Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 138.199.159.37:
This IP address has been reported a total of
179
times from
98 distinct
sources.
138.199.159.37 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 44
reports;
United States of America
with 44
reports;
Japan
with 12
reports.
The most common categories in these recent reports were:
Brute-Force
173
times;
SSH
163
times;
Hacking
5
times;
Port Scan
5
times;
DDoS Attack
3
times;
Other
6
times.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
2026-08-11T17:12:28.160236+00:00 robert-vm sshd-session[1782958]: Invalid user marko from 138.199.15 ...
show more2026-08-11T17:12:28.160236+00:00 robert-vm sshd-session[1782958]: Invalid user marko from 138.199.159.37 port 35136
2026-08-11T17:14:27.204048+00:00 robert-vm sshd-session[1791072]: Invalid user administrator1 from 138.199.159.37 port 33256
2026-08-11T17:16:31.459995+00:00 robert-vm sshd-session[1799367]: Invalid user acuser from 138.199.159.37 port 46722
...
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
DDoS Attack
FTP Brute-Force
Port Scan
Hacking
SQL Injection
Spoofing
Bad Web Bot
Brute-Force
SSH
IoT Targeted
2026-08-11T12:07:47.091057-05:00 lab.bjmgeek.science sshd-session[2435910]: Disconnected from authen ...
show more2026-08-11T12:07:47.091057-05:00 lab.bjmgeek.science sshd-session[2435910]: Disconnected from authenticating user root 138.199.159.37 port 46910 [preauth]
2026-08-11T12:10:15.240130-05:00 lab.bjmgeek.science sshd-session[2436398]: Disconnected from authenticating user root 138.199.159.37 port 51450 [preauth]
2026-08-11T12:12:23.770675-05:00 lab.bjmgeek.science sshd-session[2436843]: Invalid user marko from 138.199.159.37 port 55066
...
show less
Aug 11 18:26:31 remote.srvfarm.net sshd[206888]: Invalid user ec2-user from 138.199.159.37 port 4584 ...
show moreAug 11 18:26:31 remote.srvfarm.net sshd[206888]: Invalid user ec2-user from 138.199.159.37 port 45842
Aug 11 18:26:31 remote.srvfarm.net sshd[206888]: Disconnected from invalid user ec2-user 138.199.159.37 port 45842 [preauth]
Aug 11 18:28:35 remote.srvfarm.net sshd[207453]: Invalid user testmail from 138.199.159.37 port 46728
Aug 11 18:28:35 remote.srvfarm.net sshd[207453]: Disconnected from invalid user testmail 138.199.159.37 port 46728 [preauth]
Aug 11 18:30:36 remote.srvfarm.net sshd[208015]: Invalid user nancy from 138.199.159.37 port 39682
show less
2026-08-11T16:23:28.778760+01:00 hostvu2 sshd[2576415]: pam_unix(sshd:auth): authentication failure; ...
show more2026-08-11T16:23:28.778760+01:00 hostvu2 sshd[2576415]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37 user=root
2026-08-11T16:23:30.130209+01:00 hostvu2 sshd[2576415]: Failed password for root from 138.199.159.37 port 50248 ssh2
2026-08-11T16:25:28.526727+01:00 hostvu2 sshd[2576958]: Invalid user victor from 138.199.159.37 port 37226
2026-08-11T16:25:28.529062+01:00 hostvu2 sshd[2576958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37
2026-08-11T16:25:30.355881+01:00 hostvu2 sshd[2576958]: Failed password for invalid user victor from 138.199.159.37 port 37226 ssh2
...
show less
Aug 11 17:19:31 remote.srvfarm.net sshd[189206]: Invalid user usher from 138.199.159.37 port 41882
A ...
show moreAug 11 17:19:31 remote.srvfarm.net sshd[189206]: Invalid user usher from 138.199.159.37 port 41882
Aug 11 17:19:31 remote.srvfarm.net sshd[189206]: Disconnected from invalid user usher 138.199.159.37 port 41882 [preauth]
Aug 11 17:22:59 remote.srvfarm.net sshd[190107]: Disconnected from authenticating user root 138.199.159.37 port 51764 [preauth]
Aug 11 17:25:00 remote.srvfarm.net sshd[190616]: Invalid user victor from 138.199.159.37 port 51738
Aug 11 17:25:00 remote.srvfarm.net sshd[190616]: Disconnected from invalid user victor 138.199.159.37 port 51738 [preauth]
show less
Aug 11 17:44:34 HRScriptsBot sshd[2294912]: pam_unix(sshd:auth): authentication failure; logname= ui ...
show moreAug 11 17:44:34 HRScriptsBot sshd[2294912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37
Aug 11 17:44:36 HRScriptsBot sshd[2294912]: Failed password for invalid user mark from 138.199.159.37 port 57180 ssh2
Aug 11 17:46:36 HRScriptsBot sshd[2294923]: Invalid user pt from 138.199.159.37 port 51890
Aug 11 17:46:36 HRScriptsBot sshd[2294923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37
Aug 11 17:46:37 HRScriptsBot sshd[2294923]: Failed password for invalid user pt from 138.199.159.37 port 51890 ssh2
Aug 11 17:48:37 HRScriptsBot sshd[2294957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37 user=root
Aug 11 17:48:39 HRScriptsBot sshd[2294957]: Failed password for root from 138.199.159.37 port 58328 ssh2
...
show less
2026-08-11T13:32:04.121180+00:00 sgp01 sshd[279266]: Invalid user justine from 138.199.159.37 port 6 ...
show more2026-08-11T13:32:04.121180+00:00 sgp01 sshd[279266]: Invalid user justine from 138.199.159.37 port 60996
2026-08-11T13:34:41.984837+00:00 sgp01 sshd[279279]: Invalid user consulta1 from 138.199.159.37 port 49252
2026-08-11T13:42:52.894970+00:00 sgp01 sshd[279582]: Invalid user ark from 138.199.159.37 port 34024
2026-08-11T13:44:47.311058+00:00 sgp01 sshd[279603]: Invalid user squid from 138.199.159.37 port 52656
2026-08-11T13:46:59.189150+00:00 sgp01 sshd[279610]: Invalid user abhi from 138.199.159.37 port 58328
...
show less
Aug 11 15:29:21 v2202011133598132617 sshd[1184911]: Invalid user justine from 138.199.159.37 port 34 ...
show moreAug 11 15:29:21 v2202011133598132617 sshd[1184911]: Invalid user justine from 138.199.159.37 port 34246
Aug 11 15:33:51 v2202011133598132617 sshd[1189479]: Invalid user consulta1 from 138.199.159.37 port 43848
Aug 11 15:42:07 v2202011133598132617 sshd[1198544]: Invalid user ark from 138.199.159.37 port 41702
...
show less
Aug 11 16:37:40 HRScriptsBot sshd[2294005]: pam_unix(sshd:auth): authentication failure; logname= ui ...
show moreAug 11 16:37:40 HRScriptsBot sshd[2294005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37 user=root
Aug 11 16:37:42 HRScriptsBot sshd[2294005]: Failed password for root from 138.199.159.37 port 42484 ssh2
Aug 11 16:39:44 HRScriptsBot sshd[2294078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37 user=root
Aug 11 16:39:46 HRScriptsBot sshd[2294078]: Failed password for root from 138.199.159.37 port 48854 ssh2
Aug 11 16:41:48 HRScriptsBot sshd[2294098]: Invalid user ark from 138.199.159.37 port 53832
Aug 11 16:41:48 HRScriptsBot sshd[2294098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.159.37
Aug 11 16:41:50 HRScriptsBot sshd[2294098]: Failed password for invalid user ark from 138.199.159.37 port 53832 ssh2
...
show less
2026-08-11T15:32:14.793193+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105592]: Invalid use ...
show more2026-08-11T15:32:14.793193+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105592]: Invalid user justine from 138.199.159.37 port 55076
2026-08-11T15:32:14.814514+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105592]: Disconnected from invalid user justine 138.199.159.37 port 55076 [preauth]
2026-08-11T15:34:44.265839+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105657]: Invalid user consulta1 from 138.199.159.37 port 42306
2026-08-11T15:34:44.297960+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105657]: Disconnected from invalid user consulta1 138.199.159.37 port 42306 [preauth]
2026-08-11T15:36:47.270089+02:00 plusnet-de-01.api.my-carrier-services.com sshd[105719]: Disconnected from authenticating user root 138.199.159.37 port 51700 [preauth]
show less
