This IP address has been reported a total of
1,915
times from
698 distinct
sources.
138.197.200.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 3 23:55:02 vps-1 sshd-session[298647]: Invalid user daniel from 138.197.200.106 port 42110
Jun ...
show moreJun 3 23:55:02 vps-1 sshd-session[298647]: Invalid user daniel from 138.197.200.106 port 42110
Jun 4 00:01:21 vps-1 sshd-session[298897]: Invalid user alex from 138.197.200.106 port 50694
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Jun 3 23:10:55 vps-1 sshd-session[297048]: Invalid user test from 138.197.200.106 port 36096
Jun 3 ...
show moreJun 3 23:10:55 vps-1 sshd-session[297048]: Invalid user test from 138.197.200.106 port 36096
Jun 3 23:20:19 vps-1 sshd-session[297359]: Invalid user cs from 138.197.200.106 port 33528
Jun 3 23:23:30 vps-1 sshd-session[297454]: Invalid user mapadmin from 138.197.200.106 port 45576
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T04:52:25.510049+02:00 smvps001 sshd-session[94218]: Invalid user ubuntu from 138.197.200. ...
show more2026-06-04T04:52:25.510049+02:00 smvps001 sshd-session[94218]: Invalid user ubuntu from 138.197.200.106 port 60158
2026-06-04T04:52:25.676805+02:00 smvps001 sshd-session[94218]: Disconnected from invalid user ubuntu 138.197.200.106 port 60158 [preauth]
2026-06-04T05:00:41.932279+02:00 smvps001 sshd-session[94823]: Invalid user test7 from 138.197.200.106 port 58040
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T09:08:14.337545+08:00 netcup-nue-1 sshd[3833521]: Invalid user vagrant from 138.197.200.1 ...
show more2026-06-04T09:08:14.337545+08:00 netcup-nue-1 sshd[3833521]: Invalid user vagrant from 138.197.200.106 port 42602
2026-06-04T09:14:22.890396+08:00 netcup-nue-1 sshd[3839124]: Invalid user eve from 138.197.200.106 port 54684
2026-06-04T09:14:22.890396+08:00 netcup-nue-1 sshd[3839124]: Invalid user eve from 138.197.200.106 port 54684
2026-06-04T09:20:39.062045+08:00 netcup-nue-1 sshd[3844549]: Invalid user vmarketing from 138.197.200.106 port 43294
...
show less
2026-06-04T00:48:37.313369+00:00 it-mil01 sshd-session[1233222]: Invalid user jayesh from 138.197.20 ...
show more2026-06-04T00:48:37.313369+00:00 it-mil01 sshd-session[1233222]: Invalid user jayesh from 138.197.200.106 port 50604
2026-06-04T00:54:34.294946+00:00 it-mil01 sshd-session[1233758]: Connection from 138.197.200.106 port 55002 on 5.231.80.191 port 22 rdomain ""
2026-06-04T00:54:35.213692+00:00 it-mil01 sshd-session[1233758]: Invalid user sonarqube from 138.197.200.106 port 55002
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T08:14:41.979342+08:00 netcup-nue-1 sshd[3783452]: Invalid user deploy from 138.197.200.10 ...
show more2026-06-04T08:14:41.979342+08:00 netcup-nue-1 sshd[3783452]: Invalid user deploy from 138.197.200.106 port 38322
2026-06-04T08:22:22.546368+08:00 netcup-nue-1 sshd[3790920]: Invalid user fiuser from 138.197.200.106 port 33516
2026-06-04T08:37:25.496299+08:00 netcup-nue-1 sshd[3805413]: Invalid user help from 138.197.200.106 port 40518
2026-06-04T08:44:22.645468+08:00 netcup-nue-1 sshd[3812160]: Invalid user test from 138.197.200.106 port 34262
2026-06-04T08:50:25.208409+08:00 netcup-nue-1 sshd[3818008]: Invalid user smbuser from 138.197.200.106 port 52152
...
show less
2026-06-04T02:35:32.540005+02:00 axisverse sshd-session[1174917]: Invalid user vbox from 138.197.200 ...
show more2026-06-04T02:35:32.540005+02:00 axisverse sshd-session[1174917]: Invalid user vbox from 138.197.200.106 port 36970
2026-06-04T02:38:38.755608+02:00 axisverse sshd-session[1180879]: Invalid user help from 138.197.200.106 port 46464
2026-06-04T02:45:51.233172+02:00 axisverse sshd-session[1194293]: Invalid user test from 138.197.200.106 port 58168
...
show less
2026-06-04T03:13:21.747119+03:00 vatnik sshd[62095]: User root from 138.197.200.106 not allowed beca ...
show more2026-06-04T03:13:21.747119+03:00 vatnik sshd[62095]: User root from 138.197.200.106 not allowed because listed in DenyUsers
...
show less
Jun 3 20:01:15 proxy-03 sshd[868078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show moreJun 3 20:01:15 proxy-03 sshd[868078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=ubuntu
Jun 3 20:01:18 proxy-03 sshd[868078]: Failed password for ubuntu from 138.197.200.106 port 34646 ssh2
Jun 3 20:04:33 proxy-03 sshd[872534]: Invalid user misha from 138.197.200.106 port 45224
Jun 3 20:04:33 proxy-03 sshd[872534]: Invalid user misha from 138.197.200.106 port 45224
...
show less
Jun 3 19:34:44 proxy-03 sshd[819552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ...
show moreJun 3 19:34:44 proxy-03 sshd[819552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106
Jun 3 19:34:46 proxy-03 sshd[819552]: Failed password for invalid user easy from 138.197.200.106 port 45298 ssh2
Jun 3 19:34:44 proxy-03 sshd[819552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106
Jun 3 19:34:46 proxy-03 sshd[819552]: Failed password for invalid user easy from 138.197.200.106 port 45298 ssh2
Jun 3 19:38:04 proxy-03 sshd[824001]: Invalid user deployer from 138.197.200.106 port 36622
...
show less
Jun 4 00:21:20 m73p sshd[626658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJun 4 00:21:20 m73p sshd[626658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106 user=root
Jun 4 00:21:22 m73p sshd[626658]: Failed password for root from 138.197.200.106 port 35848 ssh2
Jun 4 00:24:34 m73p sshd[627935]: Invalid user solarwinds from 138.197.200.106 port 38172
Jun 4 00:24:34 m73p sshd[627935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106
Jun 4 00:24:35 m73p sshd[627935]: Failed password for invalid user solarwinds from 138.197.200.106 port 38172 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1915 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩