This IP address has been reported a total of
68
times from
15 distinct
sources.
138.201.207.230 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jun 18 12:47:44 vm50 sshd[56751]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 12:47:44 vm50 sshd[56751]: Connection closed by authenticating user root 138.201.207.230 port 41512 [preauth]
Jun 18 12:49:16 vm50 sshd[56769]: Connection from 138.201.207.230 port 33798 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:49:17 vm50 sshd[56769]: Connection closed by authenticating user root 138.201.207.230 port 33798 [preauth]
Jun 18 12:50:45 vm50 sshd[56772]: Connection from 138.201.207.230 port 37780 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:50:46 vm50 sshd[56772]: Connection closed by authenticating user root 138.201.207.230 port 37780 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 18 12:31:39 vm50 sshd[56615]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 12:31:39 vm50 sshd[56615]: Connection closed by authenticating user root 138.201.207.230 port 54744 [preauth]
Jun 18 12:33:04 vm50 sshd[56625]: Connection from 138.201.207.230 port 41960 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:33:04 vm50 sshd[56625]: Connection closed by authenticating user root 138.201.207.230 port 41960 [preauth]
Jun 18 12:34:33 vm50 sshd[56640]: Connection from 138.201.207.230 port 53348 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:34:34 vm50 sshd[56640]: Connection closed by authenticating user root 138.201.207.230 port 53348 [preauth]
...
show less
2026-06-18T10:01:26.078370+05:30 nms sshd[1686467]: Failed password for root from 138.201.207.230 po ...
show more2026-06-18T10:01:26.078370+05:30 nms sshd[1686467]: Failed password for root from 138.201.207.230 port 42698 ssh2
2026-06-18T10:02:49.123137+05:30 nms sshd[1686494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
2026-06-18T10:02:51.481076+05:30 nms sshd[1686494]: Failed password for root from 138.201.207.230 port 53342 ssh2
2026-06-18T10:04:17.915435+05:30 nms sshd[1686539]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
2026-06-18T10:04:20.353806+05:30 nms sshd[1686539]: Failed password for root from 138.201.207.230 port 56572 ssh2
...
show less
Brute-Force
SSH
Anonymous
Jun 18 12:15:08 vm50 sshd[56481]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 12:15:08 vm50 sshd[56481]: Connection closed by authenticating user root 138.201.207.230 port 50156 [preauth]
Jun 18 12:16:31 vm50 sshd[56492]: Connection from 138.201.207.230 port 35908 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:16:32 vm50 sshd[56492]: Connection closed by authenticating user root 138.201.207.230 port 35908 [preauth]
Jun 18 12:17:50 vm50 sshd[56507]: Connection from 138.201.207.230 port 55764 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:17:51 vm50 sshd[56507]: Connection closed by authenticating user root 138.201.207.230 port 55764 [preauth]
...
show less
Jun 18 10:05:32 rcloud sshd[2899694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 18 10:05:32 rcloud sshd[2899694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
Jun 18 10:05:34 rcloud sshd[2899694]: Failed password for root from 138.201.207.230 port 55666 ssh2
...
show less
Brute-Force
SSH
Anonymous
Jun 18 11:59:18 vm50 sshd[56131]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 11:59:18 vm50 sshd[56131]: Connection closed by authenticating user root 138.201.207.230 port 60550 [preauth]
Jun 18 12:00:34 vm50 sshd[56362]: Connection from 138.201.207.230 port 32896 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:00:35 vm50 sshd[56362]: Connection closed by authenticating user root 138.201.207.230 port 32896 [preauth]
Jun 18 12:01:54 vm50 sshd[56371]: Connection from 138.201.207.230 port 44634 on 103.3.61.195 port 22 rdomain ""
Jun 18 12:01:55 vm50 sshd[56371]: Connection closed by authenticating user root 138.201.207.230 port 44634 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 18 11:43:45 vm50 sshd[56041]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 11:43:45 vm50 sshd[56041]: Connection closed by authenticating user root 138.201.207.230 port 41512 [preauth]
Jun 18 11:45:04 vm50 sshd[56052]: Connection from 138.201.207.230 port 47058 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:45:05 vm50 sshd[56052]: Connection closed by authenticating user root 138.201.207.230 port 47058 [preauth]
Jun 18 11:46:21 vm50 sshd[56067]: Connection from 138.201.207.230 port 58102 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:46:21 vm50 sshd[56067]: Connection closed by authenticating user root 138.201.207.230 port 58102 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Jun 18 11:28:25 vm50 sshd[55904]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 11:28:25 vm50 sshd[55904]: Connection closed by authenticating user root 138.201.207.230 port 47540 [preauth]
Jun 18 11:29:41 vm50 sshd[55920]: Connection from 138.201.207.230 port 45480 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:29:42 vm50 sshd[55920]: Connection closed by authenticating user root 138.201.207.230 port 45480 [preauth]
Jun 18 11:31:01 vm50 sshd[55975]: Connection from 138.201.207.230 port 47088 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:31:02 vm50 sshd[55975]: Connection closed by authenticating user root 138.201.207.230 port 47088 [preauth]
...
show less
2026-06-18T08:55:46.372400+05:30 nms sshd[1658914]: Failed password for root from 138.201.207.230 po ...
show more2026-06-18T08:55:46.372400+05:30 nms sshd[1658914]: Failed password for root from 138.201.207.230 port 56152 ssh2
2026-06-18T08:56:57.278335+05:30 nms sshd[1658992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
2026-06-18T08:56:59.094819+05:30 nms sshd[1658992]: Failed password for root from 138.201.207.230 port 46006 ssh2
2026-06-18T08:58:11.906631+05:30 nms sshd[1659040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
2026-06-18T08:58:13.883483+05:30 nms sshd[1659040]: Failed password for root from 138.201.207.230 port 45178 ssh2
...
show less
Brute-Force
SSH
Anonymous
Jun 18 11:13:29 vm50 sshd[55816]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 11:13:29 vm50 sshd[55816]: Connection closed by authenticating user root 138.201.207.230 port 33878 [preauth]
Jun 18 11:14:41 vm50 sshd[55819]: Connection from 138.201.207.230 port 38420 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:14:42 vm50 sshd[55819]: Connection closed by authenticating user root 138.201.207.230 port 38420 [preauth]
Jun 18 11:15:54 vm50 sshd[55832]: Connection from 138.201.207.230 port 59558 on 103.3.61.195 port 22 rdomain ""
Jun 18 11:15:55 vm50 sshd[55832]: Connection closed by authenticating user root 138.201.207.230 port 59558 [preauth]
...
show less
Jun 18 09:03:12 rcloud sshd[2895565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 18 09:03:12 rcloud sshd[2895565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
Jun 18 09:03:14 rcloud sshd[2895565]: Failed password for root from 138.201.207.230 port 46204 ssh2
...
show less
2026-06-18T03:01:10.503692+00:00 CVM51718 sshd[1294984]: Failed password for root from 138.201.207.2 ...
show more2026-06-18T03:01:10.503692+00:00 CVM51718 sshd[1294984]: Failed password for root from 138.201.207.230 port 39614 ssh2
2026-06-18T03:02:20.010004+00:00 CVM51718 sshd[1295114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.207.230 user=root
2026-06-18T03:02:21.726478+00:00 CVM51718 sshd[1295114]: Failed password for root from 138.201.207.230 port 37162 ssh2
...
show less
Port Scan
Brute-Force
Anonymous
Jun 18 10:57:18 vm50 sshd[55728]: Connection closed by authenticating user root 138.201.207.230 port ...
show moreJun 18 10:57:18 vm50 sshd[55728]: Connection closed by authenticating user root 138.201.207.230 port 56832 [preauth]
Jun 18 10:58:34 vm50 sshd[55735]: Connection from 138.201.207.230 port 45888 on 103.3.61.195 port 22 rdomain ""
Jun 18 10:58:35 vm50 sshd[55735]: Connection closed by authenticating user root 138.201.207.230 port 45888 [preauth]
Jun 18 10:59:52 vm50 sshd[55739]: Connection from 138.201.207.230 port 42940 on 103.3.61.195 port 22 rdomain ""
Jun 18 10:59:53 vm50 sshd[55739]: Connection closed by authenticating user root 138.201.207.230 port 42940 [preauth]
...
show less