This IP address has been reported a total of
49
times from
46 distinct
sources.
138.197.171.221 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 8882)
Source port: 61015
TTL: 241
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8882)
Source port: 61015
TTL: 241
Packet length: 44
TOS: 0x08
This report (for 138.197.171.221) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.171.221 (CA/Canada/-): 2 in t ...
show more(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 138.197.171.221 (CA/Canada/-): 2 in the last 3600 secs (0-193)
show less
2026-03-11T08:38:19.483333+11:00 sleep-salami sshd[36570]: Connection closed by authenticating user ...
show more2026-03-11T08:38:19.483333+11:00 sleep-salami sshd[36570]: Connection closed by authenticating user root 138.197.171.221 port 44752 [preauth]
2026-03-11T08:39:25.908275+11:00 sleep-salami sshd[36582]: Connection closed by authenticating user root 138.197.171.221 port 39692 [preauth]
2026-03-11T08:40:29.603575+11:00 sleep-salami sshd[36594]: Connection closed by authenticating user root 138.197.171.221 port 52280 [preauth]
2026-03-11T08:41:31.123723+11:00 sleep-salami sshd[36608]: Connection closed by authenticating user root 138.197.171.221 port 60130 [preauth]
2026-03-11T08:42:26.516016+11:00 sleep-salami sshd[36614]: Connection closed by authenticating user root 138.197.171.221 port 46426 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Mar 10 17:40:01 newyork sshd[1465576]: Failed password for root from 138.197.171.221 port 43238 ssh2 ...
show moreMar 10 17:40:01 newyork sshd[1465576]: Failed password for root from 138.197.171.221 port 43238 ssh2
Mar 10 17:41:07 newyork sshd[1465592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.221 user=root
Mar 10 17:41:09 newyork sshd[1465592]: Failed password for root from 138.197.171.221 port 51718 ssh2
Mar 10 17:42:03 newyork sshd[1465601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.221 user=root
Mar 10 17:42:04 newyork sshd[1465601]: Failed password for root from 138.197.171.221 port 37496 ssh2
...
show less
2026-03-11T06:39:33.970710+09:00 *** sshd-session[2357959]: Failed password for root from 138.197.1 ...
show more2026-03-11T06:39:33.970710+09:00 *** sshd-session[2357959]: Failed password for root from 138.197.171.221 port 57890 ssh2
2026-03-11T06:40:37.868278+09:00 *** sshd-session[2358227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.221 user=root
2026-03-11T06:40:40.251632+09:00 *** sshd-session[2358227]: Failed password for root from 138.197.171.221 port 60072 ssh2
show less
2026-03-11T00:39:15.893099tim.mtkrbti.by sshd[26787]: Failed password for root from 138.197.171.221 ...
show more2026-03-11T00:39:15.893099tim.mtkrbti.by sshd[26787]: Failed password for root from 138.197.171.221 port 50112 ssh2
2026-03-11T00:40:17.012208tim.mtkrbti.by sshd[26806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.171.221 user=root
2026-03-11T00:40:19.242517tim.mtkrbti.by sshd[26806]: Failed password for root from 138.197.171.221 port 34130 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 49 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩