.197.39.208

IP Abuse Reports for 138.197.39.208:

This IP address has been reported a total of 764 times from 356 distinct sources. 138.197.39.208 was first reported on April 27th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 Sling	2026-06-04 09:49:06 (3 hours ago)	[Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2026-06-04T09:44:37.877737+00:00 U ... show more [Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2026-06-04T09:44:37.877737+00:00 Ubuntu-Toronto1 sshd[1394266]: Invalid user admin from 138.197.39.208 port 58520 2026-06-04T09:45:15.653230+00:00 Ubuntu-Toronto1 sshd[1394519]: Invalid user orangepi from 138.197.39.208 port 41210 2026-06-04T09:49:05.441871+00:00 Ubuntu-Toronto1 sshd[1396133]: Invalid user test from 138.197.39.208 port 44612 show less	Brute-Force SSH
🇪🇸 librebit	2026-06-04 08:51:15 (3 hours ago)	Brute force	Brute-Force
🇯🇵 Kinsei Engineering Inc.	2026-06-04 07:30:59 (5 hours ago)	UFW:High-frequency access to non-released ports used by software with known vulnerabilities.	Port Scan
🇩🇪 genclikfederasyonu.org	2026-06-04 05:43:33 (7 hours ago)	fail2banned (ssh brute)	Brute-Force SSH
🇫🇷 zulzeen	2026-06-04 03:39:13 (9 hours ago)	[incypit-web] Blocked by SysWarden Firewall [BLOCK] (SSH Attack)	SSH Brute-Force
🇺🇸 mw	2026-06-04 03:33:30 (9 hours ago)	Web App Attack	Web App Attack
🇺🇸 WestonReed	2026-06-04 03:24:31 (9 hours ago)	2026-06-03T20:18:14.938843-07:00 onion sshd-session[193153]: Invalid user admin from 138.197.39.208 ... show more 2026-06-03T20:18:14.938843-07:00 onion sshd-session[193153]: Invalid user admin from 138.197.39.208 port 59948 2026-06-03T20:18:50.594801-07:00 onion sshd-session[193155]: Invalid user orangepi from 138.197.39.208 port 57304 2026-06-03T20:22:45.769242-07:00 onion sshd-session[193186]: Invalid user test from 138.197.39.208 port 35804 2026-06-03T20:23:19.599837-07:00 onion sshd-session[193189]: Invalid user user from 138.197.39.208 port 54890 2026-06-03T20:24:30.264170-07:00 onion sshd-session[193201]: Invalid user admin from 138.197.39.208 port 39090 ... show less	Brute-Force SSH
🇺🇸 mw	2026-06-04 02:49:40 (10 hours ago)	SSH Brute-Force attempt detected.	FTP Brute-Force Brute-Force SSH
🇦🇹 urnilxfgbez	2026-06-03 22:45:00 (14 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
Anonymous	2026-06-03 21:41:49 (15 hours ago)	2026-06-03T23:41:11.912584+02:00 vm635618.cloud.nuxt.network sshd-session[84439]: pam_unix(sshd:auth ... show more 2026-06-03T23:41:11.912584+02:00 vm635618.cloud.nuxt.network sshd-session[84439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.39.208 2026-06-03T23:41:14.571338+02:00 vm635618.cloud.nuxt.network sshd-session[84439]: Failed password for invalid user admin from 138.197.39.208 port 34210 ssh2 2026-06-03T23:41:48.222016+02:00 vm635618.cloud.nuxt.network sshd-session[84442]: Invalid user orangepi from 138.197.39.208 port 57118 ... show less	Brute-Force SSH
🇺🇸 amit177	2026-06-03 21:34:45 (15 hours ago)		Brute-Force SSH
🇵🇱 rafamiga	2026-06-03 20:51:41 (15 hours ago)	fail2ban/ufw - Port scan detected. ...	Port Scan
🇺🇸 i553041	2026-06-03 20:51:25 (15 hours ago)	138.197.39.208 - - [03/Jun/2026:20:51:09 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.% ... show more 138.197.39.208 - - [03/Jun/2026:20:51:09 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 150 "-" "-" 138.197.39.208 - - [03/Jun/2026:20:51:10 +0000] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 150 "-" "-" 138.197.39.208 - - [03/Jun/2026:20:51:11 +0000] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 146 "-" "libredtail-http" 138.197.39.208 - - [03/Jun/2026:20:51:12 +0000] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 405 150 "-" "libredtail-http" 138.197.39.208 - - [03/Jun/2026:20:51:12 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 138.197.39.208 - - [03/Jun/2026:20:51:13 +0000] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 146 "-" "libredtail-http" 138.197.39.208 - - [03/Jun/2026:20:5 ... show less	Brute-Force SSH
🇿🇦 slartybartfast69420blazit	2026-06-03 20:07:15 (16 hours ago)	Fail2ban picked up 138.197.39.208 attacking nginx	Web App Attack
🇫🇷 kotwal	2026-06-03 20:02:44 (16 hours ago)	Jun 4 00:01:33 undeadly sshd-session[38360]: Invalid user admin from 138.197.39.208 port 36758 Jun ... show more Jun 4 00:01:33 undeadly sshd-session[38360]: Invalid user admin from 138.197.39.208 port 36758 Jun 4 00:01:34 undeadly sshd-session[38360]: Failed password for invalid user admin from 138.197.39.208 port 36758 ssh2 Jun 4 00:02:06 undeadly sshd-session[51443]: Invalid user orangepi from 138.197.39.208 port 55108 Jun 4 00:02:06 undeadly sshd-session[51443]: Failed password for invalid user orangepi from 138.197.39.208 port 55108 ssh2 Jun 4 00:02:43 undeadly sshd-session[17517]: Failed password for root from 138.197.39.208 port 58580 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 764 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 194.88.98.90

🇳🇱 188.166.17.4

🇳🇱 176.65.139.151

🇲🇦 102.100.8.229

🇸🇬 101.47.158.56

🇮🇷 93.126.18.29

🇫🇷 92.205.28.187

🇱🇹 91.224.92.32

🇺🇸 64.227.49.223

🇺🇸 64.94.156.234

🇺🇸 47.215.0.185

🇨🇳 36.151.143.49

🇹🇼 35.234.60.83

🇪🇹 196.189.237.172

🇱🇹 194.165.16.166

🇳🇱 176.65.148.216

🇻🇳 163.223.8.172

🇺🇸 162.216.150.211

🇺🇸 162.216.149.186

🇧🇷 148.227.122.96