This IP address has been reported a total of
138
times from
114 distinct
sources.
138.122.140.200 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
May 31 09:14:10 thenormalpeople sshd[370792]: Failed password for root from 138.122.140.200 port 592 ...
show moreMay 31 09:14:10 thenormalpeople sshd[370792]: Failed password for root from 138.122.140.200 port 59268 ssh2
May 31 09:14:13 thenormalpeople sshd[370794]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.140.200 user=root
May 31 09:14:14 thenormalpeople sshd[370794]: Failed password for root from 138.122.140.200 port 59276 ssh2
...
show less
2026-05-31T09:01:59.491799+02:00 router.wipp.f-heim.de sshd[1572759]: Connection closed by authentic ...
show more2026-05-31T09:01:59.491799+02:00 router.wipp.f-heim.de sshd[1572759]: Connection closed by authenticating user root 138.122.140.200 port 34586 [preauth]
2026-05-31T09:02:01.022894+02:00 router.wipp.f-heim.de sshd[1572766]: Connection closed by authenticating user root 138.122.140.200 port 34598 [preauth]
2026-05-31T09:02:02.560080+02:00 router.wipp.f-heim.de sshd[1572772]: Connection closed by authenticating user root 138.122.140.200 port 34608 [preauth]
2026-05-31T09:02:04.070063+02:00 router.wipp.f-heim.de sshd[1572852]: Connection closed by authenticating user root 138.122.140.200 port 34618 [preauth]
2026-05-31T09:02:05.580783+02:00 router.wipp.f-heim.de sshd[1572874]: Connection closed by authenticating user root 138.122.140.200 port 34632 [preauth]
show less
(sshd) Failed SSH login from 138.122.140.200 (BR/Brazil/Rondônia/Cacoal/138-122-140-200.netwayteleco ...
show more(sshd) Failed SSH login from 138.122.140.200 (BR/Brazil/Rondônia/Cacoal/138-122-140-200.netwaytelecon.com.br/[redacted])
show less
2026-05-31T04:12:41.738358+02:00 server1 sshd-session[731914]: User root from 138.122.140.200 not al ...
show more2026-05-31T04:12:41.738358+02:00 server1 sshd-session[731914]: User root from 138.122.140.200 not allowed because not listed in AllowUsers
2026-05-31T04:12:43.096159+02:00 server1 sshd-session[731918]: User root from 138.122.140.200 not allowed because not listed in AllowUsers
2026-05-31T04:12:44.583738+02:00 server1 sshd-session[731922]: User root from 138.122.140.200 not allowed because not listed in AllowUsers
...
show less
SSH brute force attack detected by fail2ban - attempted unauthorized access
Brute-Force
SSH
Anonymous
May 31 02:17:03 venus sshd[1134696]: Invalid user user from 138.122.140.200 port 59828
May 31 02:17: ...
show moreMay 31 02:17:03 venus sshd[1134696]: Invalid user user from 138.122.140.200 port 59828
May 31 02:17:04 venus sshd[1134698]: Invalid user user from 138.122.140.200 port 59830
May 31 02:17:06 venus sshd[1134700]: Invalid user user from 138.122.140.200 port 59834
...
show less
Brute-Force
SSH
Showing 91 to
105
of 138 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩