This IP address has been reported a total of
12
times from
7 distinct
sources.
138.117.122.76 was first reported on
October 14th 2026 , and the most recent report was
5 days ago Brazil
with 4
reports;
Belarus
with 4
reports;
Germany
with 1
report.
The most common categories in these recent reports were:
Port Scan
10
times;
Exploited Host
2
times;
Brute-Force
2
times;
SSH
1
time;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇧🇷
cibersecoptidata
2026-10-19 02:50:57
(5 days ago)
Port scan / Unsolicited traffic.
Port Scan
🇧🇷
cibersecoptidata
2026-10-18 02:50:49
(6 days ago)
Port scan / Unsolicited traffic.
Port Scan
🇧🇷
cibersecoptidata
2026-10-17 02:50:43
(1 week ago)
Port scan / Unsolicited traffic.
Port Scan
🇧🇾
sashan
2026-10-16 21:34:13
(1 week ago)
2026-10-17T00:34:13.022796+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122 ...
show more
2026-10-17T00:34:13.022796+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122.76 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=8871 DF PROTO=TCP SPT=56522 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇷
cibersecoptidata
2026-10-15 02:50:53
(1 week ago)
Port scan / Unsolicited traffic.
Port Scan
🇧🇾
sashan
2026-10-15 02:22:35
(1 week ago)
2026-10-15T05:22:34.611899+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122 ...
show more
2026-10-15T05:22:34.611899+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122.76 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=29682 DF PROTO=TCP SPT=49934 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇧🇾
stroytrest
2026-10-14 21:13:09
(1 week ago)
2026-10-15T00:13:08.559579+03:00 gate kernel: [1074678.449234] nftables: JAIL-TELNET IN=wan OUT= MAC ...
show more
2026-10-15T00:13:08.559579+03:00 gate kernel: [1074678.449234] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122.76 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=8691 DF PROTO=TCP SPT=37913 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0
...
show less
Port Scan
🇺🇸
NetGuard
2026-10-14 20:41:01
(1 week ago)
#honeypot #netguard247 #cowrie #ssh_telnet_probe
Captured by NetGuard 24/7 T-Pot honeypot (netguard2 ...
show more
#honeypot #netguard247 #cowrie #ssh_telnet_probe
Captured by NetGuard 24/7 T-Pot honeypot (netguard24-7.com).
Timestamp: 2026-10-14T20:36:06.45+00:00
Attacker IP: 138.117.122.76 | Port: 23 | Country: Brazil
Honeypot: cowrie | Attack: ssh_telnet_probe
Activity: 2 hits on port 23 between 2026-10-14T20:36:06.45+00:00 and 2026-10-14T20:36:20.531+00:00 (6h window 2026-10-14T18:00:00.000Z)
Source: NetGuard 24/7 (netguard24-7.com) | PhantomGrid Defense
show less
Brute-Force
SSH
🇧🇾
sashan
2026-10-14 20:15:59
(1 week ago)
2026-10-14T23:15:58.777575+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122 ...
show more
2026-10-14T23:15:58.777575+03:00 gate kernel: nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=138.117.122.76 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=34550 DF PROTO=TCP SPT=50583 DPT=23 WINDOW=28240 RES=0x00 SYN URGP=0
...
show less
Port Scan
2026-10-14 11:10:43
(1 week ago)
Hit honeypot r.
Port Scan
Hacking
Exploited Host
🇫🇷
security.rdmc.fr
2026-10-14 03:29:44
(1 week ago)
Port Scan Attack proto:TCP src:51044 dst:23
Port Scan
🇩🇪
Admins@Storch
2026-10-14 02:50:43
(1 week ago)
IPS:drop <match> dstport=23
Brute-Force
Exploited Host
Showing 1 to
12
of 12 reports
