JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.81.20

138.197.81.20 was found in our database!

This IP was reported 2,640 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.81.20

Whois 138.197.81.20

IP Abuse Reports for 138.197.81.20:

This IP address has been reported a total of 2,640 times from 380 distinct sources. 138.197.81.20 was first reported on March 10th 2026, and the most recent report was 5 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 mxpgmbh	2026-04-30 03:56:58 (1 month ago)	2026-04-30T05:56:21.497387+02:00 ** sshd-session[31003]: Invalid user from 138.197.81.20 port ... show more 2026-04-30T05:56:21.497387+02:00 sshd-session[31003]: Invalid user from 138.197.81.20 port 51068 2026-04-30T05:56:21.498750+02:00 sshd-session[31003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.81.20 2026-04-30T05:56:23.464982+02:00 sshd-session[31003]: Failed password for invalid user from 138.197.81.20 port 51068 ssh2 2026-04-30T05:56:55.530401+02:00 sshd-session[31473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.81.20 user=root 2026-04-30T05:56:57.341662+02:00 ** sshd-session[31473]: Failed password for root from 138.197.81.20 port 39002 ssh2 show less	Brute-Force SSH
🇳🇱 donarev419	2026-04-30 03:48:56 (1 month ago)	Connection to port 2222 with data transfer. Data preview: SSH-2.0-libssh2_1.11.1	Port Scan Hacking
🇬🇧 Andrew	2026-04-30 02:31:49 (1 month ago)	Blocked by UFW (TCP on port 2375). Source port: 39299 TTL: 54 Packet length: 40 TOS: 0x00 This repo ... show more Blocked by UFW (TCP on port 2375). Source port: 39299 TTL: 54 Packet length: 40 TOS: 0x00 This report (for 138.197.81.20) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 security.rdmc.fr	2026-04-30 02:26:09 (1 month ago)	Port Scan Attack proto:TCP src:53071 dst:23	Port Scan
🇺🇸 donarev419	2026-04-30 02:18:45 (1 month ago)	Connection to port 2375 with data transfer. Data preview: GET /containers/json HTTP/1.1 Host: 67.21 ... show more Connection to port 2375 with data transfer. Data preview: GET /containers/json HTTP/1.1 Host: 67.215.244.172:2375 Upgrade-Insecure-Requests: 1 Accept: / show less	Port Scan Hacking
🇬🇧 chrisw	2026-04-30 01:57:37 (1 month ago)	2026-04-30T02:55:33.319046l03.customhost.org.uk proftpd[13551]: 0.0.0.0 (138.197.81.20[138.197.81.20 ... show more 2026-04-30T02:55:33.319046l03.customhost.org.uk proftpd[13551]: 0.0.0.0 (138.197.81.20[138.197.81.20]) - USER admin: no such user found from 138.197.81.20 [138.197.81.20] to ::ffff:176.126.240.161:2222 2026-04-30T02:56:04.236455l03.customhost.org.uk proftpd[13896]: 0.0.0.0 (138.197.81.20[138.197.81.20]) - USER orangepi: no such user found from 138.197.81.20 [138.197.81.20] to ::ffff:176.126.240.161:2222 2026-04-30T02:56:35.223794l03.customhost.org.uk proftpd[13925]: 0.0.0.0 (138.197.81.20[138.197.81.20]) - USER root (Login failed): Incorrect password 2026-04-30T02:57:06.196730l03.customhost.org.uk proftpd[13953]: 0.0.0.0 (138.197.81.20[138.197.81.20]) - USER root (Login failed): Incorrect password 2026-04-30T02:57:37.155171l03.customhost.org.uk proftpd[14020]: 0.0.0.0 (138.197.81.20[138.197.81.20]) - USER root (Login failed): Incorrect password ... show less	FTP Brute-Force Brute-Force
🇧🇷 chronos	2026-04-30 01:42:58 (1 month ago)	Generic malicious activity: [HONEYPOT] Attempted SSH access... \| Port: 2222 \| Proto: TCP \| Location: ... show more Generic malicious activity: [HONEYPOT] Attempted SSH access... \| Port: 2222 \| Proto: TCP \| Location: United States, Clifton show less	Port Scan Hacking
🇳🇱 VMHeaven.io	2026-04-30 01:34:29 (1 month ago)	Blocked by UFW [2375/tcp] Source port: 52799 TTL: 49 Packet length: 40	Port Scan
🇩🇪 on1x.cloud	2026-04-30 01:08:12 (1 month ago)	[on1x.cloud] SSH-Multi login Attempt	Brute-Force SSH
🇫🇷 Lunix	2026-04-29 23:58:05 (1 month ago)		FTP Brute-Force Brute-Force
🇺🇸 MPL	2026-04-29 23:53:48 (1 month ago)	tcp/2375 (2 or more attempts)	Port Scan
🇺🇸 MPL	2026-04-29 23:10:26 (1 month ago)	tcp ports: 2222,2375 (10 or more attempts)	Port Scan
🇦🇹 urnilxfgbez	2026-04-29 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇩🇪 mxpgmbh	2026-04-29 22:16:30 (1 month ago)	2026-04-30T00:15:53.698987+02:00 ** sshd-session[5020]: pam_unix(sshd:auth): authentication failur ... show more 2026-04-30T00:15:53.698987+02:00 sshd-session[5020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.81.20 user=root 2026-04-30T00:15:55.913277+02:00 sshd-session[5020]: Failed password for root from 138.197.81.20 port 55628 ssh2 2026-04-30T00:16:28.443624+02:00 sshd-session[5692]: Invalid user from 138.197.81.20 port 50328 2026-04-30T00:16:28.444781+02:00 sshd-session[5692]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.81.20 2026-04-30T00:16:30.210960+02:00 sshd-session[5692]: Failed password for invalid user ** from 138.197.81.20 port 50328 ssh2 show less	Brute-Force SSH
🇺🇸 RAP	2026-04-29 21:13:44 (1 month ago)	2026-04-29 21:13:44 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 61 to 75 of 2640 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 144.31.14.203

🇫🇷 91.231.89.178

🇮🇶 185.244.152.97

🇲🇴 182.93.50.90

🇮🇩 103.175.215.254

🇫🇷 91.231.89.236

🇫🇷 91.231.89.152

🇫🇷 91.231.89.61

🇱🇹 77.90.185.207

🇨🇳 61.178.24.146

🇮🇳 59.93.107.172

🇺🇸 50.6.196.179

🇺🇦 46.200.89.80

🇺🇸 40.124.169.38

🇬🇧 35.203.211.202

🇧🇷 186.195.103.182

🇮🇩 182.10.131.59

🇺🇸 162.216.149.135

🇮🇩 157.15.40.1

🇺🇸 104.192.3.74