This IP address has been reported a total of
73
times from
63 distinct
sources.
138.84.40.56 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 24 18:50:05 server0 sshd[794981]: Invalid user ubuntu from 138.84.40.56 port 37045
Sep 24 18:54: ...
show moreSep 24 18:50:05 server0 sshd[794981]: Invalid user ubuntu from 138.84.40.56 port 37045
Sep 24 18:54:29 server0 sshd[795026]: Invalid user postgres from 138.84.40.56 port 39809
Sep 24 18:56:17 server0 sshd[795050]: Invalid user helen from 138.84.40.56 port 48747
...
show less
2026-09-24T15:51:01.149834-03:00 dns1 sshd[17614]: Failed password for invalid user ubuntu from 138. ...
show more2026-09-24T15:51:01.149834-03:00 dns1 sshd[17614]: Failed password for invalid user ubuntu from 138.84.40.56 port 60597 ssh2
2026-09-24T15:51:02.730251-03:00 dns1 sshd[17614]: Disconnected from invalid user ubuntu 138.84.40.56 port 60597 [preauth]
2026-09-24T15:54:45.605048-03:00 dns1 sshd[17643]: Invalid user postgres from 138.84.40.56 port 30318
2026-09-24T15:54:45.637439-03:00 dns1 sshd[17643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
2026-09-24T15:54:47.790356-03:00 dns1 sshd[17643]: Failed password for invalid user postgres from 138.84.40.56 port 30318 ssh2
show less
2026-09-24T20:09:26.849519+02:00 [hostname] sshd[382181]: Invalid user administrador from 138.84.40. ...
show more2026-09-24T20:09:26.849519+02:00 [hostname] sshd[382181]: Invalid user administrador from 138.84.40.56 port 23000
2026-09-24T20:15:28.816680+02:00 [hostname] sshd[385597]: Invalid user cacti from 138.84.40.56 port 35808
2026-09-24T20:17:14.446301+02:00 [hostname] sshd[386547]: Invalid user info from 138.84.40.56 port 55075
...
show less
Brute-Force
SSH
Anonymous
Sep 24 14:08:11 www sshd\[29249\]: Invalid user administrador from 138.84.40.56
Sep 24 14:15:05 www ...
show moreSep 24 14:08:11 www sshd\[29249\]: Invalid user administrador from 138.84.40.56
Sep 24 14:15:05 www sshd\[29303\]: Invalid user cacti from 138.84.40.56
...
show less
Sep 24 17:28:06 vps-nl1 sshd[656279]: Invalid user miriam from 138.84.40.56 port 34406
Sep 24 17:41: ...
show moreSep 24 17:28:06 vps-nl1 sshd[656279]: Invalid user miriam from 138.84.40.56 port 34406
Sep 24 17:41:44 vps-nl1 sshd[656717]: Invalid user userm from 138.84.40.56 port 23257
Sep 24 17:43:18 vps-nl1 sshd[656766]: Invalid user bot from 138.84.40.56 port 63391
...
show less
Sep 24 18:55:12 oa sshd[2999175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreSep 24 18:55:12 oa sshd[2999175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
Sep 24 18:55:13 oa sshd[2999175]: Failed password for invalid user magento from 138.84.40.56 port 34634 ssh2
Sep 24 18:56:57 oa sshd[2999205]: Invalid user tms from 138.84.40.56 port 55220
Sep 24 18:56:57 oa sshd[2999205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
Sep 24 18:56:59 oa sshd[2999205]: Failed password for invalid user tms from 138.84.40.56 port 55220 ssh2
Sep 24 18:58:33 oa sshd[2999224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56 user=root
Sep 24 18:58:34 oa sshd[2999224]: Failed password for root from 138.84.40.56 port 55770 ssh2
Sep 24 19:00:09 oa sshd[2999254]: Invalid user anand from 138.84.40.56 port 40512
...
show less
2026-09-24T16:55:30.117012+00:00 becker-software sshd[1430785]: Invalid user tms from 138.84.40.56 p ...
show more2026-09-24T16:55:30.117012+00:00 becker-software sshd[1430785]: Invalid user tms from 138.84.40.56 port 39105
2026-09-24T16:57:13.785418+00:00 becker-software sshd[1431619]: Connection from 138.84.40.56 port 47379 on 77.90.16.3 port 22 rdomain ""
2026-09-24T16:57:14.852318+00:00 becker-software sshd[1431619]: User root from 138.84.40.56 not allowed because not listed in AllowUsers
2026-09-24T16:58:48.792589+00:00 becker-software sshd[1432348]: Connection from 138.84.40.56 port 7391 on 77.90.16.3 port 22 rdomain ""
2026-09-24T16:58:49.811766+00:00 becker-software sshd[1432348]: Invalid user anand from 138.84.40.56 port 7391
...
show less
2026-09-24T18:29:32.921727+02:00 runner3 sshd[1130905]: Failed password for root from 138.84.40.56 p ...
show more2026-09-24T18:29:32.921727+02:00 runner3 sshd[1130905]: Failed password for root from 138.84.40.56 port 52718 ssh2
2026-09-24T18:31:07.485559+02:00 runner3 sshd[1133103]: Invalid user info from 138.84.40.56 port 58040
2026-09-24T18:31:07.487871+02:00 runner3 sshd[1133103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
2026-09-24T18:31:08.873382+02:00 runner3 sshd[1133103]: Failed password for invalid user info from 138.84.40.56 port 58040 ssh2
2026-09-24T18:32:42.894338+02:00 runner3 sshd[1134994]: Invalid user sri from 138.84.40.56 port 52867
...
show less
2026-09-24T18:14:32.920781mbox.semen.de sshd[89968]: Failed password for root from 138.84.40.56 port ...
show more2026-09-24T18:14:32.920781mbox.semen.de sshd[89968]: Failed password for root from 138.84.40.56 port 47229 ssh2
2026-09-24T18:16:16.250356mbox.semen.de sshd[90573]: Invalid user minecraft from 138.84.40.56 port 33337
2026-09-24T18:16:16.256983mbox.semen.de sshd[90573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
2026-09-24T18:16:18.324600mbox.semen.de sshd[90573]: Failed password for invalid user minecraft from 138.84.40.56 port 33337 ssh2
2026-09-24T18:18:00.546782mbox.semen.de sshd[90628]: Invalid user sftp from 138.84.40.56 port 24248
2026-09-24T18:18:00.553500mbox.semen.de sshd[90628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.40.56
2026-09-24T18:18:02.230033mbox.semen.de sshd[90628]: Failed password for invalid user sftp from 138.84.40.56 port 24248 ssh2
...
show less
Port Scan
Brute-Force
SSH
Showing 1 to
15
of 73 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩