This IP address has been reported a total of
59
times from
44 distinct
sources.
209.97.138.100 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Unwanted traffic detected by honeypot on February 22, 2026: port scans (1 port 22 scan), and brute f ...
show moreUnwanted traffic detected by honeypot on February 22, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (90 over ssh).
show less
2026-02-22T20:28:01.406875-08:00 RoblOracle sshd-session[816045]: Invalid user admin from 209.97.138 ...
show more2026-02-22T20:28:01.406875-08:00 RoblOracle sshd-session[816045]: Invalid user admin from 209.97.138.100 port 36056
2026-02-22T20:29:36.378997-08:00 RoblOracle sshd-session[816264]: Invalid user admin from 209.97.138.100 port 58614
2026-02-22T20:31:22.695496-08:00 RoblOracle sshd-session[816488]: Invalid user admin from 209.97.138.100 port 52082
2026-02-22T20:33:03.513794-08:00 RoblOracle sshd-session[816699]: Invalid user admin from 209.97.138.100 port 37782
2026-02-22T20:34:38.203634-08:00 RoblOracle sshd-session[816911]: Invalid user admin from 209.97.138.100 port 40764
...
show less
2026-02-23T05:12:45.512070+01:00 karoxnet.hu sshd[1461276]: User root from 209.97.138.100 not allowe ...
show more2026-02-23T05:12:45.512070+01:00 karoxnet.hu sshd[1461276]: User root from 209.97.138.100 not allowed because not listed in AllowUsers
2026-02-23T05:14:31.939997+01:00 karoxnet.hu sshd[1461278]: User root from 209.97.138.100 not allowed because not listed in AllowUsers
2026-02-23T05:16:23.834517+01:00 karoxnet.hu sshd[1461283]: User root from 209.97.138.100 not allowed because not listed in AllowUsers
2026-02-23T05:18:23.042169+01:00 karoxnet.hu sshd[1461291]: User root from 209.97.138.100 not allowed because not listed in AllowUsers
2026-02-23T05:20:11.620719+01:00 karoxnet.hu sshd[1461294]: User root from 209.97.138.100 not allowed because not listed in AllowUsers
...
show less
2026-02-22T22:14:50.154888 nas.marchenko.net sshd-session[3677358]: Failed password for root from 20 ...
show more2026-02-22T22:14:50.154888 nas.marchenko.net sshd-session[3677358]: Failed password for root from 209.97.138.100 port 45114 ssh2
2026-02-22T22:16:40.170160 nas.marchenko.net sshd-session[3681116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.138.100 user=root
2026-02-22T22:16:42.085576 nas.marchenko.net sshd-session[3681116]: Failed password for root from 209.97.138.100 port 48852 ssh2
...
show less
2026-02-23T06:14:42.441561+02:00 gogo-server sshd-session[1593808]: Failed password for root from 20 ...
show more2026-02-23T06:14:42.441561+02:00 gogo-server sshd-session[1593808]: Failed password for root from 209.97.138.100 port 45678 ssh2
2026-02-23T06:16:31.264123+02:00 gogo-server sshd-session[1594088]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.138.100 user=root
2026-02-23T06:16:33.356966+02:00 gogo-server sshd-session[1594088]: Failed password for root from 209.97.138.100 port 43222 ssh2
...
show less
Feb 23 04:14:37 mc sshd[3977148]: Failed password for root from 209.97.138.100 port 59492 ssh2
Feb 2 ...
show moreFeb 23 04:14:37 mc sshd[3977148]: Failed password for root from 209.97.138.100 port 59492 ssh2
Feb 23 04:16:26 mc sshd[3978904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.97.138.100 user=root
Feb 23 04:16:28 mc sshd[3978904]: Failed password for root from 209.97.138.100 port 44722 ssh2
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:1234567890 ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:1234567890, root:password1
• Number of login attempts: 2
• Client: SSH-2.0-Go
show less