This IP address has been reported a total of
19
times from
16 distinct
sources.
138.94.100.39 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
India
with 4
reports;
Netherlands
with 4
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
14
times;
SSH
13
times;
Port Scan
2
times;
Web App Attack
1
time;
IoT Targeted
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 4 port scanning attempts on 24-10-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 24-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 24-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 24-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-05T14:49:56.714668 socky.stom66.co.uk proftpd[3583276]: session[3583276] 0.0.0.0 (138.94.100 ...
show more2026-10-05T14:49:56.714668 socky.stom66.co.uk proftpd[3583276]: session[3583276] 0.0.0.0 (138.94.100.39[138.94.100.39]): USER ubnt: no such user found from 138.94.100.39 [138.94.100.39] to ::ffff:5.79.80.26:2222
...
show less
This IP address carried out 4 port scanning attempts on 03-10-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 1 SSH credential attack (attempts) on 03-10-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 03-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
138.94.100.39 (BR/Brazil/138.94.100.39.cust-sernetinternet.com.br), 5 distributed sshd attacks on ac ...
show more138.94.100.39 (BR/Brazil/138.94.100.39.cust-sernetinternet.com.br), 5 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 24 14:57:41 15216 sshd[12209]: Failed password for invalid user admin from 103.157.53.247 port 7932 ssh2
Sep 24 15:06:37 15216 sshd[14280]: Invalid user admin from 138.94.100.39 port 58151
Sep 24 15:06:40 15216 sshd[14280]: Failed password for invalid user admin from 138.94.100.39 port 58151 ssh2
Sep 24 15:01:33 15216 sshd[13176]: Invalid user admin from 59.23.117.24 port 53200
Sep 24 15:01:35 15216 sshd[13176]: Failed password for invalid user admin from 59.23.117.24 port 53200 ssh2
IP Addresses Blocked:
103.157.53.247 (IN/India/247.53.157.103.home.mylink.co.in)
show less
2026-09-18T02:44:19.733734+02:00 meet sshd-session[22487]: Invalid user ubnt from 138.94.100.39 port ...
show more2026-09-18T02:44:19.733734+02:00 meet sshd-session[22487]: Invalid user ubnt from 138.94.100.39 port 37249
...
show less
