This IP address has been reported a total of
71
times from
54 distinct
sources.
138.199.236.131 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated sensor: 15 SSH brute-force attempts over the last 24h (latest 2026-08-30T11:47Z). Username ...
show moreAutomated sensor: 15 SSH brute-force attempts over the last 24h (latest 2026-08-30T11:47Z). Usernames tried: wallet, deploy, exchange, root.
show less
2026-08-30T11:36:21.765306+00:00 sg-jumphost-server sshd[1573178]: Connection closed by authenticati ...
show more2026-08-30T11:36:21.765306+00:00 sg-jumphost-server sshd[1573178]: Connection closed by authenticating user root 138.199.236.131 port 56142 [preauth]
...
show less
2026-08-30T08:08:26.692665+00:00 sg-jumphost-server sshd[1549035]: Invalid user exchange from 138.19 ...
show more2026-08-30T08:08:26.692665+00:00 sg-jumphost-server sshd[1549035]: Invalid user exchange from 138.199.236.131 port 33914
...
show less
2026-08-29T20:53:32.306383 yip.floofy.tech sshd-session[944833]: Failed password for root from 138.1 ...
show more2026-08-29T20:53:32.306383 yip.floofy.tech sshd-session[944833]: Failed password for root from 138.199.236.131 port 54316 ssh2
2026-08-29T21:14:22.528509 yip.floofy.tech sshd-session[956422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.236.131 user=root
2026-08-29T21:14:24.410835 yip.floofy.tech sshd-session[956422]: Failed password for root from 138.199.236.131 port 44564 ssh2
...
show less
Aug 29 18:58:47 vmd80284 sshd[4187933]: Invalid user deploy from 138.199.236.131 port 44502
Aug 29 1 ...
show moreAug 29 18:58:47 vmd80284 sshd[4187933]: Invalid user deploy from 138.199.236.131 port 44502
Aug 29 19:18:49 vmd80284 sshd[4193079]: Invalid user deploy from 138.199.236.131 port 35194
...
show less
2026-08-29T17:34:37.664649mbox.semen.de sshd[2420110]: Failed password for invalid user deploy from ...
show more2026-08-29T17:34:37.664649mbox.semen.de sshd[2420110]: Failed password for invalid user deploy from 138.199.236.131 port 39986 ssh2
2026-08-29T18:28:17.076274mbox.semen.de sshd[2435294]: Invalid user deploy from 138.199.236.131 port 54084
2026-08-29T18:28:17.100682mbox.semen.de sshd[2435294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.236.131
2026-08-29T18:28:18.886566mbox.semen.de sshd[2435294]: Failed password for invalid user deploy from 138.199.236.131 port 54084 ssh2
2026-08-29T18:47:39.015794mbox.semen.de sshd[2439112]: Invalid user deploy from 138.199.236.131 port 53468
2026-08-29T18:47:39.039946mbox.semen.de sshd[2439112]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.236.131
2026-08-29T18:47:40.680358mbox.semen.de sshd[2439112]: Failed password for invalid user deploy from 138.199.236.131 port 53468 ssh2
...
show less
2026-08-29T17:10:55.291045+02:00 swsrv sshd[2835231]: Invalid user deploy from 138.199.236.131 port ...
show more2026-08-29T17:10:55.291045+02:00 swsrv sshd[2835231]: Invalid user deploy from 138.199.236.131 port 56206
2026-08-29T17:27:13.091174+02:00 swsrv sshd[2871518]: Invalid user deploy from 138.199.236.131 port 47154
2026-08-29T17:44:19.571095+02:00 swsrv sshd[2905098]: Invalid user deploy from 138.199.236.131 port 38046
2026-08-29T18:02:05.275885+02:00 swsrv sshd[2944900]: Invalid user deploy from 138.199.236.131 port 53758
...
show less
Aug 29 17:10:56 vmd80284 sshd[4167147]: Invalid user deploy from 138.199.236.131 port 53532
Aug 29 1 ...
show moreAug 29 17:10:56 vmd80284 sshd[4167147]: Invalid user deploy from 138.199.236.131 port 53532
Aug 29 17:27:13 vmd80284 sshd[4169748]: Invalid user deploy from 138.199.236.131 port 49800
Aug 29 17:44:20 vmd80284 sshd[4173850]: Invalid user deploy from 138.199.236.131 port 48520
...
show less
Brute-Force
SSH
Anonymous
Aug 29 17:33:30 vmi3075181 sshd[550079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreAug 29 17:33:30 vmi3075181 sshd[550079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.199.236.131
Aug 29 17:33:32 vmi3075181 sshd[550079]: Failed password for invalid user deploy from 138.199.236.131 port 48420 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 71 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩