This IP address has been reported a total of
64
times from
57 distinct
sources.
115.197.238.146 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
Germany
with 13
reports;
Netherlands
with 8
reports.
The most common categories in these recent reports were:
SSH
56
times;
Brute-Force
52
times;
Port Scan
9
times;
Hacking
4
times;
Exploited Host
2
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-10T01:45:56.581828+02:00 netcup-de sshd[2883993]: Invalid user user from 115.197.238.146 por ...
show more2026-10-10T01:45:56.581828+02:00 netcup-de sshd[2883993]: Invalid user user from 115.197.238.146 port 43212
2026-10-10T01:45:58.557559+02:00 netcup-de sshd[2884019]: Invalid user user from 115.197.238.146 port 49730
...
show less
2026-10-09T21:22:24.198980+00:00 dchu-db-us sshd-session[41496]: Failed password for root from 115.1 ...
show more2026-10-09T21:22:24.198980+00:00 dchu-db-us sshd-session[41496]: Failed password for root from 115.197.238.146 port 40404 ssh2
2026-10-09T21:22:27.755998+00:00 dchu-db-us sshd-session[41499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.197.238.146 user=root
2026-10-09T21:22:29.776489+00:00 dchu-db-us sshd-session[41499]: Failed password for root from 115.197.238.146 port 49728 ssh2
...
show less
2026-10-09T19:26:01.336Z, an unauthorized SSH access attempt was detected from source IP address 115 ...
show more2026-10-09T19:26:01.336Z, an unauthorized SSH access attempt was detected from source IP address 115.197.238.146 by our NetFlow-based intrusion detection.
show less
Failed password for root from 115.197.238.146 port 45676 ssh2
Connection closed by authenticating us ...
show moreFailed password for root from 115.197.238.146 port 45676 ssh2
Connection closed by authenticating user root 115.197.238.146 port 45676 [preauth]
Failed password for root from 115.197.238.146 port 54662 ssh2
show less
Report 2737427 with IP 3784996 for SSH brute-force attack by source 3779652 via ssh-honeypot/0.2.0+h ...
show moreReport 2737427 with IP 3784996 for SSH brute-force attack by source 3779652 via ssh-honeypot/0.2.0+http
show less
Oct 9 20:58:52 MoonLightRP sshd[2157022]: Failed password for root from 115.197.238.146 port 55984 ...
show moreOct 9 20:58:52 MoonLightRP sshd[2157022]: Failed password for root from 115.197.238.146 port 55984 ssh2
Oct 9 20:58:56 MoonLightRP sshd[2157024]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.197.238.146 user=root
Oct 9 20:58:59 MoonLightRP sshd[2157024]: Failed password for root from 115.197.238.146 port 45406 ssh2
Oct 9 20:59:04 MoonLightRP sshd[2157123]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.197.238.146 user=root
Oct 9 20:59:06 MoonLightRP sshd[2157123]: Failed password for root from 115.197.238.146 port 55036 ssh2
Oct 9 20:59:12 MoonLightRP sshd[2157413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.197.238.146 user=root
Oct 9 20:59:14 MoonLightRP sshd[2157413]: Failed password for root from 115.197.238.146 port 39360 ssh2
...
show less
Oct 9 19:54:25 racetecweb sshd[431647]: User root from 115.197.238.146 not allowed because not list ...
show moreOct 9 19:54:25 racetecweb sshd[431647]: User root from 115.197.238.146 not allowed because not listed in AllowUsers
Oct 9 19:54:29 racetecweb sshd[431649]: User root from 115.197.238.146 not allowed because not listed in AllowUsers
Oct 9 19:54:34 racetecweb sshd[431652]: User root from 115.197.238.146 not allowed because not listed in AllowUsers
...
show less
