JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.197.76.120

Neutral Activity

Abuse Confidence Score

0% Low Risk

100 reports

66 reporters · latest 4 months ago

ISP: DigitalOcean, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14061
Domain Name: digitalocean.com
Country: 🇺🇸 United States of America
City: Clifton, New Jersey

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

138.197.76.120 has been reported 100 times. The most recent report is from 4 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

100 from 66 distinct reporters

First reported

May 20th 2026

Most recent report

4 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 Vincent6785_0	2026-06-15 20:37:22 UTC · (4 months ago)	Observed automated SSH brute-force activity. Attempts: 3 \| Failed password: 0 \| Invalid user: 0 First seen: unknown Last seen: unknown Source: Linux OpenSSH journalctl telemetry from OVH-hosted Debian server.	Brute-Force SSH
🇵🇱 Wepted	2026-05-21 12:40:50 UTC · (5 months ago)	2026-05-21T14:30:38.793510+02:00 axisverse sshd-session[2876371]: Invalid user kubeadmin from 138.197.76.120 port 34768 2026-05-21T14:39:40.978830+02:00 axisverse sshd-session[2892472]: Invalid user xie from 138.197.76.120 port 37194 2026-05-21T14:40 ... show more 2026-05-21T14:30:38.793510+02:00 axisverse sshd-session[2876371]: Invalid user kubeadmin from 138.197.76.120 port 34768 2026-05-21T14:39:40.978830+02:00 axisverse sshd-session[2892472]: Invalid user xie from 138.197.76.120 port 37194 2026-05-21T14:40:49.719730+02:00 axisverse sshd-session[2894532]: Invalid user admin from 138.197.76.120 port 44292 ... show less	Brute-Force SSH
🇩🇪 ipcop.net	2026-05-21 12:39:22 UTC · (5 months ago)	2026-05-21T14:36:22.620476+02:00 gw9.nodesafety.com sshd-session[1239440]: Invalid user kubeadmin from 138.197.76.120 port 44220 2026-05-21T14:36:22.730286+02:00 gw9.nodesafety.com sshd-session[1239440]: Disconnected from invalid user kubeadmin 138.1 ... show more 2026-05-21T14:36:22.620476+02:00 gw9.nodesafety.com sshd-session[1239440]: Invalid user kubeadmin from 138.197.76.120 port 44220 2026-05-21T14:36:22.730286+02:00 gw9.nodesafety.com sshd-session[1239440]: Disconnected from invalid user kubeadmin 138.197.76.120 port 44220 [preauth] 2026-05-21T14:38:12.191435+02:00 gw9.nodesafety.com sshd-session[1239809]: Invalid user socks from 138.197.76.120 port 46146 2026-05-21T14:38:12.327266+02:00 gw9.nodesafety.com sshd-session[1239809]: Disconnected from invalid user socks 138.197.76.120 port 46146 [preauth] 2026-05-21T14:39:21.554675+02:00 gw9.nodesafety.com sshd-session[1239999]: Disconnected from authenticating user root 138.197.76.120 port 58396 [preauth] show less	Brute-Force
Anonymous	2026-05-21 12:08:05 UTC · (5 months ago)	SSH intruder from fail2ban ...	SSH
🇺🇸 bigscoots.com	2026-05-21 11:25:09 UTC · (5 months ago)	(sshd) Failed SSH login from 138.197.76.120 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 21 06:16:39 17636 sshd[20253]: Invalid user teamcity from 138.197.76.120 port 39274 May 21 06:16:41 17636 s ... show more (sshd) Failed SSH login from 138.197.76.120 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 21 06:16:39 17636 sshd[20253]: Invalid user teamcity from 138.197.76.120 port 39274 May 21 06:16:41 17636 sshd[20253]: Failed password for invalid user teamcity from 138.197.76.120 port 39274 ssh2 May 21 06:23:58 17636 sshd[21357]: Invalid user web from 138.197.76.120 port 35086 May 21 06:23:59 17636 sshd[21357]: Failed password for invalid user web from 138.197.76.120 port 35086 ssh2 May 21 06:25:04 17636 sshd[21624]: Invalid user vincenzo from 138.197.76.120 port 38302 show less	Brute-Force SSH
🇬🇧 kipfel★	2026-05-21 11:25:07 UTC · (5 months ago)	2026-05-21T12:16:55.995549+01:00 hh-vm-ea25-5t-lon sshd[681933]: Invalid user teamcity from 138.197.76.120 port 50318 2026-05-21T12:24:00.586552+01:00 hh-vm-ea25-5t-lon sshd[681942]: Invalid user web from 138.197.76.120 port 53992 2026-05-21T12:25:06 ... show more 2026-05-21T12:16:55.995549+01:00 hh-vm-ea25-5t-lon sshd[681933]: Invalid user teamcity from 138.197.76.120 port 50318 2026-05-21T12:24:00.586552+01:00 hh-vm-ea25-5t-lon sshd[681942]: Invalid user web from 138.197.76.120 port 53992 2026-05-21T12:25:06.806866+01:00 hh-vm-ea25-5t-lon sshd[681945]: Invalid user vincenzo from 138.197.76.120 port 36470 ... show less	Brute-Force SSH
🇺🇸 SANYALnet Labs	2026-05-21 11:19:10 UTC · (5 months ago)	May 21 11:19:06 hecnet-us-east-gw sshd[539863]: Invalid user teamcity from 138.197.76.120 port 42824 May 21 11:19:08 hecnet-us-east-gw sshd[539863]: Failed password for invalid user teamcity from 138.197.76.120 port 42824 ssh2 May 21 11:19:09 hecnet- ... show more May 21 11:19:06 hecnet-us-east-gw sshd[539863]: Invalid user teamcity from 138.197.76.120 port 42824 May 21 11:19:08 hecnet-us-east-gw sshd[539863]: Failed password for invalid user teamcity from 138.197.76.120 port 42824 ssh2 May 21 11:19:09 hecnet-us-east-gw sshd[539863]: Disconnected from invalid user teamcity 138.197.76.120 port 42824 [preauth] ... show less	Brute-Force
🇩🇪 formality	2026-05-21 10:45:43 UTC · (5 months ago)	Invalid user kolya from 138.197.76.120 port 51610	Brute-Force SSH
Anonymous	2026-05-21 10:15:03 UTC · (5 months ago)	T: f2b ssh aggressive 3x	Brute-Force SSH
🇬🇧 Stuart Reid	2026-05-21 10:07:02 UTC · (5 months ago)	...	SSH
🇩🇪 Riko	2026-05-21 10:00:05 UTC · (5 months ago)	Fail2ban SSH Bruteforce	Brute-Force SSH
🇩🇪 mueslo	2026-05-21 09:46:18 UTC · (5 months ago)	2026-05-21T11:45:03.616057+02:00 hyperion sshd-session[2963667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.76.120 user=root 2026-05-21T11:45:05.526158+02:00 hyperion sshd-session[2963667]: Failed ... show more 2026-05-21T11:45:03.616057+02:00 hyperion sshd-session[2963667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.76.120 user=root 2026-05-21T11:45:05.526158+02:00 hyperion sshd-session[2963667]: Failed password for root from 138.197.76.120 port 33108 ssh2 2026-05-21T11:46:15.577547+02:00 hyperion sshd-session[2963787]: Invalid user concourse from 138.197.76.120 port 37660 2026-05-21T11:46:15.583611+02:00 hyperion sshd-session[2963787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.76.120 2026-05-21T11:46:15.586141+02:00 hyperion sshd-session[2963787]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.76.120 user=concourse 2026-05-21T11:46:17.947462+02:00 hyperion sshd-session[2963787]: Failed password for invalid user concourse from 138.197.76.120 port 37660 ssh2 show less	Brute-Force SSH
Anonymous	2026-05-21 09:43:24 UTC · (5 months ago)	2026-05-21T11:37:28.686097+02:00 hosting15 sshd[3825276]: Failed password for invalid user jinan from 138.197.76.120 port 35000 ssh2 2026-05-21T11:43:22.389777+02:00 hosting15 sshd[3827307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 2026-05-21T11:37:28.686097+02:00 hosting15 sshd[3825276]: Failed password for invalid user jinan from 138.197.76.120 port 35000 ssh2 2026-05-21T11:43:22.389777+02:00 hosting15 sshd[3827307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.76.120 user=root 2026-05-21T11:43:24.374746+02:00 hosting15 sshd[3827307]: Failed password for root from 138.197.76.120 port 59248 ssh2 ... show less	Brute-Force SSH
🇰🇷 GoForceX	2026-05-21 09:12:55 UTC · (5 months ago)	2026-05-21T09:04:29.923281+00:00 instance-20241105-1148 sshd[369949]: Invalid user deepak from 138.197.76.120 port 38650 2026-05-21T09:08:43.980577+00:00 instance-20241105-1148 sshd[369985]: Invalid user rui from 138.197.76.120 port 48204 2026-05-21T ... show more 2026-05-21T09:04:29.923281+00:00 instance-20241105-1148 sshd[369949]: Invalid user deepak from 138.197.76.120 port 38650 2026-05-21T09:08:43.980577+00:00 instance-20241105-1148 sshd[369985]: Invalid user rui from 138.197.76.120 port 48204 2026-05-21T09:09:44.489134+00:00 instance-20241105-1148 sshd[369995]: Invalid user zhiming from 138.197.76.120 port 58236 2026-05-21T09:11:49.504812+00:00 instance-20241105-1148 sshd[370021]: Invalid user hu from 138.197.76.120 port 57404 2026-05-21T09:12:55.300383+00:00 instance-20241105-1148 sshd[370035]: Invalid user youxi from 138.197.76.120 port 49438 ... show less	Brute-Force SSH
🇪🇸 scotynau	2026-05-21 09:08:10 UTC · (5 months ago)	2026-05-21T09:00:24.029718+00:00 bastionez sshd[266427]: Invalid user deepak from 138.197.76.120 port 52018 2026-05-21T09:08:09.975082+00:00 bastionez sshd[266546]: Invalid user rui from 138.197.76.120 port 40810 ...	Brute-Force SSH

Showing 1 to 15 of 100 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 216.25.89.122

🇺🇸 216.25.89.120

🇩🇰 85.218.186.140

🇧🇪 35.206.134.210

🇺🇸 216.25.89.118

🇺🇸 216.25.89.107

🇧🇴 200.105.172.184

🇺🇿 195.158.14.232

🇨🇦 167.99.179.244

🇩🇪 151.243.11.29

🇫🇷 90.46.57.222

🇺🇸 66.132.186.180

🇺🇸 66.132.172.221

🇺🇸 66.132.159.106

🇮🇩 36.95.18.37

🇨🇳 14.103.87.77

🇺🇸 216.25.89.102

🇺🇸 216.25.89.101

🇳🇱 185.136.15.16

🇺🇸 159.65.219.252