This IP address has been reported a total of
149
times from
127 distinct
sources.
138.255.193.212 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 45
reports;
United States of America
with 30
reports;
France
with 16
reports.
The most common categories in these recent reports were:
SSH
145
times;
Brute-Force
143
times;
Port Scan
5
times;
Web App Attack
3
times;
Bad Web Bot
3
times;
Other
4
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 20, successful ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 20, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ap1) over 2026-10-07..2026-10-07. Reported by an SSH honeypot network; no production service involved.
show less
2026-10-07T12:02:02.163197-06:00 sshd[216938]: Invalid user admin1 from 138.255.193.212 port 5271
20 ...
show more2026-10-07T12:02:02.163197-06:00 sshd[216938]: Invalid user admin1 from 138.255.193.212 port 5271
2026-10-07T12:03:44.053032-06:00 sshd[217198]: Invalid user forward from 138.255.193.212 port 5238
2026-10-07T12:05:26.701916-06:00 sshd[217497]: Invalid user anna from 138.255.193.212 port 5467
2026-10-07T12:08:45.765370-06:00 sshd[217996]: Invalid user alf from 138.255.193.212 port 5404
show less
Oct 7 13:24:21 sshd[1184902]: Invalid user hc from 138.255.193.212 port 19712
Oct 7 13:32:21 sshd[ ...
show moreOct 7 13:24:21 sshd[1184902]: Invalid user hc from 138.255.193.212 port 19712
Oct 7 13:32:21 sshd[1184986]: Invalid user toto from 138.255.193.212 port 2628
Oct 7 13:34:04 sshd[1185048]: Invalid user demon from 138.255.193.212 port 2085
...
show less
2026-10-07T13:08:22.596016+02:00 lovinoes.de sshd-session[2532570]: Invalid user admin from 138.255. ...
show more2026-10-07T13:08:22.596016+02:00 lovinoes.de sshd-session[2532570]: Invalid user admin from 138.255.193.212 port 16035
2026-10-07T13:08:22.600460+02:00 lovinoes.de sshd-session[2532570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.193.212
2026-10-07T13:08:24.418704+02:00 lovinoes.de sshd-session[2532570]: Failed password for invalid user admin from 138.255.193.212 port 16035 ssh2
...
show less
2026-10-07T12:51:48.086020+02:00 lovinoes.de sshd-session[2132497]: Invalid user jj from 138.255.193 ...
show more2026-10-07T12:51:48.086020+02:00 lovinoes.de sshd-session[2132497]: Invalid user jj from 138.255.193.212 port 14346
2026-10-07T12:51:48.089346+02:00 lovinoes.de sshd-session[2132497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.255.193.212
2026-10-07T12:51:49.821191+02:00 lovinoes.de sshd-session[2132497]: Failed password for invalid user jj from 138.255.193.212 port 14346 ssh2
...
show less
2026-10-07T10:05:57.696860+00:00 patyk-freedownload sshd[2387487]: Invalid user uap from 138.255.193 ...
show more2026-10-07T10:05:57.696860+00:00 patyk-freedownload sshd[2387487]: Invalid user uap from 138.255.193.212 port 13752
2026-10-07T10:07:44.834055+00:00 patyk-freedownload sshd[2388363]: Invalid user sftpuser from 138.255.193.212 port 13763
2026-10-07T10:09:31.478078+00:00 patyk-freedownload sshd[2389260]: Invalid user me from 138.255.193.212 port 13766
2026-10-07T10:11:09.118364+00:00 patyk-freedownload sshd[2390036]: Invalid user jonasa from 138.255.193.212 port 13753
2026-10-07T10:16:08.752455+00:00 patyk-freedownload sshd[2392506]: Invalid user stefan from 138.255.193.212 port 13808
...
show less
Multiple SSH login attempts from 138.255.193.212 targeting user(s): root,tv | Server Managed by Focu ...
show moreMultiple SSH login attempts from 138.255.193.212 targeting user(s): root,tv | Server Managed by Focusnic
show less
Oct 7 08:30:01 netserv400 sshd-session[31992]: Connection from 138.255.193.212 port 13303 on 94.102 ...
show moreOct 7 08:30:01 netserv400 sshd-session[31992]: Connection from 138.255.193.212 port 13303 on 94.102.210.190 port 22 rdomain ""
Oct 7 08:30:02 netserv400 sshd-session[31992]: User root from 138.255.193.212 not allowed because none of user's groups are listed in AllowGroups
Oct 7 08:31:34 netserv400 sshd-session[31998]: Connection from 138.255.193.212 port 13324 on 94.102.210.190 port 22 rdomain ""
Oct 7 08:31:35 netserv400 sshd-session[31998]: User root from 138.255.193.212 not allowed because none of user's groups are listed in AllowGroups
Oct 7 08:33:11 netserv400 sshd-session[32011]: Connection from 138.255.193.212 port 13357 on 94.102.210.190 port 22 rdomain ""
Oct 7 08:33:12 netserv400 sshd-session[32011]: User root from 138.255.193.212 not allowed because none of user's groups are listed in AllowGroups
Oct 7 08:34:53 netserv400 sshd-session[32022]: Connection from 138.255.193.212 port 13371 on 94.102.210.190 port 22 rdomain ""
Oct 7 08:34:54 netserv400 sshd-session[32022]:
...
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 4, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 4, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (ap1) over 2026-10-07..2026-10-07. Reported by an SSH honeypot network; no production service involved.
show less
2026-10-07T03:44:41.050892-04:00 amadeus sshd-session[188028]: Invalid user ubuntu from 138.255.193. ...
show more2026-10-07T03:44:41.050892-04:00 amadeus sshd-session[188028]: Invalid user ubuntu from 138.255.193.212 port 13024
2026-10-07T03:46:16.584518-04:00 amadeus sshd-session[198419]: Connection from 138.255.193.212 port 13005 on 192.168.1.93 port 22 rdomain ""
2026-10-07T03:46:17.375622-04:00 amadeus sshd-session[198419]: Invalid user dmdba from 138.255.193.212 port 13005
...
show less