This IP address has been reported a total of
1,687
times from
609 distinct
sources.
138.118.214.152 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
138.118.214.152 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scal ...
show more138.118.214.152 is one of many (potentially hijacked) hosts in a botnet. This attack is a large scale industrial operation attempting unrelenting brute-force login attempts for months on end - between all CIDR ranges in the botnet, our servers receive over 800 authentication attempts per minute on smtp, imap and relative mail ports, as well as ssh, and other protocols.
IP INFO:
- IP 138.118.214.152
- Anycast false
- City N/A
- Region N/A
- Region Code N/A
- Country N/A (N/A)
- Continent N/A (N/A)
- Range N/A
- Provider N/A
- Organisation N/A
- Proxy N/A
- Type N/A
show less
2026-06-02T07:00:03.880670+00:00 xtom-vm-cloud-2c1g-fra sshd-session[122361]: Invalid user md from 1 ...
show more2026-06-02T07:00:03.880670+00:00 xtom-vm-cloud-2c1g-fra sshd-session[122361]: Invalid user md from 138.118.214.152 port 56762
2026-06-02T07:03:22.374774+00:00 xtom-vm-cloud-2c1g-fra sshd-session[122366]: Invalid user vpn from 138.118.214.152 port 33140
2026-06-02T07:06:31.777556+00:00 xtom-vm-cloud-2c1g-fra sshd-session[122373]: Invalid user manjaro from 138.118.214.152 port 37734
...
show less
Brute-Force
SSH
Anonymous
2026-06-02T15:00:01.762822+08:00 HKCM1-20260502115917ab4c7d sshd[39023]: Invalid user md from 138.11 ...
show more2026-06-02T15:00:01.762822+08:00 HKCM1-20260502115917ab4c7d sshd[39023]: Invalid user md from 138.118.214.152 port 33328
2026-06-02T15:00:01.766419+08:00 HKCM1-20260502115917ab4c7d sshd[39023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T15:00:03.494714+08:00 HKCM1-20260502115917ab4c7d sshd[39023]: Failed password for invalid user md from 138.118.214.152 port 33328 ssh2
2026-06-02T15:03:20.361242+08:00 HKCM1-20260502115917ab4c7d sshd[39036]: Invalid user vpn from 138.118.214.152 port 37934
2026-06-02T15:03:20.373555+08:00 HKCM1-20260502115917ab4c7d sshd[39036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T15:03:22.753892+08:00 HKCM1-20260502115917ab4c7d sshd[39036]: Failed password for invalid user vpn from 138.118.214.152 port 37934 ssh2
...
show less
2026-06-02T14:56:37.430549+08:00 debian sshd[1170730]: Failed password for root from 138.118.214.152 ...
show more2026-06-02T14:56:37.430549+08:00 debian sshd[1170730]: Failed password for root from 138.118.214.152 port 39222 ssh2
2026-06-02T14:59:55.363527+08:00 debian sshd[1170782]: Invalid user md from 138.118.214.152 port 43826
2026-06-02T14:59:55.377144+08:00 debian sshd[1170782]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T14:59:57.283022+08:00 debian sshd[1170782]: Failed password for invalid user md from 138.118.214.152 port 43826 ssh2
2026-06-02T15:03:14.185705+08:00 debian sshd[1170809]: Invalid user vpn from 138.118.214.152 port 48432
...
show less
2026-06-02T02:59:48.129019-04:00 deltachat-jp sshd[1745884]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-02T02:59:48.129019-04:00 deltachat-jp sshd[1745884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T02:59:49.405546-04:00 deltachat-jp sshd[1745884]: Failed password for invalid user md from 138.118.214.152 port 58826 ssh2
2026-06-02T03:03:07.018393-04:00 deltachat-jp sshd[1761957]: Invalid user vpn from 138.118.214.152 port 35204
2026-06-02T03:03:07.020648-04:00 deltachat-jp sshd[1761957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T03:03:08.949496-04:00 deltachat-jp sshd[1761957]: Failed password for invalid user vpn from 138.118.214.152 port 35204 ssh2
...
show less
2026-06-02T06:58:57.348136+00:00 panel sshd[4180968]: Invalid user md from 138.118.214.152 port 3348 ...
show more2026-06-02T06:58:57.348136+00:00 panel sshd[4180968]: Invalid user md from 138.118.214.152 port 33484
2026-06-02T06:58:57.353624+00:00 panel sshd[4180968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
2026-06-02T06:58:59.629759+00:00 panel sshd[4180968]: Failed password for invalid user md from 138.118.214.152 port 33484 ssh2
...
show less
Jun 2 07:57:34 cloud sshd[14663]: Invalid user zx from 138.118.214.152 port 33752
Jun 2 08:00:40 c ...
show moreJun 2 07:57:34 cloud sshd[14663]: Invalid user zx from 138.118.214.152 port 33752
Jun 2 08:00:40 cloud sshd[14680]: Invalid user elasticsearch from 138.118.214.152 port 37764
Jun 2 08:03:41 cloud sshd[14696]: Invalid user tester from 138.118.214.152 port 41766
Jun 2 08:31:06 cloud sshd[14964]: Invalid user dev from 138.118.214.152 port 49604
Jun 2 08:34:06 cloud sshd[14983]: Invalid user zahid from 138.118.214.152 port 53608
show less
Brute-Force
SSH
Anonymous
SSH abuse or brute force attack detected by Fail2Ban
Jun 1 23:54:55 felix sshd[278201]: Invalid user zx from 138.118.214.152 port 55012
Jun 1 23:54:55 ...
show moreJun 1 23:54:55 felix sshd[278201]: Invalid user zx from 138.118.214.152 port 55012
Jun 1 23:54:55 felix sshd[278201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
Jun 1 23:54:56 felix sshd[278201]: Failed password for invalid user zx from 138.118.214.152 port 55012 ssh2
...
show less
Jun 2 06:54:44 localhost sshd[183150]: Invalid user jt from 138.118.214.152 port 56390
Jun 2 06:54 ...
show moreJun 2 06:54:44 localhost sshd[183150]: Invalid user jt from 138.118.214.152 port 56390
Jun 2 06:54:44 localhost sshd[183150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.118.214.152
Jun 2 06:54:44 localhost sshd[183150]: Invalid user jt from 138.118.214.152 port 56390
Jun 2 06:54:46 localhost sshd[183150]: Failed password for invalid user jt from 138.118.214.152 port 56390 ssh2
Jun 2 06:58:06 localhost sshd[183253]: Invalid user ubs from 138.118.214.152 port 60134
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: jt, Pass: [REDACTED]