This IP address has been reported a total of
197
times from
110 distinct
sources.
138.197.188.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2026-06-19T10:44:15.538968+00:00 U ...
show more[Auto ban] Fail2Ban jail sshd on host: 3 failures in 2h. Excerpt: 2026-06-19T10:44:15.538968+00:00 Ubuntu-Toronto1 sshd[2001097]: Invalid user TestUser from 138.197.188.20 port 60374
2026-06-19T10:46:46.532351+00:00 Ubuntu-Toronto1 sshd[2002137]: Invalid user TestUser from 138.197.188.20 port 57856
2026-06-19T10:49:34.632479+00:00 Ubuntu-Toronto1 sshd[2003269]: Invalid user TestUser from 138.197.188.20 port 53856
show less
2026-06-19T12:43:55.387372+02:00 deneir sshd[2522417]: Failed password for invalid user TestUser fro ...
show more2026-06-19T12:43:55.387372+02:00 deneir sshd[2522417]: Failed password for invalid user TestUser from 138.197.188.20 port 60838 ssh2
2026-06-19T12:46:21.358406+02:00 deneir sshd[2528988]: Invalid user TestUser from 138.197.188.20 port 34020
2026-06-19T12:46:21.365154+02:00 deneir sshd[2528988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
2026-06-19T12:46:23.047617+02:00 deneir sshd[2528988]: Failed password for invalid user TestUser from 138.197.188.20 port 34020 ssh2
2026-06-19T12:49:08.727141+02:00 deneir sshd[2536477]: Invalid user TestUser from 138.197.188.20 port 43798
...
show less
Jun 19 12:43:43 portfolio-web sshd[1460718]: Failed password for invalid user TestUser from 138.197. ...
show moreJun 19 12:43:43 portfolio-web sshd[1460718]: Failed password for invalid user TestUser from 138.197.188.20 port 45948 ssh2
Jun 19 12:46:07 portfolio-web sshd[1460724]: Invalid user TestUser from 138.197.188.20 port 58798
Jun 19 12:46:07 portfolio-web sshd[1460724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
Jun 19 12:46:10 portfolio-web sshd[1460724]: Failed password for invalid user TestUser from 138.197.188.20 port 58798 ssh2
Jun 19 12:48:55 portfolio-web sshd[1460754]: Invalid user TestUser from 138.197.188.20 port 45400
...
show less
Jun 19 12:43:33 vpn sshd[3992868]: Invalid user TestUser from 138.197.188.20 port 37858
Jun 19 12:45 ...
show moreJun 19 12:43:33 vpn sshd[3992868]: Invalid user TestUser from 138.197.188.20 port 37858
Jun 19 12:45:59 vpn sshd[3993309]: Invalid user TestUser from 138.197.188.20 port 44828
Jun 19 12:48:45 vpn sshd[3993806]: Invalid user TestUser from 138.197.188.20 port 34958
...
show less
2026-06-19T19:43:27.475851+09:00 Mitt-JP sshd[1438099]: Invalid user TestUser from 138.197.188.20 po ...
show more2026-06-19T19:43:27.475851+09:00 Mitt-JP sshd[1438099]: Invalid user TestUser from 138.197.188.20 port 57630
2026-06-19T19:45:53.740604+09:00 Mitt-JP sshd[1438112]: Invalid user TestUser from 138.197.188.20 port 34872
2026-06-19T19:48:39.033020+09:00 Mitt-JP sshd[1438159]: Invalid user TestUser from 138.197.188.20 port 35766
...
show less
2026-06-19T05:43:27.795736-05:00 vault sshd[1428971]: Failed password for invalid user TestUser from ...
show more2026-06-19T05:43:27.795736-05:00 vault sshd[1428971]: Failed password for invalid user TestUser from 138.197.188.20 port 51584 ssh2
2026-06-19T05:45:51.723291-05:00 vault sshd[1447219]: Invalid user TestUser from 138.197.188.20 port 47918
2026-06-19T05:45:51.769675-05:00 vault sshd[1447219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
2026-06-19T05:45:53.667588-05:00 vault sshd[1447219]: Failed password for invalid user TestUser from 138.197.188.20 port 47918 ssh2
2026-06-19T05:48:36.795022-05:00 vault sshd[1468601]: Invalid user TestUser from 138.197.188.20 port 41412
...
show less
Jun 19 10:43:19 vps-93630192 sshd[994852]: Failed password for invalid user TestUser from 138.197.18 ...
show moreJun 19 10:43:19 vps-93630192 sshd[994852]: Failed password for invalid user TestUser from 138.197.188.20 port 41836 ssh2
Jun 19 10:45:43 vps-93630192 sshd[997732]: Invalid user TestUser from 138.197.188.20 port 51132
Jun 19 10:45:43 vps-93630192 sshd[997732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
Jun 19 10:45:45 vps-93630192 sshd[997732]: Failed password for invalid user TestUser from 138.197.188.20 port 51132 ssh2
Jun 19 10:48:27 vps-93630192 sshd[1001652]: Invalid user TestUser from 138.197.188.20 port 60920
...
show less
2026-06-19T10:43:11.065713+00:00 vultr sshd[1075490]: Failed password for invalid user TestUser from ...
show more2026-06-19T10:43:11.065713+00:00 vultr sshd[1075490]: Failed password for invalid user TestUser from 138.197.188.20 port 56972 ssh2
2026-06-19T10:45:35.368970+00:00 vultr sshd[1077505]: Invalid user TestUser from 138.197.188.20 port 34342
2026-06-19T10:45:35.385317+00:00 vultr sshd[1077505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
2026-06-19T10:45:37.418772+00:00 vultr sshd[1077505]: Failed password for invalid user TestUser from 138.197.188.20 port 34342 ssh2
2026-06-19T10:48:18.289678+00:00 vultr sshd[1079807]: Invalid user TestUser from 138.197.188.20 port 34256
...
show less
Jun 19 10:45:32 UK1 sshd[3640338]: Invalid user TestUser from 138.197.188.20 port 56104
Jun 19 10:45 ...
show moreJun 19 10:45:32 UK1 sshd[3640338]: Invalid user TestUser from 138.197.188.20 port 56104
Jun 19 10:45:32 UK1 sshd[3640338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.188.20
Jun 19 10:45:32 UK1 sshd[3640338]: Invalid user TestUser from 138.197.188.20 port 56104
Jun 19 10:45:34 UK1 sshd[3640338]: Failed password for invalid user TestUser from 138.197.188.20 port 56104 ssh2
Jun 19 10:48:14 UK1 sshd[3640346]: Invalid user TestUser from 138.197.188.20 port 38592
...
show less
Brute-Force
SSH
Showing 1 to
15
of 197 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ