JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.197.81.42

138.197.81.42 was found in our database!

This IP was reported 103 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇺🇸 United States of America
City	Clifton, New Jersey

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.197.81.42

Whois 138.197.81.42

IP Abuse Reports for 138.197.81.42:

This IP address has been reported a total of 103 times from 93 distinct sources. 138.197.81.42 was first reported on March 19th 2024, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 teohumble1	2026-08-31 18:24:10 (1 day ago)	TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agen ... show more TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agent", ["proto-smb", ["recon-banner-grab", ["tls", known-attacker. Unsolicited attack on a decoy host. show less	Port Scan
🇮🇱 spd.co.il	2026-08-31 14:03:14 (1 day ago)	Port scan detected on multiple ports	Port Scan
Anonymous	2026-08-30 21:58:10 (2 days ago)	HTTP_USER_AGENT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr ... show more HTTP_USER_AGENT Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 show less	Port Scan
🇦🇺 teohumble1	2026-08-30 18:23:31 (2 days ago)	TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agen ... show more TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agent", ["proto-smb", ["recon-banner-grab", ["tls", known-attacker. Unsolicited attack on a decoy host. show less	Port Scan
🇩🇪 ut-addicted.com	2026-08-29 22:46:57 (3 days ago)	Aug 30 00:46:56 www postfix/smtpd\[19978\]: lost connection after EHLO from unknown\[138.197.81.42\]	Brute-Force Hacking
🇫🇷 peter.pann	2026-08-29 22:29:57 (3 days ago)	Port scan: 111 blocked connection attempts to ports 21,22,110,143,445,465,587,636,990,993 (dropped b ... show more Port scan: 111 blocked connection attempts to ports 21,22,110,143,445,465,587,636,990,993 (dropped by our geo-firewall). show less	Port Scan
🇫🇷 security.rdmc.fr	2026-08-29 21:21:42 (3 days ago)	Port Scan Attack proto:TCP src:56550 dst:21	Port Scan
🇳🇱 DrLex0	2026-08-29 19:19:32 (3 days ago)	2026-08-29T19:19:27.347788+00:00 [host] portsentry[757]: attackalert: TCP SYN/Normal scan from host: ... show more 2026-08-29T19:19:27.347788+00:00 [host] portsentry[757]: attackalert: TCP SYN/Normal scan from host: 138.197.81.42/138.197.81.42 to TCP port: 5432 2026-08-29T19:19:28.912004+00:00 [host] portsentry[757]: attackalert: TCP SYN/Normal scan from host: 138.197.81.42/138.197.81.42 to TCP port: 110 2026-08-29T19:19:31.824258+00:00 [host] portsentry[757]: attackalert: TCP SYN/Normal scan from host: 138.197.81.42/138.197.81.42 to TCP port: 5432 show less	Port Scan
🇫🇷 Provost-info	2026-08-29 18:54:29 (3 days ago)	mail server - multiple authentication attempt with unknown username or bad password	Brute-Force Spoofing
🇦🇺 teohumble1	2026-08-29 18:22:53 (3 days ago)	TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agen ... show more TeoStrike honeypot (reporter: Teohumble): 95/100 threat. Observed: "known-attacker"], ["no-user-agent", ["proto-smb", ["recon-banner-grab", ["tls", known-attacker. Unsolicited attack on a decoy host. show less	Port Scan
🇮🇸 EricTheRedFL	2026-08-29 18:22:07 (3 days ago)	2026-08-29T14:22:01.548602-04:00 mailstore.ab-data.us sshd-session[574286]: Connection closed by 138 ... show more 2026-08-29T14:22:01.548602-04:00 mailstore.ab-data.us sshd-session[574286]: Connection closed by 138.197.81.42 port 49784 [preauth] 2026-08-29T14:22:06.573937-04:00 mailstore.ab-data.us sshd-session[574296]: banner exchange: Connection from 138.197.81.42 port 40736: invalid format 2026-08-29T14:22:06.775521-04:00 mailstore.ab-data.us sshd-session[574297]: banner exchange: Connection from 138.197.81.42 port 40752: invalid format 2026-08-29T14:22:07.207113-04:00 mailstore.ab-data.us sshd-session[574299]: banner exchange: Connection from 138.197.81.42 port 40758: invalid format ... show less	Brute-Force SSH
🇺🇸 NXTwoThou	2026-08-29 18:07:03 (3 days ago)	IMAP	Port Scan
🇺🇸 ne1for23	2026-08-29 16:25:29 (3 days ago)	Unauthorized access to SSH at 29/Aug/2026:16:25:28 +0000. Received: (SSH-2.0-Go)	SSH
🇺🇸 mutebot.net	2026-08-29 15:20:20 (3 days ago)	SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=5432 SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=2083 ... show more SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=5432 SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=2083 SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=587 SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=990 SRC=138.197.81.42, PROTO=TCP, SPT=56834, DPT=5000 show less	Port Scan
🇩🇪 sandra361	2026-08-29 15:15:01 (3 days ago)	Brute-force detected: 11 attempts across 1 port (22). \| Evidence: GHOST_SCAN: IN=ens3 SRC=138.197.81 ... show more Brute-force detected: 11 attempts across 1 port (22). \| Evidence: GHOST_SCAN: IN=ens3 SRC=138.197.81.42 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=28136 DF PROTO=TCP SPT=40456 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Brute-Force

Showing 1 to 15 of 103 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇪 207.175.136.164

🇬🇧 185.216.145.166

🇨🇳 171.104.83.169

🇳🇱 164.90.196.151

🇳🇱 164.90.195.107

🇩🇪 164.90.186.82

🇵🇱 149.13.96.133

🇳🇱 86.81.245.129

🇮🇹 83.224.179.220

🇷🇴 80.94.92.179

🇺🇸 66.116.237.85

🇱🇹 62.60.130.201

🇳🇱 45.148.10.152

🇺🇸 205.210.31.98

🇮🇩 202.155.14.144

🇧🇪 198.235.24.174

🇬🇭 196.61.39.126

🇳🇱 193.47.62.69

🇺🇸 172.212.203.72

🇩🇪 164.90.172.42