This IP address has been reported a total of
23
times from
20 distinct
sources.
138.2.138.221 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-06T00:03:30.023323webserver sshd[8665]: Invalid user dummy from 138.2.138.221 port 56292
202 ...
show more2026-07-06T00:03:30.023323webserver sshd[8665]: Invalid user dummy from 138.2.138.221 port 56292
2026-07-06T00:03:31.895152webserver sshd[8665]: Failed password for invalid user dummy from 138.2.138.221 port 56292 ssh2
2026-07-06T00:10:29.616643webserver sshd[29618]: Invalid user zheng from 138.2.138.221 port 57198
...
show less
Disconnected from authenticating user root 138.2.138.221 port 56614 [preauth]
Invalid user adm from ...
show moreDisconnected from authenticating user root 138.2.138.221 port 56614 [preauth]
Invalid user adm from 138.2.138.221 port 49732
Disconnected from invalid user adm 138.2.138.221 port 49732 [preauth]
Disconnected from authenticating user root 138.2.138.221 port 39048 [preauth]
Invalid user zheng from 138.2.138.221 port 57200
show less
Jul 5 21:00:40 mack sshd[232375]: Invalid user adm from 138.2.138.221 port 40938
Jul 5 21:00:40 ma ...
show moreJul 5 21:00:40 mack sshd[232375]: Invalid user adm from 138.2.138.221 port 40938
Jul 5 21:00:40 mack sshd[232375]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.138.221
Jul 5 21:00:42 mack sshd[232375]: Failed password for invalid user adm from 138.2.138.221 port 40938 ssh2
...
show less
2026-07-06T03:26:26.929948+02:00 axisverse sshd-session[3111968]: Invalid user test from 138.2.138.2 ...
show more2026-07-06T03:26:26.929948+02:00 axisverse sshd-session[3111968]: Invalid user test from 138.2.138.221 port 34810
2026-07-06T03:35:49.130543+02:00 axisverse sshd-session[3145004]: Invalid user ubuntu from 138.2.138.221 port 57974
2026-07-06T03:39:16.441140+02:00 axisverse sshd-session[3157057]: Invalid user oracle from 138.2.138.221 port 50224
...
show less
Jul 5 19:22:06 b146-23 sshd[211418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 5 19:22:06 b146-23 sshd[211418]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.138.221
Jul 5 19:22:08 b146-23 sshd[211418]: Failed password for invalid user test from 138.2.138.221 port 48480 ssh2
Jul 5 19:34:53 b146-23 sshd[211569]: Invalid user ubuntu from 138.2.138.221 port 38640
...
show less
2026-07-06T03:01:44.824633+02:00 sd-64746 sshd[961692]: Invalid user lzj from 138.2.138.221 port 431 ...
show more2026-07-06T03:01:44.824633+02:00 sd-64746 sshd[961692]: Invalid user lzj from 138.2.138.221 port 43102
2026-07-06T03:05:08.024909+02:00 sd-64746 sshd[962392]: Invalid user fluentd from 138.2.138.221 port 58088
2026-07-06T03:11:51.524719+02:00 sd-64746 sshd[963779]: Invalid user deploy from 138.2.138.221 port 47618
...
show less
2026-07-06T00:20:57.511101+00:00 xtom-vm-cloud-2c1g-fra sshd-session[35170]: Invalid user oracle fro ...
show more2026-07-06T00:20:57.511101+00:00 xtom-vm-cloud-2c1g-fra sshd-session[35170]: Invalid user oracle from 138.2.138.221 port 34876
2026-07-06T00:24:31.411518+00:00 xtom-vm-cloud-2c1g-fra sshd-session[35190]: Invalid user cactiuser from 138.2.138.221 port 57170
2026-07-06T00:48:04.411856+00:00 xtom-vm-cloud-2c1g-fra sshd-session[35295]: Invalid user avorion from 138.2.138.221 port 46078
...
show less
Brute-Force
SSH
Anonymous
2026-07-06T00:20:30.209509+00:00 de-fra2-dns3 sshd[2824094]: Invalid user oracle from 138.2.138.221 ...
show more2026-07-06T00:20:30.209509+00:00 de-fra2-dns3 sshd[2824094]: Invalid user oracle from 138.2.138.221 port 57132
2026-07-06T00:33:46.812832+00:00 de-fra2-dns3 sshd[2824641]: Invalid user vmware from 138.2.138.221 port 34526
2026-07-06T00:47:28.012199+00:00 de-fra2-dns3 sshd[2825159]: Invalid user avorion from 138.2.138.221 port 37118
...
show less
Jul 6 02:13:12 web2 sshd[207171]: Failed password for root from 138.2.138.221 port 49192 ssh2
Jul ...
show moreJul 6 02:13:12 web2 sshd[207171]: Failed password for root from 138.2.138.221 port 49192 ssh2
Jul 6 02:18:49 web2 sshd[207186]: Failed password for root from 138.2.138.221 port 41780 ssh2
show less
2026-07-06T00:53:35.795505+02:00 web3 sshd-session[1549563]: Failed password for invalid user bitrix ...
show more2026-07-06T00:53:35.795505+02:00 web3 sshd-session[1549563]: Failed password for invalid user bitrix from 138.2.138.221 port 54396 ssh2
2026-07-06T00:57:17.223456+02:00 web3 sshd-session[1549638]: Invalid user odoo from 138.2.138.221 port 36950
2026-07-06T00:57:17.226321+02:00 web3 sshd-session[1549638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.2.138.221
2026-07-06T00:57:19.081886+02:00 web3 sshd-session[1549638]: Failed password for invalid user odoo from 138.2.138.221 port 36950 ssh2
show less
Brute-Force
SSH
Anonymous
sshd: Invalid user bitrix from 138.2.138.221 port 43722
sshd: Invalid user odoo from 138.2.138.221 p ...
show moresshd: Invalid user bitrix from 138.2.138.221 port 43722
sshd: Invalid user odoo from 138.2.138.221 port 58974
show less
Brute-Force
SSH
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩