JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 138.201.125.49

138.201.125.49 was found in our database!

This IP was reported 50 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.49.125.201.138.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Falkenstein, Saxony

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 138.201.125.49

Whois 138.201.125.49

IP Abuse Reports for 138.201.125.49:

This IP address has been reported a total of 50 times from 46 distinct sources. 138.201.125.49 was first reported on October 18th 2022, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇹 urnilxfgbez	2026-07-04 22:45:00 (2 days ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇸🇬 kipfel★	2026-07-04 15:24:39 (2 days ago)	2026-07-04T23:12:13.049389+08:00 hh-vm-bf25-5t-sgp sshd-session[279757]: Invalid user admin from 138 ... show more 2026-07-04T23:12:13.049389+08:00 hh-vm-bf25-5t-sgp sshd-session[279757]: Invalid user admin from 138.201.125.49 port 45962 2026-07-04T23:13:48.589733+08:00 hh-vm-bf25-5t-sgp sshd-session[280224]: Invalid user orangepi from 138.201.125.49 port 40382 2026-07-04T23:24:38.997453+08:00 hh-vm-bf25-5t-sgp sshd-session[283057]: Invalid user test from 138.201.125.49 port 50560 ... show less	Brute-Force SSH
🇸🇬 tommygod.ddns.net	2026-07-04 15:23:22 (2 days ago)	2026-07-04T15:21:44.333052+00:00 mailtommygod sshd[1658618]: Invalid user orangepi from 138.201.125. ... show more 2026-07-04T15:21:44.333052+00:00 mailtommygod sshd[1658618]: Invalid user orangepi from 138.201.125.49 port 45258 2026-07-04T15:21:44.337884+00:00 mailtommygod sshd[1658618]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.125.49 2026-07-04T15:21:46.902722+00:00 mailtommygod sshd[1658618]: Failed password for invalid user orangepi from 138.201.125.49 port 45258 ssh2 2026-07-04T15:23:20.361235+00:00 mailtommygod sshd[1658985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.125.49 user=root 2026-07-04T15:23:22.440413+00:00 mailtommygod sshd[1658985]: Failed password for root from 138.201.125.49 port 36856 ssh2 show less	Brute-Force SSH
Anonymous	2026-07-04 15:04:45 (2 days ago)	2026-07-04T15:03:12.633438+00:00 ubuntu sshd[1788250]: Failed password for invalid user admin from 1 ... show more 2026-07-04T15:03:12.633438+00:00 ubuntu sshd[1788250]: Failed password for invalid user admin from 138.201.125.49 port 38942 ssh2 2026-07-04T15:03:14.695592+00:00 ubuntu sshd[1788250]: Connection closed by invalid user admin 138.201.125.49 port 38942 [preauth] 2026-07-04T15:04:42.957514+00:00 ubuntu sshd[1788345]: Invalid user orangepi from 138.201.125.49 port 52402 2026-07-04T15:04:42.959985+00:00 ubuntu sshd[1788345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.125.49 2026-07-04T15:04:44.552410+00:00 ubuntu sshd[1788345]: Failed password for invalid user orangepi from 138.201.125.49 port 52402 ssh2 ... show less	Brute-Force SSH
🇺🇦 venko	2026-07-04 15:04:43 (2 days ago)	F2B/SSH	Brute-Force SSH
Anonymous	2026-07-04 15:04:28 (2 days ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇦🇺 2000cn.com.au	2026-07-04 14:43:02 (2 days ago)	This IP was detected by CrowdSec triggering crowdsecurity/http-cve-2021-41773	Web App Attack Hacking
🇺🇸 MPL	2026-07-04 14:41:32 (2 days ago)	tcp/2222 (4 or more attempts)	Port Scan
🇨🇦 Anytech	2026-07-04 14:02:56 (2 days ago)	Blocked by Conn-Monitor: ssh-invalid-user	Brute-Force SSH Bad Web Bot
🇯🇵 S.O.B.A. Dev.	2026-07-04 13:52:01 (2 days ago)	Repeated SSH login failures	SSH Port Scan Brute-Force
🇺🇸 mutebot.net	2026-07-04 13:46:43 (2 days ago)	Invalid user admin from 138.201.125.49 port 40348 Connection closed by invalid user admin 138.201.12 ... show more Invalid user admin from 138.201.125.49 port 40348 Connection closed by invalid user admin 138.201.125.49 port 40348 [preauth] Invalid user orangepi from 138.201.125.49 port 58506 Connection closed by invalid user orangepi 138.201.125.49 port 58506 [preauth] Connection closed by authenticating user root 138.201.125.49 port 40908 [preauth] show less	Brute-Force SSH
Anonymous	2026-07-04 13:30:04 (3 days ago)	IP banned by Fail2Ban in jail nginx-abusive-ips	Web App Attack Brute-Force Bad Web Bot
🇫🇷 antivirus_5846	2026-07-04 13:28:44 (3 days ago)	2026-07-04T13:27:24.202211+00:00 hms84483 sshd-session[1708787]: Invalid user orangepi from 138.201. ... show more 2026-07-04T13:27:24.202211+00:00 hms84483 sshd-session[1708787]: Invalid user orangepi from 138.201.125.49 port 34146 2026-07-04T13:27:24.211613+00:00 hms84483 sshd-session[1708787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.125.49 2026-07-04T13:27:26.106822+00:00 hms84483 sshd-session[1708787]: Failed password for invalid user orangepi from 138.201.125.49 port 34146 ssh2 2026-07-04T13:28:41.581837+00:00 hms84483 sshd-session[1708839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.201.125.49 user=root 2026-07-04T13:28:43.277760+00:00 hms84483 sshd-session[1708839]: Failed password for root from 138.201.125.49 port 43456 ssh2 ... show less	Brute-Force SSH
🇳🇱 maxxsense	2026-07-04 13:13:19 (3 days ago)	(apache-scanners) Failed apache-scanners trigger with match [redacted] from 138.201.125.49 (DE/Germa ... show more (apache-scanners) Failed apache-scanners trigger with match [redacted] from 138.201.125.49 (DE/Germany/static.49.125.201.138.clients.your-server.de) show less	Port Scan
🇩🇪 ipcop.net	2026-07-04 12:27:14 (3 days ago)	2026-07-04T14:24:01.773846+02:00 sso-host-01.sso.srvfarm.net sshd-session[44086]: Connection closed ... show more 2026-07-04T14:24:01.773846+02:00 sso-host-01.sso.srvfarm.net sshd-session[44086]: Connection closed by authenticating user admin 138.201.125.49 port 40544 [preauth] 2026-07-04T14:25:04.083607+02:00 sso-host-01.sso.srvfarm.net sshd-session[44148]: Invalid user orangepi from 138.201.125.49 port 57460 2026-07-04T14:25:04.185945+02:00 sso-host-01.sso.srvfarm.net sshd-session[44148]: Connection closed by invalid user orangepi 138.201.125.49 port 57460 [preauth] 2026-07-04T14:26:07.098505+02:00 sso-host-01.sso.srvfarm.net sshd-session[44190]: Connection closed by authenticating user root 138.201.125.49 port 56670 [preauth] 2026-07-04T14:27:13.221885+02:00 sso-host-01.sso.srvfarm.net sshd-session[44236]: Connection closed by authenticating user root 138.201.125.49 port 57192 [preauth] show less	Brute-Force

Showing 1 to 15 of 50 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 178.16.54.174

🇺🇸 172.190.89.127

🇺🇸 103.143.11.150

🇧🇬 79.124.62.230

🇺🇸 74.125.42.158

🇧🇷 45.5.222.112

🇺🇸 20.163.15.96

🇺🇸 2607:f8b0:4002:c0f::12e

🇭🇰 199.45.154.178

🇺🇸 172.217.46.149

🇺🇸 165.227.94.84

🇷🇺 89.189.181.54

🇵🇱 89.70.166.43

🇬🇧 45.8.224.186

🇧🇪 34.53.154.54

🇰🇷 211.251.245.88

🇮🇩 202.145.0.18

🇺🇸 172.202.118.23

🇨🇳 116.7.105.90

🇺🇸 107.167.34.125