AbuseIPDB » 138.2.128.199

138.2.128.199 was found in our database!

This IP was reported 673 times. Confidence of Abuse is 100%: ?

100%

ISP	Oracle Corporation
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 138.2.128.199

Whois 138.2.128.199

IP Abuse Reports for 138.2.128.199:

This IP address has been reported a total of 673 times from 338 distinct sources. 138.2.128.199 was first reported on December 10th 2024, and the most recent report was 6 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
diego	2025-01-20 10:41:45 (6 hours ago)	[rede-164-29] (sshd) Failed SSH login from 138.2.128.199 (DE/Germany/-): 5 in the last 3600 secs; Po ... show more[rede-164-29] (sshd) Failed SSH login from 138.2.128.199 (DE/Germany/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jan 20 07:40:43 sshd[8466]: Did not receive identification string from 138.2.128.199 port 36072 Jan 20 07:40:59 sshd[8470]: Invalid user [USERNAME] from 138.2.128.199 port 36078 Jan 20 07:41:02 sshd[8470]: Failed password for invalid user [USERNAME] from 138.2.128.199 port 36078 ssh2 Jan 20 07:41:38 sshd[8481]: Invalid user [USERNAME] from 138.2.128.199 port 43230 Jan 20 07:41:40 sshd[8481]: Failed password for invalid user [USERNAME] from 138.2.128.199 port 43230 ssh2 show less	Port Scan
kathanp	2025-01-20 05:06:44 (11 hours ago)	2025-01-20T05:05:45.590216+00:00 s11574 sshd[20027]: Invalid user admin from 138.2.128.199 port 5723 ... show more2025-01-20T05:05:45.590216+00:00 s11574 sshd[20027]: Invalid user admin from 138.2.128.199 port 57238 2025-01-20T05:06:37.294241+00:00 s11574 sshd[20148]: Invalid user gpadmin from 138.2.128.199 port 57660 2025-01-20T05:06:38.783878+00:00 s11574 sshd[20150]: Invalid user minit from 138.2.128.199 port 56554 ... show less	Brute-Force SSH
mailverify	2025-01-20 04:17:06 (12 hours ago)	2025-01-20T04:17:04.060427+00:00 mapir-proxmox sshd[2725264]: Invalid user router from 138.2.128.199 ... show more2025-01-20T04:17:04.060427+00:00 mapir-proxmox sshd[2725264]: Invalid user router from 138.2.128.199 port 40466 2025-01-20T04:17:04.073764+00:00 mapir-proxmox sshd[2725264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.128.199 2025-01-20T04:17:06.088025+00:00 mapir-proxmox sshd[2725264]: Failed password for invalid user router from 138.2.128.199 port 40466 ssh2 ... show less	Brute-Force SSH
chirorist	2025-01-20 00:18:27 (16 hours ago)	2025-01-20T09:18:19.726913 vps1.chirorist.org sshd[1167447]: Failed password for invalid user system ... show more2025-01-20T09:18:19.726913 vps1.chirorist.org sshd[1167447]: Failed password for invalid user systemv from 138.2.128.199 port 56976 ssh2 2025-01-20T09:18:21.645979 vps1.chirorist.org sshd[1167449]: Invalid user client001 from 138.2.128.199 port 56992 2025-01-20T09:18:21.892342 vps1.chirorist.org sshd[1167449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.128.199 2025-01-20T09:18:24.274989 vps1.chirorist.org sshd[1167449]: Failed password for invalid user client001 from 138.2.128.199 port 56992 ssh2 2025-01-20T09:18:26.589355 vps1.chirorist.org sshd[1167458]: Invalid user gpadmin from 138.2.128.199 port 37152 ... show less	Brute-Force SSH
urnilxfgbez	2025-01-19 23:45:00 (16 hours ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
pianoman911	2025-01-19 22:41:22 (18 hours ago)	Jan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3600961]: Invalid user sysadm from 138.2.128.199 ... show moreJan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3600961]: Invalid user sysadm from 138.2.128.199 port 35828 Jan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3601026]: Invalid user admin from 138.2.128.199 port 35834 Jan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3601179]: Invalid user ubuntu from 138.2.128.199 port 35852 Jan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3601318]: Invalid user admin from 138.2.128.199 port 35868 Jan 19 23:41:21 Debian-1010-buster-64-minimal sshd[3601386]: Invalid user admin from 138.2.128.199 port 35884 ... show less	Brute-Force SSH
Fr13nds.Tech	2025-01-19 22:08:26 (18 hours ago)	Jan 19 23:08:20 plesk sshd[3912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreJan 19 23:08:20 plesk sshd[3912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.128.199 Jan 19 23:08:22 plesk sshd[3912]: Failed password for invalid user systemv from 138.2.128.199 port 51138 ssh2 Jan 19 23:08:22 plesk sshd[3920]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.128.199 user=root Jan 19 23:08:23 plesk sshd[3920]: Failed password for root from 138.2.128.199 port 51144 ssh2 Jan 19 23:08:23 plesk sshd[3928]: Invalid user sysadm from 138.2.128.199 port 49320 show less	Brute-Force SSH
ask7625	2025-01-19 21:28:49 (19 hours ago)	Jan 19 23:28:48 AB_2024 sshd[10527]: Failed password for root from 138.2.128.199 port 33692 ssh2<br ... show moreJan 19 23:28:48 AB_2024 sshd[10527]: Failed password for root from 138.2.128.199 port 33692 ssh2 Jan 19 23:28:48 AB_2024 sshd[10529]: Invalid user t128 from 138.2.128.199 port 33706 Jan 19 23:28:48 AB_2024 sshd[10529]: Failed password for invalid user t128 from 138.2.128.199 port 33706 ssh2 ... show less	SSH
Infocom	2025-01-19 20:57:41 (19 hours ago)	SSH_Brute-Force	Brute-Force
LoNET	2025-01-19 20:19:27 (20 hours ago)	Report 1569248 with IP 2558367 for SSH brute-force attack by source 2611473 via ssh-honeypot/0.2.0+h ... show moreReport 1569248 with IP 2558367 for SSH brute-force attack by source 2611473 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
amit177	2025-01-19 20:00:08 (20 hours ago)		Brute-Force SSH
Gregor Makdac	2025-01-19 18:39:32 (22 hours ago)	Hetzner-F2B blocked SSH BF-	Brute-Force SSH
Sawasdee	2025-01-19 16:27:08 (1 day ago)	SSH break in attempt ...	SSH
david1117	2025-01-19 16:17:29 (1 day ago)	Jan 19 16:17:12 web sshd[217738]: Invalid user cisco from 138.2.128.199 port 41626 Jan 19 16:1 ... show moreJan 19 16:17:12 web sshd[217738]: Invalid user cisco from 138.2.128.199 port 41626 Jan 19 16:17:12 web sshd[217740]: Invalid user ubnt from 138.2.128.199 port 41642 Jan 19 16:17:28 web sshd[217748]: Invalid user admin from 138.2.128.199 port 40444 Jan 19 16:17:28 web sshd[217750]: Invalid user gpadmin from 138.2.128.199 port 40452 Jan 19 16:17:28 web sshd[217752]: Invalid user vpn from 138.2.128.199 port 40462 ... show less	Brute-Force SSH
services.org.pl	2025-01-19 16:04:16 (1 day ago)	2025-01-19T16:04:16.710246+00:00 ubuntu2204 sshd[1731710]: Invalid user cisco from 138.2.128.199 por ... show more2025-01-19T16:04:16.710246+00:00 ubuntu2204 sshd[1731710]: Invalid user cisco from 138.2.128.199 port 55778 show less	Brute-Force SSH