This IP address has been reported a total of
312
times from
195 distinct
sources.
138.113.22.152 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
(sshd) Failed SSH login from 138.113.22.152 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 138.113.22.152 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 27 00:01:21 15171 sshd[1954]: Invalid user ubuntu from 138.113.22.152 port 41756
May 27 00:01:23 15171 sshd[1954]: Failed password for invalid user ubuntu from 138.113.22.152 port 41756 ssh2
May 27 00:02:53 15171 sshd[2184]: Invalid user temp from 138.113.22.152 port 40346
May 27 00:02:55 15171 sshd[2184]: Failed password for invalid user temp from 138.113.22.152 port 40346 ssh2
May 27 00:04:22 15171 sshd[2498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.152 user=root
show less
2026-05-27T06:57:17.178690+02:00 gw-de02-01.guestgw.net sshd[167891]: Disconnected from authenticati ...
show more2026-05-27T06:57:17.178690+02:00 gw-de02-01.guestgw.net sshd[167891]: Disconnected from authenticating user root 138.113.22.152 port 39566 [preauth]
2026-05-27T07:02:14.189649+02:00 gw-de02-01.guestgw.net sshd[169412]: Invalid user ubuntu from 138.113.22.152 port 37322
2026-05-27T07:02:14.313848+02:00 gw-de02-01.guestgw.net sshd[169412]: Disconnected from invalid user ubuntu 138.113.22.152 port 37322 [preauth]
2026-05-27T07:03:43.829038+02:00 gw-de02-01.guestgw.net sshd[169820]: Invalid user temp from 138.113.22.152 port 34060
2026-05-27T07:03:43.969010+02:00 gw-de02-01.guestgw.net sshd[169820]: Disconnected from invalid user temp 138.113.22.152 port 34060 [preauth]
show less
Honeypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credentials: root:ABCabc123, ubu ...
show moreHoneypot [uk-production01]: Brute-force attack detected on 22/SSH
• Credentials: root:ABCabc123, ubuntu:fjbdfdjkdsfs541544AA@@, 345gs5662d34:345gs5662d34, ubuntu:3245gs5662d34, temp:1234
• Number of login attempts: 5
• 20 command(s) were executed during the session
• Client: SSH-2.0-libssh_0.9.6
show less
Automated report: SSH brute force detected, this IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected, this IP exceeded the allowed number of failed login attempts (3 attempts).
show less
May 27 06:58:50 OPSO sshd\[31925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 e ...
show moreMay 27 06:58:50 OPSO sshd\[31925\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.152 user=root
May 27 06:58:51 OPSO sshd\[31925\]: Failed password for root from 138.113.22.152 port 33168 ssh2
May 27 07:02:26 OPSO sshd\[32477\]: Invalid user ubuntu from 138.113.22.152 port 33744
May 27 07:02:26 OPSO sshd\[32477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.152
May 27 07:02:28 OPSO sshd\[32477\]: Failed password for invalid user ubuntu from 138.113.22.152 port 33744 ssh2
show less
2026-05-27T04:21:10.616504+00:00 de2.cbz.pw sshd[2164857]: Failed password for invalid user user fro ...
show more2026-05-27T04:21:10.616504+00:00 de2.cbz.pw sshd[2164857]: Failed password for invalid user user from 138.113.22.152 port 53836 ssh2
2026-05-27T04:27:24.971602+00:00 de2.cbz.pw sshd[2164919]: Invalid user oguz from 138.113.22.152 port 49166
2026-05-27T04:27:24.975149+00:00 de2.cbz.pw sshd[2164919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.113.22.152
2026-05-27T04:27:26.979243+00:00 de2.cbz.pw sshd[2164919]: Failed password for invalid user oguz from 138.113.22.152 port 49166 ssh2
2026-05-27T04:28:54.565427+00:00 de2.cbz.pw sshd[2164959]: Invalid user user1 from 138.113.22.152 port 55378
...
show less
Brute-Force
SSH
Showing 1 to
15
of 312 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩