This IP address has been reported a total of
100
times from
73 distinct
sources.
138.249.127.91 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-09T14:15:14.102127+09:00 kabedon sshd[224333]: pam_unix(sshd:auth): authentication failure; ...
show more2026-07-09T14:15:14.102127+09:00 kabedon sshd[224333]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91 user=root
2026-07-09T14:15:16.362425+09:00 kabedon sshd[224333]: Failed password for root from 138.249.127.91 port 60326 ssh2
2026-07-09T14:18:34.675841+09:00 kabedon sshd[227110]: Invalid user devops from 138.249.127.91 port 59264
2026-07-09T14:18:34.678421+09:00 kabedon sshd[227110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-09T14:18:36.728327+09:00 kabedon sshd[227110]: Failed password for invalid user devops from 138.249.127.91 port 59264 ssh2
...
show less
Brute-Force
SSH
Anonymous
<jail> banned by fail2ban
Brute-Force
Web App Attack
Anonymous
2026-07-09T13:48:45.648577+09:00 kabedon sshd[202142]: Failed password for invalid user cc from 138. ...
show more2026-07-09T13:48:45.648577+09:00 kabedon sshd[202142]: Failed password for invalid user cc from 138.249.127.91 port 57310 ssh2
2026-07-09T13:51:55.954716+09:00 kabedon sshd[204635]: Invalid user radmin from 138.249.127.91 port 46172
2026-07-09T13:51:55.964915+09:00 kabedon sshd[204635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-09T13:51:57.833389+09:00 kabedon sshd[204635]: Failed password for invalid user radmin from 138.249.127.91 port 46172 ssh2
2026-07-09T13:55:20.944495+09:00 kabedon sshd[207591]: Invalid user whz from 138.249.127.91 port 55586
...
show less
Brute-Force
SSH
Anonymous
2026-07-09T13:32:04.568858+09:00 kabedon sshd[188265]: pam_unix(sshd:auth): authentication failure; ...
show more2026-07-09T13:32:04.568858+09:00 kabedon sshd[188265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91 user=root
2026-07-09T13:32:06.599335+09:00 kabedon sshd[188265]: Failed password for root from 138.249.127.91 port 49672 ssh2
2026-07-09T13:35:29.168357+09:00 kabedon sshd[190936]: Invalid user test from 138.249.127.91 port 46182
2026-07-09T13:35:29.170939+09:00 kabedon sshd[190936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-09T13:35:31.677418+09:00 kabedon sshd[190936]: Failed password for invalid user test from 138.249.127.91 port 46182 ssh2
...
show less
Jul 9 13:54:15 main-frount sshd[1927201]: Invalid user server from 138.249.127.91 port 33012
Jul 9 ...
show moreJul 9 13:54:15 main-frount sshd[1927201]: Invalid user server from 138.249.127.91 port 33012
Jul 9 14:08:38 main-frount sshd[1927958]: Invalid user user from 138.249.127.91 port 49114
Jul 9 14:15:26 main-frount sshd[1928491]: Invalid user tester from 138.249.127.91 port 59932
Jul 9 14:18:46 main-frount sshd[1928653]: Invalid user up from 138.249.127.91 port 41606
Jul 9 14:35:22 main-frount sshd[1929554]: Invalid user test from 138.249.127.91 port 38446
...
show less
(sshd) Failed SSH login from 138.249.127.91 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: ...
show more(sshd) Failed SSH login from 138.249.127.91 (NL/The Netherlands/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 8 22:57:19 14421 sshd[24769]: Invalid user server from 138.249.127.91 port 54724
Jul 8 22:57:20 14421 sshd[24769]: Failed password for invalid user server from 138.249.127.91 port 54724 ssh2
Jul 8 23:09:25 14421 sshd[30776]: Invalid user user from 138.249.127.91 port 40242
Jul 8 23:09:27 14421 sshd[30776]: Failed password for invalid user user from 138.249.127.91 port 40242 ssh2
Jul 8 23:12:43 14421 sshd[32368]: Invalid user dev from 138.249.127.91 port 60446
show less
Brute-Force
SSH
Anonymous
2026-07-09T13:05:10.442566+09:00 kabedon sshd[165619]: Failed password for invalid user admin from 1 ...
show more2026-07-09T13:05:10.442566+09:00 kabedon sshd[165619]: Failed password for invalid user admin from 138.249.127.91 port 45258 ssh2
2026-07-09T13:08:44.608798+09:00 kabedon sshd[168787]: Invalid user user from 138.249.127.91 port 40464
2026-07-09T13:08:44.611140+09:00 kabedon sshd[168787]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-09T13:08:46.781772+09:00 kabedon sshd[168787]: Failed password for invalid user user from 138.249.127.91 port 40464 ssh2
2026-07-09T13:12:09.620578+09:00 kabedon sshd[171742]: Invalid user dev from 138.249.127.91 port 55278
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-07-09T04:02:42Z and 2026-07-0 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-07-09T04:02:42Z and 2026-07-09T04:07:16Z
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: server, Pass: [REDACTED]
2026-07-09T04:25:59.873552+02:00 axisverse sshd-session[3943041]: Invalid user redhat from 138.249.1 ...
show more2026-07-09T04:25:59.873552+02:00 axisverse sshd-session[3943041]: Invalid user redhat from 138.249.127.91 port 43154
2026-07-09T04:29:23.851608+02:00 axisverse sshd-session[3951742]: Invalid user kate from 138.249.127.91 port 36916
2026-07-09T04:36:08.521935+02:00 axisverse sshd-session[3973774]: Invalid user travis from 138.249.127.91 port 47678
...
show less
2026-07-08T21:50:13.256717-04:00 debian sshd[3059498]: Invalid user hussain from 138.249.127.91 port ...
show more2026-07-08T21:50:13.256717-04:00 debian sshd[3059498]: Invalid user hussain from 138.249.127.91 port 36538
2026-07-08T21:50:13.260141-04:00 debian sshd[3059498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-08T21:50:14.473544-04:00 debian sshd[3059498]: Failed password for invalid user hussain from 138.249.127.91 port 36538 ssh2
2026-07-08T21:56:57.134125-04:00 debian sshd[3064766]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91 user=root
2026-07-08T21:56:59.811382-04:00 debian sshd[3064766]: Failed password for root from 138.249.127.91 port 51520 ssh2
...
show less
2026-07-08T21:33:10.291642-04:00 debian sshd[3047095]: pam_unix(sshd:auth): authentication failure; ...
show more2026-07-08T21:33:10.291642-04:00 debian sshd[3047095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91 user=root
2026-07-08T21:33:12.396513-04:00 debian sshd[3047095]: Failed password for root from 138.249.127.91 port 40528 ssh2
2026-07-08T21:36:39.539087-04:00 debian sshd[3049723]: Invalid user radio from 138.249.127.91 port 43306
2026-07-08T21:36:39.542691-04:00 debian sshd[3049723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.127.91
2026-07-08T21:36:42.008878-04:00 debian sshd[3049723]: Failed password for invalid user radio from 138.249.127.91 port 43306 ssh2
...
show less
2026-07-09T01:20:30.805918+00:00 edge-obe-sto01.int.pdx.net.uk sshd[3250634]: Invalid user mapadmin ...
show more2026-07-09T01:20:30.805918+00:00 edge-obe-sto01.int.pdx.net.uk sshd[3250634]: Invalid user mapadmin from 138.249.127.91 port 39392
2026-07-09T01:27:24.205933+00:00 edge-obe-sto01.int.pdx.net.uk sshd[3251177]: Invalid user jp from 138.249.127.91 port 49034
2026-07-09T01:30:43.229848+00:00 edge-obe-sto01.int.pdx.net.uk sshd[3251476]: Invalid user kafka from 138.249.127.91 port 59612
...
show less
Brute-Force
SSH
Showing 1 to
15
of 100 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩