This IP address has been reported a total of
51
times from
47 distinct
sources.
138.197.204.107 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 45
reports;
Germany
with 4
reports;
Australia
with 1
report.
The most common categories in these recent reports were:
SSH
48
times;
Brute-Force
46
times;
Port Scan
5
times;
Hacking
2
times;
FTP Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-07T14:11:34.995818-04:00 mail.lesbians.cat sshd[60005]: Failed password for invalid user hen ...
show more2026-10-07T14:11:34.995818-04:00 mail.lesbians.cat sshd[60005]: Failed password for invalid user henry from 138.197.204.107 port 44782 ssh2
2026-10-07T14:13:54.244447-04:00 mail.lesbians.cat sshd[60808]: Invalid user florence from 138.197.204.107 port 47632
2026-10-07T14:13:54.310401-04:00 mail.lesbians.cat sshd[60808]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.204.107
2026-10-07T14:13:55.782592-04:00 mail.lesbians.cat sshd[60808]: Failed password for invalid user florence from 138.197.204.107 port 47632 ssh2
2026-10-07T14:16:08.213096-04:00 mail.lesbians.cat sshd[61479]: Invalid user samuel from 138.197.204.107 port 34422
...
show less
Brute-Force
SSH
Anonymous
2026-10-07T18:11:25.963022+00:00 s158416 sshd[911999]: Failed password for invalid user henry from 1 ...
show more2026-10-07T18:11:25.963022+00:00 s158416 sshd[911999]: Failed password for invalid user henry from 138.197.204.107 port 37266 ssh2
2026-10-07T18:13:45.391656+00:00 s158416 sshd[912132]: Invalid user florence from 138.197.204.107 port 50698
2026-10-07T18:13:45.436897+00:00 s158416 sshd[912132]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.204.107
2026-10-07T18:13:47.672519+00:00 s158416 sshd[912132]: Failed password for invalid user florence from 138.197.204.107 port 50698 ssh2
2026-10-07T18:16:00.150654+00:00 s158416 sshd[912300]: Invalid user samuel from 138.197.204.107 port 46220
...
show less
2026-10-07T18:11:08.212207+00:00 kocer-main-webserver sshd[4081911]: Invalid user henry from 138.197 ...
show more2026-10-07T18:11:08.212207+00:00 kocer-main-webserver sshd[4081911]: Invalid user henry from 138.197.204.107 port 37532
2026-10-07T18:13:30.025512+00:00 kocer-main-webserver sshd[4082149]: Invalid user florence from 138.197.204.107 port 54502
2026-10-07T18:15:45.027794+00:00 kocer-main-webserver sshd[4082407]: Invalid user samuel from 138.197.204.107 port 34588
...
show less
Report 2732945 with IP 3780514 for SSH brute-force attack by source 3775170 via ssh-honeypot/0.2.0+h ...
show moreReport 2732945 with IP 3780514 for SSH brute-force attack by source 3775170 via ssh-honeypot/0.2.0+http
show less
2026-10-07T18:08:12.141594shield sshd\[29338\]: Invalid user peng from 138.197.204.107 port 59142
20 ...
show more2026-10-07T18:08:12.141594shield sshd\[29338\]: Invalid user peng from 138.197.204.107 port 59142
2026-10-07T18:08:12.219318shield sshd\[29338\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.204.107
2026-10-07T18:08:14.072942shield sshd\[29338\]: Failed password for invalid user peng from 138.197.204.107 port 59142 ssh2
2026-10-07T18:10:22.672025shield sshd\[29823\]: Invalid user henry from 138.197.204.107 port 37868
2026-10-07T18:10:22.750383shield sshd\[29823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.204.107
show less
2026-10-07T10:56:47.971263-07:00 cm0app00.cyberstadium.com sshd[2849540]: Invalid user ira from 138. ...
show more2026-10-07T10:56:47.971263-07:00 cm0app00.cyberstadium.com sshd[2849540]: Invalid user ira from 138.197.204.107 port 45236
2026-10-07T10:59:06.173468-07:00 cm0app00.cyberstadium.com sshd[2850891]: Invalid user priya from 138.197.204.107 port 46042
2026-10-07T11:01:24.502072-07:00 cm0app00.cyberstadium.com sshd[2852053]: Invalid user hannah from 138.197.204.107 port 36466
2026-10-07T11:03:32.105728-07:00 cm0app00.cyberstadium.com sshd[2853463]: Invalid user lan from 138.197.204.107 port 51198
2026-10-07T11:05:42.403561-07:00 cm0app00.cyberstadium.com sshd[2854601]: Invalid user jing from 138.197.204.107 port 46290
...
show less
2026-10-08T01:56:34.423301+08:00 sshd-session[2494601]: Invalid user ira from 138.197.204.107 port 5 ...
show more2026-10-08T01:56:34.423301+08:00 sshd-session[2494601]: Invalid user ira from 138.197.204.107 port 51526
2026-10-08T01:58:51.705649+08:00 sshd-session[2494682]: Invalid user priya from 138.197.204.107 port 37346
2026-10-08T02:01:10.704445+08:00 sshd-session[2494744]: Invalid user hannah from 138.197.204.107 port 56178
2026-10-08T02:03:19.393919+08:00 sshd-session[2494800]: Invalid user lan from 138.197.204.107 port 45860
2026-10-08T02:05:29.035505+08:00 sshd-session[2494861]: Invalid user jing from 138.197.204.107 port 43552
...
show less
2026-10-07T10:55:22.341903-07:00 RoblOracle sshd-session[64344]: Invalid user ira from 138.197.204.1 ...
show more2026-10-07T10:55:22.341903-07:00 RoblOracle sshd-session[64344]: Invalid user ira from 138.197.204.107 port 33960
2026-10-07T10:57:38.550354-07:00 RoblOracle sshd-session[64643]: Invalid user priya from 138.197.204.107 port 54630
2026-10-07T10:59:57.357446-07:00 RoblOracle sshd-session[64869]: Invalid user hannah from 138.197.204.107 port 38700
2026-10-07T11:02:12.765519-07:00 RoblOracle sshd-session[65082]: Invalid user lan from 138.197.204.107 port 54790
2026-10-07T11:04:19.487605-07:00 RoblOracle sshd-session[65279]: Invalid user jing from 138.197.204.107 port 45146
...
show less
Brute-Force
SSH
Anonymous
2026-10-07T17:55:22.878837+00:00 rayhem.dev sshd[1100113]: Invalid user ira from 138.197.204.107 por ...
show more2026-10-07T17:55:22.878837+00:00 rayhem.dev sshd[1100113]: Invalid user ira from 138.197.204.107 port 44632
2026-10-07T17:57:39.004207+00:00 rayhem.dev sshd[1100657]: Invalid user priya from 138.197.204.107 port 40924
2026-10-07T17:59:57.605603+00:00 rayhem.dev sshd[1101246]: Invalid user hannah from 138.197.204.107 port 36968
2026-10-07T18:02:12.967934+00:00 rayhem.dev sshd[1101786]: Invalid user lan from 138.197.204.107 port 53232
2026-10-07T18:04:19.983746+00:00 rayhem.dev sshd[1102386]: Invalid user jing from 138.197.204.107 port 35466
...
show less
Oct 7 17:55:08 instance-ytstream sshd[766608]: Invalid user ira from 138.197.204.107 port 45504
Oct ...
show moreOct 7 17:55:08 instance-ytstream sshd[766608]: Invalid user ira from 138.197.204.107 port 45504
Oct 7 17:57:24 instance-ytstream sshd[766801]: Invalid user priya from 138.197.204.107 port 51574
Oct 7 17:59:43 instance-ytstream sshd[766996]: Invalid user hannah from 138.197.204.107 port 53230
Oct 7 18:01:59 instance-ytstream sshd[767164]: Invalid user lan from 138.197.204.107 port 48502
Oct 7 18:04:06 instance-ytstream sshd[767329]: Invalid user jing from 138.197.204.107 port 57180
...
show less
