This IP address has been reported a total of
504
times from
276 distinct
sources.
138.113.22.151 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-25T02:56:52.392947+03:00 atom sshd-session[316324]: Invalid user shilei from 138.113.22.151 ...
show more2026-05-25T02:56:52.392947+03:00 atom sshd-session[316324]: Invalid user shilei from 138.113.22.151 port 56788
2026-05-25T02:56:52.402290+03:00 atom sshd-session[316324]: Failed password for invalid user shilei from 138.113.22.151 port 56788 ssh2
2026-05-25T03:00:09.804934+03:00 atom sshd-session[316571]: Failed password for root from 138.113.22.151 port 36428 ssh2
2026-05-25T03:03:20.219626+03:00 atom sshd-session[316718]: Invalid user cloud from 138.113.22.151 port 34220
2026-05-25T03:03:20.230810+03:00 atom sshd-session[316718]: Failed password for invalid user cloud from 138.113.22.151 port 34220 ssh2
...
show less
2026-05-24T23:48:12.275283+00:00 vendor-details sshd[944046]: User root from 138.113.22.151 not allo ...
show more2026-05-24T23:48:12.275283+00:00 vendor-details sshd[944046]: User root from 138.113.22.151 not allowed because not listed in AllowUsers
2026-05-24T23:51:25.238729+00:00 vendor-details sshd[945904]: User root from 138.113.22.151 not allowed because not listed in AllowUsers
2026-05-24T23:54:46.004003+00:00 vendor-details sshd[947703]: Invalid user shilei from 138.113.22.151 port 48232
...
show less
May 25 01:48:49 vps2 sshd[1983381]: Failed password for root from 138.113.22.151 port 50912 ssh2
May ...
show moreMay 25 01:48:49 vps2 sshd[1983381]: Failed password for root from 138.113.22.151 port 50912 ssh2
May 25 01:52:00 vps2 sshd[1984050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
May 25 01:52:03 vps2 sshd[1984050]: Failed password for root from 138.113.22.151 port 50696 ssh2
...
show less
Report 2400090 with IP 3447657 for SSH brute-force attack by source 3442315 via ssh-honeypot/0.2.1+h ...
show moreReport 2400090 with IP 3447657 for SSH brute-force attack by source 3442315 via ssh-honeypot/0.2.1+http
show less
2026-05-24T16:41:09.606806-07:00 server.vexstria.pro sshd[698719]: Failed password for root from 138 ...
show more2026-05-24T16:41:09.606806-07:00 server.vexstria.pro sshd[698719]: Failed password for root from 138.113.22.151 port 44344 ssh2
2026-05-24T16:48:33.993232-07:00 server.vexstria.pro sshd[842761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
2026-05-24T16:48:36.361226-07:00 server.vexstria.pro sshd[842761]: Failed password for root from 138.113.22.151 port 58458 ssh2
...
show less
138.113.22.151 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more138.113.22.151 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 24 18:35:36 16727 sshd[27210]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
May 24 18:35:38 16727 sshd[27210]: Failed password for root from 138.113.22.151 port 37140 ssh2
May 24 18:42:03 16727 sshd[27934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
May 24 18:42:04 16727 sshd[27934]: Failed password for root from 138.113.22.151 port 33970 ssh2
May 24 18:34:18 16727 sshd[27067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.70.206.6 user=root
IP Addresses Blocked:
show less
May 24 19:40:45 Tower sshd-session[774339]: Connection from 138.113.22.151 port 40676 on 192.168.10. ...
show moreMay 24 19:40:45 Tower sshd-session[774339]: Connection from 138.113.22.151 port 40676 on 192.168.10.220 port 22 rdomain ""
May 24 19:40:45 Tower sshd-session[774339]: Failed password for root from 138.113.22.151 port 40676 ssh2
May 24 19:40:46 Tower sshd-session[774339]: Received disconnect from 138.113.22.151 port 40676:11: Bye Bye [preauth]
May 24 19:40:46 Tower sshd-session[774339]: Disconnected from authenticating user root 138.113.22.151 port 40676 [preauth]
May 24 19:40:46 Tower sshd[3606]: srclimit_penalise: ipv4: new 138.113.22.151/32 deferred penalty of 5 seconds for penalty: failed authentication
show less
2026-05-24T23:13:37.538315+00:00 web01 sshd[2419534]: Invalid user rapid from 138.113.22.151 port 34 ...
show more2026-05-24T23:13:37.538315+00:00 web01 sshd[2419534]: Invalid user rapid from 138.113.22.151 port 34156
2026-05-24T23:13:37.541886+00:00 web01 sshd[2419534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151
2026-05-24T23:13:39.498796+00:00 web01 sshd[2419534]: Failed password for invalid user rapid from 138.113.22.151 port 34156 ssh2
2026-05-24T23:16:53.867015+00:00 web01 sshd[2419632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
2026-05-24T23:16:55.396515+00:00 web01 sshd[2419632]: Failed password for root from 138.113.22.151 port 45452 ssh2
...
show less
2026-05-24T22:54:34.002721+00:00 web01 sshd[2419136]: Invalid user unity from 138.113.22.151 port 48 ...
show more2026-05-24T22:54:34.002721+00:00 web01 sshd[2419136]: Invalid user unity from 138.113.22.151 port 48476
2026-05-24T22:54:34.006672+00:00 web01 sshd[2419136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151
2026-05-24T22:54:36.049161+00:00 web01 sshd[2419136]: Failed password for invalid user unity from 138.113.22.151 port 48476 ssh2
2026-05-24T22:57:54.520802+00:00 web01 sshd[2419197]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.151 user=root
2026-05-24T22:57:56.689030+00:00 web01 sshd[2419197]: Failed password for root from 138.113.22.151 port 48614 ssh2
...
show less
2026-05-25T00:34:23.134900+02:00 arm-fr sshd[183916]: Invalid user curl from 138.113.22.151 port 353 ...
show more2026-05-25T00:34:23.134900+02:00 arm-fr sshd[183916]: Invalid user curl from 138.113.22.151 port 35304
2026-05-25T00:37:40.851473+02:00 arm-fr sshd[185223]: Invalid user clock from 138.113.22.151 port 45374
2026-05-25T00:40:49.303286+02:00 arm-fr sshd[186416]: Invalid user cloud from 138.113.22.151 port 51556
...
show less
Brute-Force
SSH
Showing 451 to
465
of 504 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩