This IP address has been reported a total of
101
times from
76 distinct
sources.
138.249.138.17 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
(localhost/crowdsec) crowdsecurity/ssh-bf_user-enum by ip 138.249.138.17 (HK/204610) : 4h ban on Ip ...
show more(localhost/crowdsec) crowdsecurity/ssh-bf_user-enum by ip 138.249.138.17 (HK/204610) : 4h ban on Ip 138.249.138.17
show less
Port Scan
Anonymous
(sshd) Failed SSH login from 138.249.138.17 (GB/United Kingdom/vm15565.bit.hosting): 5 in the last 3 ...
show more(sshd) Failed SSH login from 138.249.138.17 (GB/United Kingdom/vm15565.bit.hosting): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-05-23T08:23:29.661695+02:00 web28.sier.online sshd[2652316]: Invalid user ubuntu from 138.249.138.17 port 47172
2026-05-23T08:23:29.670005+02:00 web28.sier.online sshd[2652316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T08:23:31.654589+02:00 web28.sier.online sshd[2652316]: Failed password for invalid user ubuntu from 138.249.138.17 port 47172 ssh2
2026-05-23T08:26:29.359057+02:00 web28.sier.online sshd[2653928]: Invalid user ubuntu from 138.249.138.17 port 44014
2026-05-23T08:26:29.365650+02:00 web28.sier.online sshd[2653928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
show less
May 23 08:22:04 Ina sshd[857010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreMay 23 08:22:04 Ina sshd[857010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
May 23 08:22:06 Ina sshd[857010]: Failed password for invalid user test from 138.249.138.17 port 54532 ssh2
May 23 08:25:06 Ina sshd[857405]: Invalid user ubuntu from 138.249.138.17 port 38492
May 23 08:25:06 Ina sshd[857405]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
May 23 08:25:09 Ina sshd[857405]: Failed password for invalid user ubuntu from 138.249.138.17 port 38492 ssh2
...
show less
2026-05-23T06:11:33.787853+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3913874]: Disconnected from authent ...
show more2026-05-23T06:11:33.787853+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3913874]: Disconnected from authenticating user root 138.249.138.17 port 38160 [preauth]
2026-05-23T06:14:30.585040+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3914565]: Invalid user luis from 138.249.138.17 port 51534
...
show less
May 23 07:59:46 Ina sshd[854822]: Failed password for invalid user user from 138.249.138.17 port 609 ...
show moreMay 23 07:59:46 Ina sshd[854822]: Failed password for invalid user user from 138.249.138.17 port 60978 ssh2
May 23 08:04:15 Ina sshd[855246]: Invalid user deploy from 138.249.138.17 port 35994
May 23 08:04:15 Ina sshd[855246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
May 23 08:04:17 Ina sshd[855246]: Failed password for invalid user deploy from 138.249.138.17 port 35994 ssh2
May 23 08:07:20 Ina sshd[855638]: Invalid user ftpuser from 138.249.138.17 port 43982
...
show less
2026-05-23T07:59:19.167257+02:00 telekom-de-01.api.my-carrier-services.com sshd[58684]: Invalid user ...
show more2026-05-23T07:59:19.167257+02:00 telekom-de-01.api.my-carrier-services.com sshd[58684]: Invalid user user from 138.249.138.17 port 40460
2026-05-23T07:59:19.188787+02:00 telekom-de-01.api.my-carrier-services.com sshd[58684]: Disconnected from invalid user user 138.249.138.17 port 40460 [preauth]
2026-05-23T08:04:07.157650+02:00 telekom-de-01.api.my-carrier-services.com sshd[58876]: Invalid user deploy from 138.249.138.17 port 44772
2026-05-23T08:04:07.187384+02:00 telekom-de-01.api.my-carrier-services.com sshd[58876]: Disconnected from invalid user deploy 138.249.138.17 port 44772 [preauth]
2026-05-23T08:07:11.823689+02:00 telekom-de-01.api.my-carrier-services.com sshd[58955]: Invalid user ftpuser from 138.249.138.17 port 59442
show less
Brute-Force
Anonymous
(sshd) Failed SSH login from 138.249.138.17 (GB/United Kingdom/vm15565.bit.hosting): 5 in the last 3 ...
show more(sshd) Failed SSH login from 138.249.138.17 (GB/United Kingdom/vm15565.bit.hosting): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: 2026-05-23T08:02:20.755816+02:00 web28.sier.online sshd[2638679]: Invalid user deploy from 138.249.138.17 port 57822
2026-05-23T08:02:20.763643+02:00 web28.sier.online sshd[2638679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T08:02:22.537205+02:00 web28.sier.online sshd[2638679]: Failed password for invalid user deploy from 138.249.138.17 port 57822 ssh2
2026-05-23T08:05:41.401580+02:00 web28.sier.online sshd[2641090]: Invalid user ftpuser from 138.249.138.17 port 36582
2026-05-23T08:05:41.414844+02:00 web28.sier.online sshd[2641090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
show less
2026-05-23T07:53:20.570649+02:00 Server sshd[374112]: Failed password for invalid user user from 138 ...
show more2026-05-23T07:53:20.570649+02:00 Server sshd[374112]: Failed password for invalid user user from 138.249.138.17 port 46996 ssh2
2026-05-23T08:01:44.445176+02:00 Server sshd[379619]: Invalid user deploy from 138.249.138.17 port 60686
2026-05-23T08:01:44.451342+02:00 Server sshd[379619]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T08:01:45.949746+02:00 Server sshd[379619]: Failed password for invalid user deploy from 138.249.138.17 port 60686 ssh2
2026-05-23T08:05:03.618869+02:00 Server sshd[381787]: Invalid user ftpuser from 138.249.138.17 port 36160
...
show less
Brute-Force
SSH
Anonymous
2026-05-23T07:56:43.518877+02:00 diazserver sshd[484222]: Failed password for invalid user user from ...
show more2026-05-23T07:56:43.518877+02:00 diazserver sshd[484222]: Failed password for invalid user user from 138.249.138.17 port 57340 ssh2
2026-05-23T08:02:56.748186+02:00 diazserver sshd[484246]: Invalid user deploy from 138.249.138.17 port 38038
2026-05-23T08:02:56.761523+02:00 diazserver sshd[484246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T08:02:58.143407+02:00 diazserver sshd[484246]: Failed password for invalid user deploy from 138.249.138.17 port 38038 ssh2
...
show less
May 23 06:00:50 fail2ban sshd[3610489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreMay 23 06:00:50 fail2ban sshd[3610489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
May 23 06:00:52 fail2ban sshd[3610489]: Failed password for invalid user user from 138.249.138.17 port 41548 ssh2
...
show less
2026-05-23T05:55:20.210491+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3910075]: Invalid user user from 13 ...
show more2026-05-23T05:55:20.210491+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3910075]: Invalid user user from 138.249.138.17 port 53432
2026-05-23T05:55:20.217235+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[3910075]: Disconnected from invalid user user 138.249.138.17 port 53432 [preauth]
...
show less
2026-05-23T06:28:01.269955+01:00 Linux12 sshd-session[132973]: Failed password for invalid user blog ...
show more2026-05-23T06:28:01.269955+01:00 Linux12 sshd-session[132973]: Failed password for invalid user blog from 138.249.138.17 port 35706 ssh2
2026-05-23T06:31:02.685973+01:00 Linux12 sshd-session[144321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17 user=root
2026-05-23T06:31:05.240969+01:00 Linux12 sshd-session[144321]: Failed password for root from 138.249.138.17 port 52520 ssh2
2026-05-23T06:34:03.947818+01:00 Linux12 sshd-session[156053]: Invalid user system from 138.249.138.17 port 44186
2026-05-23T06:34:03.950445+01:00 Linux12 sshd-session[156053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T06:34:06.132969+01:00 Linux12 sshd-session[156053]: Failed password for invalid user system from 138.249.138.17 port 44186 ssh2
2026-05-23T06:37:01.000028+01:00 Linux12 sshd-session[166677]: Invalid user allan from 138.249.138.17 port 48550
2026-05-23T06:37:01.002280+01:
...
show less
Brute-Force
SSH
Anonymous
2026-05-23T05:29:07.434467+00:00 vps-8967498d-vps-ovh-net sshd[256036]: pam_unix(sshd:auth): authent ...
show more2026-05-23T05:29:07.434467+00:00 vps-8967498d-vps-ovh-net sshd[256036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17 user=root
2026-05-23T05:29:10.272605+00:00 vps-8967498d-vps-ovh-net sshd[256036]: Failed password for root from 138.249.138.17 port 46508 ssh2
2026-05-23T05:32:07.639319+00:00 vps-8967498d-vps-ovh-net sshd[256068]: Invalid user system from 138.249.138.17 port 56058
2026-05-23T05:32:07.641731+00:00 vps-8967498d-vps-ovh-net sshd[256068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.249.138.17
2026-05-23T05:32:09.521917+00:00 vps-8967498d-vps-ovh-net sshd[256068]: Failed password for invalid user system from 138.249.138.17 port 56058 ssh2
...
show less
Report 2394670 with IP 3442237 for SSH brute-force attack by source 3436895 via ssh-honeypot/0.2.0+h ...
show moreReport 2394670 with IP 3442237 for SSH brute-force attack by source 3436895 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
15
of 101 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩