This IP address has been reported a total of
68
times from
60 distinct
sources.
109.197.54.138 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-12T07:47:04.680562+00:00 database-prodv1-game sshd[4015013]: Invalid user user from 109.197. ...
show more2026-06-12T07:47:04.680562+00:00 database-prodv1-game sshd[4015013]: Invalid user user from 109.197.54.138 port 58018
2026-06-12T07:47:04.997483+00:00 database-prodv1-game sshd[4015101]: Invalid user user from 109.197.54.138 port 58024
2026-06-12T07:47:05.325744+00:00 database-prodv1-game sshd[4015223]: Invalid user user from 109.197.54.138 port 58036
2026-06-12T07:47:05.661140+00:00 database-prodv1-game sshd[4015225]: Invalid user user from 109.197.54.138 port 58050
2026-06-12T07:47:11.099015+00:00 database-prodv1-game sshd[4015433]: Invalid user user from 109.197.54.138 port 58054
...
show less
Brute-Force
SSH
Anonymous
2026-06-12T06:15:04.027001+00:00 de-fra2-dns1 sshd[1779529]: Invalid user user from 109.197.54.138 p ...
show more2026-06-12T06:15:04.027001+00:00 de-fra2-dns1 sshd[1779529]: Invalid user user from 109.197.54.138 port 45192
2026-06-12T06:15:04.312296+00:00 de-fra2-dns1 sshd[1779531]: Invalid user user from 109.197.54.138 port 45204
2026-06-12T06:15:04.598759+00:00 de-fra2-dns1 sshd[1779533]: Invalid user user from 109.197.54.138 port 45216
...
show less
2026-06-11T18:57:38.772283+02:00 RYZEN-1 sshd[1961198]: Invalid user user from 109.197.54.138 port 4 ...
show more2026-06-11T18:57:38.772283+02:00 RYZEN-1 sshd[1961198]: Invalid user user from 109.197.54.138 port 45884
2026-06-11T18:57:39.174482+02:00 RYZEN-1 sshd[1961648]: Invalid user user from 109.197.54.138 port 45886
2026-06-11T18:57:39.579143+02:00 RYZEN-1 sshd[1961815]: Invalid user user from 109.197.54.138 port 45894
2026-06-11T18:57:40.008563+02:00 RYZEN-1 sshd[1961817]: Invalid user user from 109.197.54.138 port 45902
2026-06-11T18:57:40.392524+02:00 RYZEN-1 sshd[1961819]: Invalid user user from 109.197.54.138 port 45914
...
show less
CSF/LFD blocked 109.197.54.138 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH ...
show moreCSF/LFD blocked 109.197.54.138 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 109.197.54.138 (RU/Russia/-): 5 in the last 3600 secs. Evidence: Jun 11 09:54:58 paladin sshd-session[1658266]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.197.54.138 user=root
show less
2026-06-11T13:39:10.569420+00:00 Neptun sshd[4044270]: Connection from 109.197.54.138 port 34278 on ...
show more2026-06-11T13:39:10.569420+00:00 Neptun sshd[4044270]: Connection from 109.197.54.138 port 34278 on 85.215.78.90 port 22 rdomain ""
2026-06-11T13:39:10.759257+00:00 Neptun sshd[4044270]: Invalid user user from 109.197.54.138 port 34278
...
show less
Jun 11 15:19:48 pbx-router-01.de.pbx-host.com sshd[2237283]: Connection closed by authenticating use ...
show moreJun 11 15:19:48 pbx-router-01.de.pbx-host.com sshd[2237283]: Connection closed by authenticating user root 109.197.54.138 port 48356 [preauth]
Jun 11 15:19:49 pbx-router-01.de.pbx-host.com sshd[2237285]: Connection closed by authenticating user root 109.197.54.138 port 48358 [preauth]
Jun 11 15:19:49 pbx-router-01.de.pbx-host.com sshd[2237287]: Connection closed by authenticating user root 109.197.54.138 port 48374 [preauth]
Jun 11 15:19:49 pbx-router-01.de.pbx-host.com sshd[2237289]: Connection closed by authenticating user root 109.197.54.138 port 48382 [preauth]
Jun 11 15:19:49 pbx-router-01.de.pbx-host.com sshd[2237291]: Connection closed by authenticating user root 109.197.54.138 port 48384 [preauth]
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-11T08:52:21Z and 2026-06-1 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-11T08:52:21Z and 2026-06-11T08:52:23Z
show less
Honeypot bot from RU: 21 SSH login attempts; 1 commands executed; first 2026-06-11 07:16:43, last 20 ...
show moreHoneypot bot from RU: 21 SSH login attempts; 1 commands executed; first 2026-06-11 07:16:43, last 2026-06-11 07:18:07
show less