This IP address has been reported a total of
234
times from
127 distinct
sources.
213.199.38.115 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 66 SSH credential attack (attempts) on 12-11-2025. For more information ...
show moreThis IP address carried out 66 SSH credential attack (attempts) on 12-11-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
(sshd) Failed SSH login from 213.199.38.115 (DE/Germany/vmi2796569.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 213.199.38.115 (DE/Germany/vmi2796569.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 12 04:07:11 23620 sshd[3607]: Invalid user tes from 213.199.38.115 port 49722
Nov 12 04:07:13 23620 sshd[3607]: Failed password for invalid user tes from 213.199.38.115 port 49722 ssh2
Nov 12 04:10:13 23620 sshd[3824]: Invalid user alma from 213.199.38.115 port 42640
Nov 12 04:10:15 23620 sshd[3824]: Failed password for invalid user alma from 213.199.38.115 port 42640 ssh2
Nov 12 04:11:39 23620 sshd[3911]: Invalid user ubuntu from 213.199.38.115 port 60074
show less
2025-11-12T03:15:10.653402+00:00 helium sshd-session[3146874]: pam_unix(sshd:auth): authentication f ...
show more2025-11-12T03:15:10.653402+00:00 helium sshd-session[3146874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.38.115
2025-11-12T03:15:13.364081+00:00 helium sshd-session[3146874]: Failed password for invalid user teamspeak from 213.199.38.115 port 58194 ssh2
2025-11-12T03:15:13.750209+00:00 helium sshd-session[3146874]: Disconnected from invalid user teamspeak 213.199.38.115 port 58194 [preauth]
...
show less
2025-11-12T03:20:31.550580+01:00 axisverse sshd-session[580298]: Invalid user oracle from 213.199.38 ...
show more2025-11-12T03:20:31.550580+01:00 axisverse sshd-session[580298]: Invalid user oracle from 213.199.38.115 port 39280
2025-11-12T03:22:08.690676+01:00 axisverse sshd-session[583179]: Invalid user dimas from 213.199.38.115 port 51448
2025-11-12T03:27:03.299420+01:00 axisverse sshd-session[592758]: Invalid user streaming from 213.199.38.115 port 54898
...
show less
2025-11-12T03:16:43.994640+01:00 gw-de15-01.guestgw.net sshd[79648]: Disconnected from authenticatin ...
show more2025-11-12T03:16:43.994640+01:00 gw-de15-01.guestgw.net sshd[79648]: Disconnected from authenticating user root 213.199.38.115 port 46284 [preauth]
2025-11-12T03:22:10.600559+01:00 gw-de15-01.guestgw.net sshd[80771]: Invalid user dimas from 213.199.38.115 port 48000
2025-11-12T03:22:10.632043+01:00 gw-de15-01.guestgw.net sshd[80771]: Disconnected from invalid user dimas 213.199.38.115 port 48000 [preauth]
2025-11-12T03:23:43.816641+01:00 gw-de15-01.guestgw.net sshd[81063]: Invalid user jamie from 213.199.38.115 port 57294
2025-11-12T03:23:43.854765+01:00 gw-de15-01.guestgw.net sshd[81063]: Disconnected from invalid user jamie 213.199.38.115 port 57294 [preauth]
show less
(sshd) Failed SSH login from 213.199.38.115 (DE/Germany/vmi2796569.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 213.199.38.115 (DE/Germany/vmi2796569.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Nov 11 20:18:45 15499 sshd[28208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.199.38.115 user=root
Nov 11 20:18:47 15499 sshd[28208]: Failed password for root from 213.199.38.115 port 57822 ssh2
Nov 11 20:21:22 15499 sshd[28421]: Invalid user oracle from 213.199.38.115 port 41554
Nov 11 20:21:24 15499 sshd[28421]: Failed password for invalid user oracle from 213.199.38.115 port 41554 ssh2
Nov 11 20:22:56 15499 sshd[28503]: Invalid user dimas from 213.199.38.115 port 50412
show less
Brute-Force
SSH
Showing 1 to
15
of 234 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩