This IP address has been reported a total of
79
times from
54 distinct
sources.
138.252.100.167 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban host=kanzlei jail=sshd failures=5. Login abuse observed. sample=2026-07-27T08:02:02.942434+ ...
show moreFail2Ban host=kanzlei jail=sshd failures=5. Login abuse observed. sample=2026-07-27T08:02:02.942434+05:30 kanzlei sshd-session[385028]: Invalid user jenkins from 138.252.100.167 port 50630 2026-07-27T08:02:03.108553+05:30 kanzlei sshd-session[385028]: Disconnected from invalid user jenkins 138.252.100.167 port 50630 [preauth] 2026-07-27T08:05:51.514206+05:30 kanzlei sshd-session[385142]: Invalid user dbc from 138.252.100.167 port 44342 2026-07-27T08:05:51.679457+05:30 kanzlei sshd-session[385142]: Disconnected from invalid user dbc 138.252.100.167 port 44342 [preauth
show less
Jul 27 02:14:00 mail sshd[3139946]: Invalid user etherpad from 138.252.100.167 port 34868
Jul 27 02: ...
show moreJul 27 02:14:00 mail sshd[3139946]: Invalid user etherpad from 138.252.100.167 port 34868
Jul 27 02:16:46 mail sshd[3140140]: Invalid user xp from 138.252.100.167 port 53026
...
show less
Jul 27 01:35:32 mail sshd[3135927]: Invalid user ec2-user from 138.252.100.167 port 45208
Jul 27 01: ...
show moreJul 27 01:35:32 mail sshd[3135927]: Invalid user ec2-user from 138.252.100.167 port 45208
Jul 27 01:40:52 mail sshd[3136599]: Invalid user echan from 138.252.100.167 port 43342
...
show less
Jul 27 01:02:02 mail sshd[3132579]: Invalid user pinkfloyd from 138.252.100.167 port 43624
Jul 27 01 ...
show moreJul 27 01:02:02 mail sshd[3132579]: Invalid user pinkfloyd from 138.252.100.167 port 43624
Jul 27 01:04:51 mail sshd[3132787]: Invalid user sysadmin from 138.252.100.167 port 58940
...
show less
Jul 27 00:07:25 mail sshd[3127073]: Invalid user debian from 138.252.100.167 port 38946
Jul 27 00:28 ...
show moreJul 27 00:07:25 mail sshd[3127073]: Invalid user debian from 138.252.100.167 port 38946
Jul 27 00:28:39 mail sshd[3129299]: Invalid user guillaume from 138.252.100.167 port 51896
...
show less
{"event":{"DateTime":"2026-07-27T00:04:27Z","RemoteAddr":"138.252.100.167:55840","Protocol":"SSH","C ...
show more{"event":{"DateTime":"2026-07-27T00:04:27Z","RemoteAddr":"138.252.100.167:55840","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"201b51cf-9a40-4e2a-b847-da4e85205f0b","Environ":"","User":"debian","Password":"123","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"138.252.100.167","SourcePort":"55840","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-07-27T00:10:03Z","RemoteAddr":"138.252.100.167:36088","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"33b33d47-cb71-4e26-9f5e-f09b113b0fb5","Environ":"","User":"list","Password":"1q2w3e4r","Client":"SSH-2.0-libssh_0.9.6","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","
show less
CSF/LFD blocked 138.252.100.167 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SS ...
show moreCSF/LFD blocked 138.252.100.167 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 138.252.100.167 (IN/India/-): 5 in the last 3600 secs. Evidence: Jul 26 19:03:19 paladin sshd-session[1175586]: Invalid user debian from 138.252.100.167 port 42474
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 138.252.100.167 (-): 5 in the last 3600 secs; Ports: *; Direction: inou ...
show more(sshd) Failed SSH login from 138.252.100.167 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 26 20:05:12 server5 sshd[9847]: Invalid user debian from 138.252.100.167
Jul 26 20:05:12 server5 sshd[9847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.252.100.167
Jul 26 20:05:14 server5 sshd[9847]: Failed password for invalid user debian from 138.252.100.167 port 46086 ssh2
Jul 26 20:10:22 server5 sshd[14171]: Invalid user list from 138.252.100.167
Jul 26 20:10:22 server5 sshd[14171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.252.100.167
show less
2026-07-27T02:07:55.847736+02:00 node1 sshd-session[3815138]: Invalid user debian from 138.252.100.1 ...
show more2026-07-27T02:07:55.847736+02:00 node1 sshd-session[3815138]: Invalid user debian from 138.252.100.167 port 34308
...
show less
Brute-Force
SSH
Showing 1 to
15
of 79 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩