This IP address has been reported a total of
28
times from
27 distinct
sources.
138.197.67.245 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
(sshd) Failed SSH login from 138.197.67.245 (US/United States/-): 5 in the last 3600 secs; Ports: 22 ...
show more(sshd) Failed SSH login from 138.197.67.245 (US/United States/-): 5 in the last 3600 secs; Ports: 22; Direction: in; Trigger: LF_SSHD; Logs: Mar 1 17:21:51 w sshd[2300457]: Invalid user oracle from 138.197.67.245 port 49384
Mar 1 17:22:32 w sshd[2300884]: Invalid user user from 138.197.67.245 port 53664
Mar 1 17:23:13 w sshd[2301133]: Invalid user vps from 138.197.67.245 port 41002
Mar 1 17:23:54 w sshd[2301344]: Invalid user testuser from 138.197.67.245 port 45370
Mar 1 17:24:33 w sshd[2301716]: Invalid user server from 138.197.67.245 port 60820
show less
Mar 1 22:21:15 mk-bgp sshd[28312]: Invalid user postgres from 138.197.67.245 port 41076
Mar 1 22:2 ...
show moreMar 1 22:21:15 mk-bgp sshd[28312]: Invalid user postgres from 138.197.67.245 port 41076
Mar 1 22:21:56 mk-bgp sshd[28327]: Invalid user oracle from 138.197.67.245 port 49036
Mar 1 22:22:36 mk-bgp sshd[28332]: Invalid user user from 138.197.67.245 port 50608
Mar 1 22:23:18 mk-bgp sshd[28334]: Invalid user vps from 138.197.67.245 port 43408
Mar 1 22:23:58 mk-bgp sshd[28341]: Invalid user testuser from 138.197.67.245 port 55552
...
show less
2026-03-01T14:21:01.589829-08:00 RoblOracle sshd-session[777895]: Invalid user postgres from 138.197 ...
show more2026-03-01T14:21:01.589829-08:00 RoblOracle sshd-session[777895]: Invalid user postgres from 138.197.67.245 port 50796
2026-03-01T14:21:41.918641-08:00 RoblOracle sshd-session[777964]: Invalid user oracle from 138.197.67.245 port 35128
2026-03-01T14:22:22.455362-08:00 RoblOracle sshd-session[778057]: Invalid user user from 138.197.67.245 port 45256
2026-03-01T14:23:02.852612-08:00 RoblOracle sshd-session[778156]: Invalid user vps from 138.197.67.245 port 57726
2026-03-01T14:23:44.240965-08:00 RoblOracle sshd-session[778221]: Invalid user testuser from 138.197.67.245 port 48104
...
show less
2026-03-01T22:21:16.863444+00:00 luckless.de sshd-session[1877732]: Invalid user postgres from 138.1 ...
show more2026-03-01T22:21:16.863444+00:00 luckless.de sshd-session[1877732]: Invalid user postgres from 138.197.67.245 port 45052
2026-03-01T22:21:56.791453+00:00 luckless.de sshd-session[1877759]: Invalid user oracle from 138.197.67.245 port 36592
2026-03-01T22:22:37.665435+00:00 luckless.de sshd-session[1877802]: Invalid user user from 138.197.67.245 port 57876
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
β’ Credentials: root:root, root ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
β’ Credentials: root:root, root:root123, root:root321, root:123, root:321, root:pass, root:qwerty, root:password
β’ Number of login attempts: 8
β’ 16 command(s) were executed during the session
β’ Client: SSH-2.0-Go
show less