This IP address has been reported a total of
145
times from
118 distinct
sources.
138.122.140.200 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Report 2415912 with IP 3463479 for SSH brute-force attack by source 3458137 via ssh-honeypot/0.2.0+h ...
show moreReport 2415912 with IP 3463479 for SSH brute-force attack by source 3458137 via ssh-honeypot/0.2.0+http
show less
May 30 14:38:48 login sshd[23862]: Failed password for root from 138.122.140.200 port 42790 ssh2
May ...
show moreMay 30 14:38:48 login sshd[23862]: Failed password for root from 138.122.140.200 port 42790 ssh2
May 30 14:38:52 login sshd[23864]: Failed password for root from 138.122.140.200 port 40506 ssh2
...
show less
May 30 11:05:13 box sshd-session[35528]: Connection closed by authenticating user root 138.122.140.2 ...
show moreMay 30 11:05:13 box sshd-session[35528]: Connection closed by authenticating user root 138.122.140.200 port 35584 [preauth]
May 30 11:05:15 box sshd-session[35532]: Connection closed by authenticating user root 138.122.140.200 port 34750 [preauth]
May 30 11:05:16 box sshd-session[35534]: Connection closed by authenticating user root 138.122.140.200 port 34762 [preauth]
May 30 11:05:18 box sshd-session[35536]: Connection closed by authenticating user root 138.122.140.200 port 60178 [preauth]
May 30 11:05:19 box sshd-session[35538]: Connection closed by authenticating user root 138.122.140.200 port 60186 [preauth]
...
show less
Brute-Force
SSH
Anonymous
May 30 07:36:04 f2b auth.info sshd[950555]: Failed password for root from 138.122.140.200 port 37356 ...
show moreMay 30 07:36:04 f2b auth.info sshd[950555]: Failed password for root from 138.122.140.200 port 37356 ssh2
May 30 07:36:06 f2b auth.info sshd[950557]: Failed password for root from 138.122.140.200 port 37370 ssh2
May 30 07:36:08 f2b auth.info sshd[950559]: Failed password for root from 138.122.140.200 port 39896 ssh2
...
show less
2026-05-30T08:30:41.329224+02:00 ipoac.nl sshd-session-: Invalid user ubuntu from 138.122.140.200 po ...
show more2026-05-30T08:30:41.329224+02:00 ipoac.nl sshd-session-: Invalid user ubuntu from 138.122.140.200 port 58052
2026-05-30T09:01:42.836446+02:00 ipoac.nl sshd-session-: Invalid user ubuntu from 138.122.140.200 port 48254
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
May 29 21:16:43 jeeves sshd[120053]: Failed password for root from 138.122.140.200 port 50464 ssh2
M ...
show moreMay 29 21:16:43 jeeves sshd[120053]: Failed password for root from 138.122.140.200 port 50464 ssh2
May 29 21:16:45 jeeves sshd[120061]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.122.140.200 user=root
May 29 21:16:48 jeeves sshd[120061]: Failed password for root from 138.122.140.200 port 50476 ssh2
...
show less
2026-05-30T05:03:32.701450+02:00 gw-de19-01.guestgw.net sshd[681387]: Connection closed by authentic ...
show more2026-05-30T05:03:32.701450+02:00 gw-de19-01.guestgw.net sshd[681387]: Connection closed by authenticating user root 138.122.140.200 port 55298 [preauth]
2026-05-30T05:03:34.401943+02:00 gw-de19-01.guestgw.net sshd[681397]: Connection closed by authenticating user root 138.122.140.200 port 55302 [preauth]
2026-05-30T05:03:35.913620+02:00 gw-de19-01.guestgw.net sshd[681403]: Connection closed by authenticating user root 138.122.140.200 port 55304 [preauth]
2026-05-30T05:03:37.437106+02:00 gw-de19-01.guestgw.net sshd[681414]: Connection closed by authenticating user root 138.122.140.200 port 55312 [preauth]
2026-05-30T05:03:39.060518+02:00 gw-de19-01.guestgw.net sshd[681423]: Connection closed by authenticating user root 138.122.140.200 port 55274 [preauth]
show less
2026-05-30T04:50:08.273510+03:00 vatnik sshd[243574]: User root from 138.122.140.200 not allowed bec ...
show more2026-05-30T04:50:08.273510+03:00 vatnik sshd[243574]: User root from 138.122.140.200 not allowed because listed in DenyUsers
...
show less
Hacking
Brute-Force
SSH
Showing 121 to
135
of 145 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩