JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.124.242.51

138.124.242.51 was found in our database!

This IP was reported 970 times. Confidence of Abuse is 100%: ?

100%

ISP	INTEZIO Network
Usage Type	Data Center/Web Hosting/Transit
ASN	AS207567
Domain Name	intezio.net
Country	🇵🇱 Poland
City	Warsaw, Mazovia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.124.242.51

Whois 138.124.242.51

IP Abuse Reports for 138.124.242.51:

This IP address has been reported a total of 970 times from 455 distinct sources. 138.124.242.51 was first reported on June 6th 2026, and the most recent report was 17 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 S.O.B.A. Dev.	2026-06-25 05:45:47 (17 minutes ago)	Persistent port scanning or vulnerability scanning	Port Scan
🇩🇪 Alfafoxtrot	2026-06-25 05:45:33 (17 minutes ago)	Reason: mass scanner \| src-ip: 138.124.242.51 \| dport=80 \| Protoc.=TCP \| Inc. 2d: 2	Port Scan
🇩🇪 kipfel★	2026-06-25 04:50:18 (1 hour ago)	2026-06-25T06:26:54.290546+02:00 hz-dedi-sx134-fsn sshd-session[3668860]: Invalid user admin from 13 ... show more 2026-06-25T06:26:54.290546+02:00 hz-dedi-sx134-fsn sshd-session[3668860]: Invalid user admin from 138.124.242.51 port 57356 2026-06-25T06:29:50.396727+02:00 hz-dedi-sx134-fsn sshd-session[3670875]: Invalid user orangepi from 138.124.242.51 port 51288 2026-06-25T06:50:17.794155+02:00 hz-dedi-sx134-fsn sshd-session[3685109]: Invalid user test from 138.124.242.51 port 38648 ... show less	Brute-Force SSH
🇺🇸 lnklnx	2026-06-25 04:36:12 (1 hour ago)	www.lnklnx.com:80 138.124.242.51 - - [24/Jun/2026:23:36:10 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e ... show more www.lnklnx.com:80 138.124.242.51 - - [24/Jun/2026:23:36:10 -0500] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 527 "-" "libredtail-http" ... show less	Web App Attack
🇩🇪 lumbermatt_de	2026-06-25 03:56:07 (2 hours ago)	Vulnerability exploit attack detected	Web App Attack
🇫🇷 Max la Menace	2026-06-25 03:43:30 (2 hours ago)	2026-06-25T04:40:35.904558+01:00 ns3124905 sshd-session[1207114]: pam_unix(sshd:auth): authenticatio ... show more 2026-06-25T04:40:35.904558+01:00 ns3124905 sshd-session[1207114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.242.51 2026-06-25T04:40:37.460839+01:00 ns3124905 sshd-session[1207114]: Failed password for invalid user admin from 138.124.242.51 port 54942 ssh2 2026-06-25T04:43:28.823554+01:00 ns3124905 sshd-session[1207818]: Invalid user orangepi from 138.124.242.51 port 56640 ... show less	Brute-Force SSH
🇺🇸 MPL	2026-06-25 03:23:15 (2 hours ago)	tcp/2375 (2 or more attempts)	Port Scan
🇸🇬 SentinalX by uzumaru	2026-06-25 03:22:30 (2 hours ago)	SSH brute-force detected: 22 failed login attempts in the last 1 hour.	Brute-Force SSH
🇧🇷 Peregrine	2026-06-25 03:12:50 (2 hours ago)	Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 138.124.242.51 - - [22/Jun/2026:20:14:55 -0300] "GET ... show more Fail2Ban S3 Jail: tomcat-honeypot \| Evidence: - 138.124.242.51 - - [22/Jun/2026:20:14:55 -0300] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414 - 138.124.242.51 - - [22/Jun/2026:20:14:56 -0300] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414 - 138.124.242.51 - - [22/Jun/2026:20:14:57 -0300] "GET /vendor/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 414 - 138.124.242.51 - - [22/Jun/2026:20:14:58 -0300] "GET /vendor/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 414 - 138.124.242.51 - - [22/Jun/2026:20:14:59 -0300] "GET /vendor/phpunit/phpunit/LICENSE/eval-stdin.php HTTP/1.1" 404 414 show less	Bad Web Bot
🇩🇪 D3vNu11	2026-06-25 02:11:03 (3 hours ago)	Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: Poland 1x -> Target Country: Germany HT ... show more Level: (LOW): Known Attacker via CitrixHoneypot IOC Country: Poland 1x -> Target Country: Germany HTTPS show less	Hacking Web App Attack
🇺🇸 mw	2026-06-25 01:34:11 (4 hours ago)	Web App Attack	Web App Attack
🇩🇪 ghostwarriors	2026-06-25 00:50:28 (5 hours ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇨🇭 GAS	2026-06-25 00:24:17 (5 hours ago)	Direct IP access. 138.124.242.51 - - [25/Jun/2026:02:24:16 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e ... show more Direct IP access. 138.124.242.51 - - [25/Jun/2026:02:24:16 +0200] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 392 "-" "libredtail-http" "REDACTED:80" "-" 138.124.242.51 - - [25/Jun/2026:02:24:17 +0200] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 392 "-" "libredtail-http" "REDACTED:80" "-" ... show less	Port Scan Web App Attack
🇺🇸 MPL	2026-06-24 23:41:12 (6 hours ago)	tcp/23 (2 or more attempts)	Port Scan
🇸🇬 LilaS	2026-06-24 23:34:42 (6 hours ago)	2026-06-25T07:31:44.269577oswald-lab sshd[1913601]: pam_unix(sshd:auth): authentication failure; log ... show more 2026-06-25T07:31:44.269577oswald-lab sshd[1913601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.242.51 user=backup 2026-06-25T07:31:46.123917oswald-lab sshd[1913601]: Failed password for backup from 138.124.242.51 port 37254 ssh2 2026-06-25T07:34:39.472216oswald-lab sshd[1914781]: Invalid user admin from 138.124.242.51 port 49554 2026-06-25T07:34:39.474918oswald-lab sshd[1914781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.242.51 2026-06-25T07:34:41.354248oswald-lab sshd[1914781]: Failed password for invalid user admin from 138.124.242.51 port 49554 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 970 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.86

🇵🇰 202.63.202.211

🇺🇸 185.139.214.166

🇩🇪 172.253.1.210

🇺🇸 107.150.98.168

🇵🇰 37.111.163.132

🇸🇬 192.161.164.176

🇨🇱 190.114.39.112

🇺🇸 172.234.192.12

🇺🇸 148.105.11.115

🇨🇮 102.67.201.15

🇳🇱 80.82.77.202

🇸🇬 45.43.63.68

🇧🇷 45.38.89.123

🇷🇴 2.57.121.25

🇺🇸 207.90.244.22

🇳🇱 204.76.203.206

🇬🇧 195.206.182.217

🇲🇽 187.192.86.153

🇩🇪 185.242.3.226