This IP address has been reported a total of
90
times from
33 distinct
sources.
138.197.7.212 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-15T16:16:20.467247Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 138.197.7.212:4103 ...
show more2026-09-15T16:16:20.467247Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 138.197.7.212:41030 (158.69.22.11:2222) [session: 5e4790bd5caf]
2026-09-15T16:16:23.774937Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 138.197.7.212:41042 (158.69.22.11:2222) [session: 57e4e08ca0a6]
...
show less
2026-09-12T13:31:29.536323+00:00 arrow-se sshd-session[196327]: Failed password for root from 138.19 ...
show more2026-09-12T13:31:29.536323+00:00 arrow-se sshd-session[196327]: Failed password for root from 138.197.7.212 port 39444 ssh2
2026-09-12T13:31:42.981479+00:00 arrow-se sshd-session[196352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.7.212 user=root
2026-09-12T13:31:44.803707+00:00 arrow-se sshd-session[196352]: Failed password for root from 138.197.7.212 port 51178 ssh2
...
show less
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
Port Scan
Anonymous
2026-08-27T16:56:07.523135+00:00 de sshd-session[59020]: Failed password for root from 138.197.7.212 ...
show more2026-08-27T16:56:07.523135+00:00 de sshd-session[59020]: Failed password for root from 138.197.7.212 port 56678 ssh2
2026-08-27T16:56:20.735978+00:00 de sshd-session[59031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.7.212 user=root
2026-08-27T16:56:23.212283+00:00 de sshd-session[59031]: Failed password for root from 138.197.7.212 port 60940 ssh2
...
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 60022 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 60022 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-04-04T09:06:15.525674+00:00 WreckersBox sshd[1594564]: Failed password for root from 138.197.7. ...
show more2026-04-04T09:06:15.525674+00:00 WreckersBox sshd[1594564]: Failed password for root from 138.197.7.212 port 35992 ssh2
2026-04-04T09:06:23.651846+00:00 WreckersBox sshd[1594566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.7.212 user=root
2026-04-04T09:06:24.890026+00:00 WreckersBox sshd[1594566]: Failed password for root from 138.197.7.212 port 50664 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd-session[1507796]: Connection closed by authenticating u ...
show moreSSH Brute Force (3 attempts). Evidence: sshd-session[1507796]: Connection closed by authenticating user root 138.197.7.212 port 50728 [preauth];sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.7.212 user=root
show less