This IP address has been reported a total of
1,915
times from
698 distinct
sources.
138.197.200.106 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T05:00:59.223457+02:00 root260 sshd-session[2008561]: Failed password for invalid user jpe ...
show more2026-06-03T05:00:59.223457+02:00 root260 sshd-session[2008561]: Failed password for invalid user jperez from 138.197.200.106 port 47848 ssh2
2026-06-03T05:04:29.318173+02:00 root260 sshd-session[2066589]: Invalid user lby from 138.197.200.106 port 57666
2026-06-03T05:04:29.319671+02:00 root260 sshd-session[2066589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106
2026-06-03T05:04:30.931459+02:00 root260 sshd-session[2066589]: Failed password for invalid user lby from 138.197.200.106 port 57666 ssh2
2026-06-03T05:08:01.967453+02:00 root260 sshd-session[2122973]: Invalid user vps from 138.197.200.106 port 51638
...
show less
Jun 3 01:56:30 apo sshd[923]: Invalid user ubuntu from 138.197.200.106 port 49210
Jun 3 01:56:30 a ...
show moreJun 3 01:56:30 apo sshd[923]: Invalid user ubuntu from 138.197.200.106 port 49210
Jun 3 01:56:30 apo sshd[923]: Failed password for invalid user ubuntu from 138.197.200.106 port 49210 ssh2
Jun 3 02:00:09 apo sshd[7882]: Failed password for root from 138.197.200.106 port 36580 ssh2
Jun 3 02:03:36 apo sshd[13295]: Failed password for root from 138.197.200.106 port 36154 ssh2
...
show less
Jun 3 01:42:07 HydrAttack-TW-HL sshd[440013]: Invalid user newftpuser from 138.197.200.106 port 400 ...
show moreJun 3 01:42:07 HydrAttack-TW-HL sshd[440013]: Invalid user newftpuser from 138.197.200.106 port 40092
Jun 3 01:53:22 HydrAttack-TW-HL sshd[440403]: Invalid user testuser from 138.197.200.106 port 36074
Jun 3 02:04:02 HydrAttack-TW-HL sshd[441214]: Invalid user watcher from 138.197.200.106 port 51076
Jun 3 02:07:41 HydrAttack-TW-HL sshd[441327]: Invalid user dispatch from 138.197.200.106 port 54430
Jun 3 02:11:02 HydrAttack-TW-HL sshd[441564]: Invalid user patrol from 138.197.200.106 port 43308
...
show less
Jun 3 00:41:07 apo sshd[27139]: Invalid user newftpuser from 138.197.200.106 port 41482
Jun 3 00:4 ...
show moreJun 3 00:41:07 apo sshd[27139]: Invalid user newftpuser from 138.197.200.106 port 41482
Jun 3 00:41:07 apo sshd[27139]: Failed password for invalid user newftpuser from 138.197.200.106 port 41482 ssh2
Jun 3 00:53:11 apo sshd[16773]: Invalid user testuser from 138.197.200.106 port 46362
Jun 3 00:53:11 apo sshd[16773]: Failed password for invalid user testuser from 138.197.200.106 port 46362 ssh2
...
show less
Jun 3 00:37:07 pbx-router-01.de.pbx-host.com sshd[3410558]: Disconnected from invalid user newftpus ...
show moreJun 3 00:37:07 pbx-router-01.de.pbx-host.com sshd[3410558]: Disconnected from invalid user newftpuser 138.197.200.106 port 49994 [preauth]
Jun 3 00:48:40 pbx-router-01.de.pbx-host.com sshd[3412996]: Invalid user script from 138.197.200.106 port 56154
Jun 3 00:48:40 pbx-router-01.de.pbx-host.com sshd[3412996]: Disconnected from invalid user script 138.197.200.106 port 56154 [preauth]
Jun 3 00:52:08 pbx-router-01.de.pbx-host.com sshd[3413811]: Invalid user testuser from 138.197.200.106 port 45514
Jun 3 00:52:08 pbx-router-01.de.pbx-host.com sshd[3413811]: Disconnected from invalid user testuser 138.197.200.106 port 45514 [preauth]
show less
Jun 2 16:46:49 b146-68 sshd[386423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 2 16:46:49 b146-68 sshd[386423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.200.106
Jun 2 16:46:51 b146-68 sshd[386423]: Failed password for invalid user newftpuser from 138.197.200.106 port 55988 ssh2
Jun 2 16:51:07 b146-68 sshd[386486]: Invalid user script from 138.197.200.106 port 60628
...
show less
Brute-Force
SSH
Showing 46 to
60
of 1915 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ