138.201.199.18
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Hetzner Online GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS24940
- Hostname(s)
- static.18.199.201.138.clients.your-server.de
- Domain Name
- hetzner.com
- Country
- 🇩🇪 Germany
- City
- Falkenstein, Saxony
No reports in the last 60 days
138.201.199.18 has been reported 24 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
24 from
23 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 LSPCCU |
TSEC Honeypot Network report. Threat score: 91/100. Categories: Port Scan, Hacking, Brute-Force, Web App Attack, SSH. Honeypot: ssh-telnet, cowrie. Context: 138.
|
Port Scan Hacking Brute-Force Web App Attack SSH | |
| 🇸🇪 Mailz1 |
May 5 07:08:41 smtp sshd[623934]: error: maximum authentication attempts exceeded for invalid user root from 138.201.199.18 port 49522 ssh2 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 netllama |
|
Brute-Force SSH | |
| 🇰🇷 2048 |
2026-05-05T13:47:40.551609+09:00 no6 sshd[131189]: Disconnected from authenticating user root 138.201.199.18 port 40350 [preauth]
...
|
Brute-Force SSH | |
| Anonymous |
|
Brute-Force | |
| 🇬🇧 gbzret4d |
Honeypot [uk-production01]: Unauthorized connection attempt detected on 22/SSH
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: f0:f2:b5:12:9f:03:ab:e9:3a:66:f7:eb:9b:32:8e:9c
|
SSH Port Scan | |
| 🇵🇱 pshost.pl |
2026-05-05T04:16:22.291Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 138.201.199.18.
|
Port Scan Brute-Force SSH | |
| 🇺🇸 ShadowWhisperer |
SSH fingerprint.
|
Port Scan | |
| 🇷🇸 Smel |
SSH/22 MH Probe, BF, Hack -
|
Hacking Brute-Force SSH | |
| 🇨🇦 ImMarvolo |
May 5 03:55:10 ca-east-bhs-01 sshd[565753]: error: maximum authentication attempts exceeded for root from 138.201.199.18 port 54954 ssh2 [preauth]
...
|
Brute-Force SSH | |
| 🇨🇿 lp |
SSH Brute force: 1 attempts were recorded from 138.201.199.18
2026-05-05T04:01:21+02:00 Disconnected from authenticating user root 138.201.199.18 port 50396 [preauth]
|
Brute-Force SSH | |
| 🇨🇦 bdonvr |
|
Brute-Force SSH | |
| 🇺🇸 johuang92 |
Cowrie SSH honeypot: session ed8476733e6e | 5 login attempt(s) | classified as: brute_force
|
Brute-Force SSH | |
| 🇨🇦 Ssmidge |
|
Brute-Force | |
| 🇨🇦 ImMarvolo |
May 5 03:05:20 ca-east-bhs-01 sshd[565178]: error: maximum authentication attempts exceeded for root from 138.201.199.18 port 57684 ssh2 [preauth]
...
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown