This IP address has been reported a total of
659
times from
374 distinct
sources.
201.138.189.215 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-30T16:07:15.498746+02:00 gw-de37-01.guestgw.net sshd[3640764]: Invalid user test-user from 2 ...
show more2026-05-30T16:07:15.498746+02:00 gw-de37-01.guestgw.net sshd[3640764]: Invalid user test-user from 201.138.189.215 port 38952
2026-05-30T16:07:15.710191+02:00 gw-de37-01.guestgw.net sshd[3640764]: Disconnected from invalid user test-user 201.138.189.215 port 38952 [preauth]
2026-05-30T16:12:11.348518+02:00 gw-de37-01.guestgw.net sshd[3642254]: Invalid user posiflex from 201.138.189.215 port 35358
2026-05-30T16:12:11.538126+02:00 gw-de37-01.guestgw.net sshd[3642254]: Disconnected from invalid user posiflex 201.138.189.215 port 35358 [preauth]
2026-05-30T16:13:40.092765+02:00 gw-de37-01.guestgw.net sshd[3642650]: Invalid user trade from 201.138.189.215 port 48780
show less
2026-05-30T16:53:43.808995+03:00 gc1 sshd[1550036]: pam_unix(sshd:auth): authentication failure; log ...
show more2026-05-30T16:53:43.808995+03:00 gc1 sshd[1550036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215
2026-05-30T16:53:45.852459+03:00 gc1 sshd[1550036]: Failed password for invalid user sammy from 201.138.189.215 port 58120 ssh2
2026-05-30T16:55:07.121136+03:00 gc1 sshd[1550113]: Invalid user michael from 201.138.189.215 port 58778
...
show less
Brute-Force
SSH
Anonymous
2026-05-30T15:37:39.283146 prodWEB sshd[58229]: Connection from 201.138.189.215 port 47470 on 46.105 ...
show more2026-05-30T15:37:39.283146 prodWEB sshd[58229]: Connection from 201.138.189.215 port 47470 on 46.105.46.67 port 22 rdomain ""
2026-05-30T15:37:40.145941 prodWEB sshd[58229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 user=root
2026-05-30T15:37:42.655595 prodWEB sshd[58229]: Failed password for root from 201.138.189.215 port 47470 ssh2
...
show less
2026-05-30T16:33:29.175324+03:00 gc1 sshd[1549495]: Failed password for invalid user steam from 201. ...
show more2026-05-30T16:33:29.175324+03:00 gc1 sshd[1549495]: Failed password for invalid user steam from 201.138.189.215 port 38040 ssh2
2026-05-30T16:37:24.582429+03:00 gc1 sshd[1549610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 user=root
2026-05-30T16:37:26.560425+03:00 gc1 sshd[1549610]: Failed password for root from 201.138.189.215 port 55010 ssh2
...
show less
2026-05-30T15:25:08.463830+02:00 jantje sshd[28775]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-05-30T15:25:08.463830+02:00 jantje sshd[28775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215
2026-05-30T15:25:10.733770+02:00 jantje sshd[28775]: Failed password for invalid user steam from 201.138.189.215 port 40344 ssh2
2026-05-30T15:25:12.004115+02:00 jantje sshd[28775]: Disconnected from invalid user steam 201.138.189.215 port 40344 [preauth]
...
show less
2026-05-30T12:19:22.133974+00:00 de-fsn1-it1 sshd[1971396]: Invalid user ubuntu from 201.138.189.215 ...
show more2026-05-30T12:19:22.133974+00:00 de-fsn1-it1 sshd[1971396]: Invalid user ubuntu from 201.138.189.215 port 47242
2026-05-30T12:26:54.098821+00:00 de-fsn1-it1 sshd[1972079]: Invalid user admin from 201.138.189.215 port 43400
2026-05-30T12:32:40.459080+00:00 de-fsn1-it1 sshd[1972189]: Invalid user abc from 201.138.189.215 port 39336
...
show less
Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ...
show moreMalicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS8151 UNINET, Region: Puebla, Log: 2026-05-30T13:56:24.989886 02:00 Administracion sshd[1834457]: Disconnected from invalid user sdbadmin 201.138.189.215 port 51896 [preauth], Abuse Score: 100, Total Reports: 209
show less
May 30 12:44:00 s1-4-gra7 sshd[2621918]: Invalid user app from 201.138.189.215 port 42082
May 30 12: ...
show moreMay 30 12:44:00 s1-4-gra7 sshd[2621918]: Invalid user app from 201.138.189.215 port 42082
May 30 12:45:27 s1-4-gra7 sshd[2622065]: Invalid user tfj from 201.138.189.215 port 41498
show less
2026-05-30T05:06:55.322806-05:00 drpxkvfh.colocrossing.cloud sshd[134044]: Invalid user ubuntu from ...
show more2026-05-30T05:06:55.322806-05:00 drpxkvfh.colocrossing.cloud sshd[134044]: Invalid user ubuntu from 201.138.189.215 port 50494
2026-05-30T05:06:55.329942-05:00 drpxkvfh.colocrossing.cloud sshd[134044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215
2026-05-30T05:06:57.234024-05:00 drpxkvfh.colocrossing.cloud sshd[134044]: Failed password for invalid user ubuntu from 201.138.189.215 port 50494 ssh2
2026-05-30T05:08:46.322418-05:00 drpxkvfh.colocrossing.cloud sshd[134062]: Invalid user user1 from 201.138.189.215 port 44392
2026-05-30T05:08:46.331444-05:00 drpxkvfh.colocrossing.cloud sshd[134062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215
2026-05-30T05:08:48.140175-05:00 drpxkvfh.colocrossing.cloud sshd[134062]: Failed password for invalid user user1 from 201.138.189.215 port 44392 ssh2
...
show less
2026-05-30T12:01:01.782152+02:00 RYZEN-1 sshd[2448986]: Disconnected from authenticating user root 2 ...
show more2026-05-30T12:01:01.782152+02:00 RYZEN-1 sshd[2448986]: Disconnected from authenticating user root 201.138.189.215 port 38076 [preauth]
2026-05-30T12:04:58.531815+02:00 RYZEN-1 sshd[2496043]: Disconnected from authenticating user root 201.138.189.215 port 55346 [preauth]
2026-05-30T12:06:48.336997+02:00 RYZEN-1 sshd[2517896]: Invalid user ubuntu from 201.138.189.215 port 39182
2026-05-30T12:06:48.506679+02:00 RYZEN-1 sshd[2517896]: Disconnected from invalid user ubuntu 201.138.189.215 port 39182 [preauth]
2026-05-30T12:08:39.199685+02:00 RYZEN-1 sshd[2539695]: Invalid user user1 from 201.138.189.215 port 56868
...
show less
Brute-Force
SSH
Showing 436 to
450
of 659 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩