This IP address has been reported a total of
74
times from
60 distinct
sources.
138.197.197.27 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 1 17:21:48 fw03 sshd[932786]: Invalid user mysql from 138.197.197.27 port 59376
...
Brute-Force
SSH
Anonymous
2026-09-01T17:15:16.499018+02:00 ubuntu sshd-session[2435917]: Invalid user nginx from 138.197.197.2 ...
show more2026-09-01T17:15:16.499018+02:00 ubuntu sshd-session[2435917]: Invalid user nginx from 138.197.197.27 port 41290
2026-09-01T17:15:16.647855+02:00 ubuntu sshd-session[2435917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
2026-09-01T17:15:18.700110+02:00 ubuntu sshd-session[2435917]: Failed password for invalid user nginx from 138.197.197.27 port 41290 ssh2
2026-09-01T17:18:17.205936+02:00 ubuntu sshd-session[2436351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27 user=mysql
2026-09-01T17:18:19.421878+02:00 ubuntu sshd-session[2436351]: Failed password for mysql from 138.197.197.27 port 38816 ssh2
...
show less
2026-09-01T15:11:49.303612+00:00 noctra sshd[825946]: Invalid user sdadmin from 138.197.197.27 port ...
show more2026-09-01T15:11:49.303612+00:00 noctra sshd[825946]: Invalid user sdadmin from 138.197.197.27 port 52378
2026-09-01T15:14:45.698382+00:00 noctra sshd[835410]: Invalid user splunk from 138.197.197.27 port 41542
2026-09-01T15:17:47.331777+00:00 noctra sshd[845392]: Invalid user nginx from 138.197.197.27 port 43696
...
show less
23 invalid SSH login attempts from 138.197.197.27 in the last 1.1 hours
Brute-Force
SSH
Anonymous
2026-09-01T16:54:54.418594+02:00 ubuntu sshd-session[2432961]: Failed password for invalid user mast ...
show more2026-09-01T16:54:54.418594+02:00 ubuntu sshd-session[2432961]: Failed password for invalid user master from 138.197.197.27 port 47736 ssh2
2026-09-01T16:57:53.389071+02:00 ubuntu sshd-session[2433382]: Invalid user master from 138.197.197.27 port 33322
2026-09-01T16:57:53.537701+02:00 ubuntu sshd-session[2433382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
2026-09-01T16:57:55.993904+02:00 ubuntu sshd-session[2433382]: Failed password for invalid user master from 138.197.197.27 port 33322 ssh2
2026-09-01T17:00:49.137178+02:00 ubuntu sshd-session[2433807]: Invalid user user from 138.197.197.27 port 42902
...
show less
Brute-Force
Anonymous
2026-09-01T16:05:30.054597+02:00 dasec-proxy-ssh sshd[684357]: Invalid user oracle from 138.197.197. ...
show more2026-09-01T16:05:30.054597+02:00 dasec-proxy-ssh sshd[684357]: Invalid user oracle from 138.197.197.27 port 41662
2026-09-01T16:08:20.088230+02:00 dasec-proxy-ssh sshd[684368]: Invalid user hadoop from 138.197.197.27 port 49736
2026-09-01T16:11:14.743899+02:00 dasec-proxy-ssh sshd[684373]: Invalid user hadoop from 138.197.197.27 port 53942
2026-09-01T16:14:03.706943+02:00 dasec-proxy-ssh sshd[684382]: Invalid user hadoop from 138.197.197.27 port 42448
2026-09-01T16:16:47.789218+02:00 dasec-proxy-ssh sshd[684390]: Invalid user hadoop from 138.197.197.27 port 54056
2026-09-01T16:19:37.134538+02:00 dasec-proxy-ssh sshd[684397]: Invalid user hadoop from 138.197.197.27 port 58792
2026-09-01T16:22:27.128510+02:00 dasec-proxy-ssh sshd[684403]: Invalid user oracle from 138.197.197.27 port 56786
2026-09-01T16:25:23.186876+02:00 dasec-proxy-ssh sshd[684412]: Invalid user oracle from 138.197.197.27 port 41462
2026-09-01T16:28:16.372770+02:00 dasec-proxy-ssh sshd[684431]: Invalid user oracle from
...
show less
2026-09-01T17:59:10.911244nar.lt sshd[5195]: Invalid user master from 138.197.197.27 port 38720
2026 ...
show more2026-09-01T17:59:10.911244nar.lt sshd[5195]: Invalid user master from 138.197.197.27 port 38720
2026-09-01T17:59:11.080341nar.lt sshd[5195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
2026-09-01T17:59:13.266438nar.lt sshd[5195]: Failed password for invalid user master from 138.197.197.27 port 38720 ssh2
2026-09-01T17:59:11.080341nar.lt sshd[5195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
2026-09-01T17:59:13.266438nar.lt sshd[5195]: Failed password for invalid user master from 138.197.197.27 port 38720 ssh2
show less
2026-09-01T17:51:07.367997docker010 sshd[4110739]: Invalid user master from 138.197.197.27 port 5558 ...
show more2026-09-01T17:51:07.367997docker010 sshd[4110739]: Invalid user master from 138.197.197.27 port 55582
2026-09-01T17:53:52.568459docker010 sshd[4111765]: Invalid user master from 138.197.197.27 port 36782
2026-09-01T17:56:49.620705docker010 sshd[4112952]: Invalid user master from 138.197.197.27 port 49626
...
show less
Brute-Force
SSH
Anonymous
Phishing and smtprelay and use of leaked account data
Hacking
Anonymous
2026-09-01T16:37:35.715785+02:00 ubuntu sshd-session[2430456]: Failed password for invalid user orac ...
show more2026-09-01T16:37:35.715785+02:00 ubuntu sshd-session[2430456]: Failed password for invalid user oracle from 138.197.197.27 port 42596 ssh2
2026-09-01T16:40:29.365817+02:00 ubuntu sshd-session[2430956]: Invalid user oracle from 138.197.197.27 port 58480
2026-09-01T16:40:29.517006+02:00 ubuntu sshd-session[2430956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
2026-09-01T16:40:31.752689+02:00 ubuntu sshd-session[2430956]: Failed password for invalid user oracle from 138.197.197.27 port 58480 ssh2
2026-09-01T16:43:27.981223+02:00 ubuntu sshd-session[2431362]: Invalid user oracle from 138.197.197.27 port 51718
...
show less
Sep 1 16:41:04 fw03 sshd[932297]: Invalid user oracle from 138.197.197.27 port 51866
Sep 1 16:41:0 ...
show moreSep 1 16:41:04 fw03 sshd[932297]: Invalid user oracle from 138.197.197.27 port 51866
Sep 1 16:41:04 fw03 sshd[932297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.197.27
Sep 1 16:41:06 fw03 sshd[932297]: Failed password for invalid user oracle from 138.197.197.27 port 51866 ssh2
...
show less
2026-09-01T07:27:44.655156-07:00 cm0app00.cyberstadium.com sshd[2789981]: Invalid user oracle from 1 ...
show more2026-09-01T07:27:44.655156-07:00 cm0app00.cyberstadium.com sshd[2789981]: Invalid user oracle from 138.197.197.27 port 39752
2026-09-01T07:30:35.565185-07:00 cm0app00.cyberstadium.com sshd[2791730]: Invalid user oracle from 138.197.197.27 port 46310
2026-09-01T07:33:24.968488-07:00 cm0app00.cyberstadium.com sshd[2793489]: Invalid user oracle from 138.197.197.27 port 39768
2026-09-01T07:36:10.378463-07:00 cm0app00.cyberstadium.com sshd[2795106]: Invalid user oracle from 138.197.197.27 port 51108
2026-09-01T07:39:04.588957-07:00 cm0app00.cyberstadium.com sshd[2796899]: Invalid user oracle from 138.197.197.27 port 45488
...
show less
Brute-Force
SSH
Showing 1 to
15
of 74 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩