JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.99.124.1

Recent Activity

Abuse Confidence Score

100% Critical

263 reports

219 reporters · latest 4 minutes ago

ISP: F L L de Sousa ME
Usage Type: Fixed Line ISP
ASN: AS270997
Domain Name: lrminternet.com.br
Country: 🇧🇷 Brazil
City: Bom Jesus das Selvas, Maranhao

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

263 from 219 distinct reporters

First reported

July 26th 2021

Most recent report

4 minutes ago

Last 60 days

Top reporter locations 🇩🇪 Germany 63 🇺🇸 United States of America 52 🇫🇷 France 26

Most common categories Brute-Force 244 SSH 230 Port Scan 11 Hacking 7 Web App Attack 6

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Michal Piechowski	2026-10-29 04:04:56 (4 minutes ago)	2026-10-29T05:00:23.286758+01:00 ubuntu-iqw sshd[576248]: Disconnected from authenticating user root 138.99.124.1 port 50348 [preauth] 2026-10-29T05:02:55.081182+01:00 ubuntu-iqw sshd[587665]: Disconnected from authenticating user root 138.99.124.1 p ... show more 2026-10-29T05:00:23.286758+01:00 ubuntu-iqw sshd[576248]: Disconnected from authenticating user root 138.99.124.1 port 50348 [preauth] 2026-10-29T05:02:55.081182+01:00 ubuntu-iqw sshd[587665]: Disconnected from authenticating user root 138.99.124.1 port 59990 [preauth] 2026-10-29T05:04:55.589756+01:00 ubuntu-iqw sshd[587689]: Invalid user Root from 138.99.124.1 port 43252 ... show less	Brute-Force SSH
Anonymous	2026-10-29 03:03:56 (1 hour ago)	2026-10-29T06:33:48.829236+03:30 digitalogic sshd-session[2591702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 2026-10-29T06:33:50.057422+03:30 digitalogic sshd-session[2591702]: Failed passwo ... show more 2026-10-29T06:33:48.829236+03:30 digitalogic sshd-session[2591702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 2026-10-29T06:33:50.057422+03:30 digitalogic sshd-session[2591702]: Failed password for invalid user samanali222 from 138.99.124.1 port 49234 ssh2 2026-10-29T06:33:50.597837+03:30 digitalogic sshd-session[2591702]: Disconnected from invalid user samanali222 138.99.124.1 port 49234 [preauth] ... show less	Brute-Force SSH
Anonymous	2026-10-29 02:52:18 (1 hour ago)	SSH scanning: repeated logins with invalid usernames against a key-only server. Reported by fail2ban.	Brute-Force SSH
Anonymous	2026-10-29 02:48:17 (1 hour ago)	2026-10-29T02:41:37.899068+00:00 de-fra2-mirror1 sshd[1289995]: Invalid user hassan from 138.99.124.1 port 58818 2026-10-29T02:45:48.059268+00:00 de-fra2-mirror1 sshd[1290011]: Invalid user suporte from 138.99.124.1 port 55740 2026-10-29T02:48:17.399 ... show more 2026-10-29T02:41:37.899068+00:00 de-fra2-mirror1 sshd[1289995]: Invalid user hassan from 138.99.124.1 port 58818 2026-10-29T02:45:48.059268+00:00 de-fra2-mirror1 sshd[1290011]: Invalid user suporte from 138.99.124.1 port 55740 2026-10-29T02:48:17.399332+00:00 de-fra2-mirror1 sshd[1290037]: Invalid user sugon from 138.99.124.1 port 53040 ... show less	Brute-Force SSH
🇸🇪 mrmister	2026-10-29 02:29:07 (1 hour ago)	Automated report from a Cowrie/web honeypot (no legitimate users). SSH honeypot: 15 events, 3 login attempts. Last seen 2026-10-29 02:18:37 UTC.	Brute-Force SSH
🇭🇰 bluecloudwork	2026-10-29 02:27:35 (1 hour ago)	Fail2Ban - Brute-force SSH server ...	Brute-Force SSH
🇩🇪 SentinalX by uzumaru	2026-10-29 02:21:24 (1 hour ago)	SSH brute-force detected: 5 failed login attempts in the last 1 hour.	Brute-Force SSH
🇫🇮 updown.io	2026-10-29 02:09:45 (1 hour ago)	2026-10-29T04:05:31.720307+02:00 db1.updn.io sshd-session[3472729]: Failed password for invalid user chenweijun from 138.99.124.1 port 43928 ssh2 2026-10-29T04:07:50.938880+02:00 db1.updn.io sshd-session[3473683]: Invalid user ywops from 138.99.124.1 ... show more 2026-10-29T04:05:31.720307+02:00 db1.updn.io sshd-session[3472729]: Failed password for invalid user chenweijun from 138.99.124.1 port 43928 ssh2 2026-10-29T04:07:50.938880+02:00 db1.updn.io sshd-session[3473683]: Invalid user ywops from 138.99.124.1 port 57252 2026-10-29T04:07:50.947930+02:00 db1.updn.io sshd-session[3473683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 2026-10-29T04:07:53.018053+02:00 db1.updn.io sshd-session[3473683]: Failed password for invalid user ywops from 138.99.124.1 port 57252 ssh2 2026-10-29T04:09:43.937576+02:00 db1.updn.io sshd-session[3474562]: Invalid user mogo from 138.99.124.1 port 37236 ... show less	Brute-Force SSH
🇦🇺 neilwal	2026-10-29 02:09:25 (2 hours ago)	Honeypot (Port 22) caught 138.99.124.1 trying: root:3245gs5662d34; 345gs5662d34:345gs5662d34; admin:admin; ubuntu:ubuntu; root:qazcdecde; root:Admin$123; root:ABcd@1234; root:123456	Brute-Force
🇦🇺 Epic29	2026-10-29 02:09:18 (2 hours ago)	2026-10-29T13:02:41.419512+11:00 sleep-salami sshd[2259900]: Invalid user chenweijun from 138.99.124.1 port 40210 2026-10-29T13:02:41.733940+11:00 sleep-salami sshd[2259900]: Disconnected from invalid user chenweijun 138.99.124.1 port 40210 [preauth] ... show more 2026-10-29T13:02:41.419512+11:00 sleep-salami sshd[2259900]: Invalid user chenweijun from 138.99.124.1 port 40210 2026-10-29T13:02:41.733940+11:00 sleep-salami sshd[2259900]: Disconnected from invalid user chenweijun 138.99.124.1 port 40210 [preauth] 2026-10-29T13:07:25.251980+11:00 sleep-salami sshd[2259920]: Invalid user ywops from 138.99.124.1 port 34992 2026-10-29T13:07:25.567409+11:00 sleep-salami sshd[2259920]: Disconnected from invalid user ywops 138.99.124.1 port 34992 [preauth] 2026-10-29T13:09:18.075300+11:00 sleep-salami sshd[2259934]: Invalid user mogo from 138.99.124.1 port 33906 ... show less	Brute-Force SSH
Anonymous	2026-10-29 02:07:28 (2 hours ago)	Large amount of failed SSH access attempts (brute-force)	Brute-Force SSH
🇬🇧 andypiper	2026-10-29 02:03:04 (2 hours ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇩🇪 hbubli	2026-10-29 01:54:14 (2 hours ago)	2026-10-29T02:46:33.348022+01:00 alpha sshd[1523620]: Invalid user debian from 138.99.124.1 port 53954 2026-10-29T02:48:54.544454+01:00 alpha sshd[1535524]: Invalid user tunnel from 138.99.124.1 port 48382 2026-10-29T02:50:45.524858+01:00 alpha sshd[ ... show more 2026-10-29T02:46:33.348022+01:00 alpha sshd[1523620]: Invalid user debian from 138.99.124.1 port 53954 2026-10-29T02:48:54.544454+01:00 alpha sshd[1535524]: Invalid user tunnel from 138.99.124.1 port 48382 2026-10-29T02:50:45.524858+01:00 alpha sshd[1545148]: Invalid user pavel from 138.99.124.1 port 42930 2026-10-29T02:52:32.895692+01:00 alpha sshd[1554404]: Invalid user claude from 138.99.124.1 port 38962 2026-10-29T02:54:13.797884+01:00 alpha sshd[1562569]: Invalid user ftpuser from 138.99.124.1 port 56526 ... show less	Brute-Force SSH
🇧🇬 MazenHost	2026-10-29 01:51:58 (2 hours ago)	Oct 29 03:48:18 lux sshd[1867534]: Invalid user tunnel from 138.99.124.1 port 34220 Oct 29 03:48:18 lux sshd[1867534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 Oct 29 03:48:19 lux sshd[1867 ... show more Oct 29 03:48:18 lux sshd[1867534]: Invalid user tunnel from 138.99.124.1 port 34220 Oct 29 03:48:18 lux sshd[1867534]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 Oct 29 03:48:19 lux sshd[1867534]: Failed password for invalid user tunnel from 138.99.124.1 port 34220 ssh2 Oct 29 03:50:08 lux sshd[1867545]: Invalid user pavel from 138.99.124.1 port 47814 Oct 29 03:50:08 lux sshd[1867545]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 Oct 29 03:50:10 lux sshd[1867545]: Failed password for invalid user pavel from 138.99.124.1 port 47814 ssh2 Oct 29 03:51:57 lux sshd[1867577]: Invalid user claude from 138.99.124.1 port 37638 ... show less	Brute-Force SSH
🇺🇸 Hydrated8853	2026-10-29 01:50:50 (2 hours ago)	2026-10-29T09:46:23.171085+08:00 laxh2-202411170129435ddf18 sshd[3483747]: Failed password for invalid user debian from 138.99.124.1 port 45254 ssh2 2026-10-29T09:48:22.539778+08:00 laxh2-202411170129435ddf18 sshd[3483759]: Invalid user tunnel from 1 ... show more 2026-10-29T09:46:23.171085+08:00 laxh2-202411170129435ddf18 sshd[3483747]: Failed password for invalid user debian from 138.99.124.1 port 45254 ssh2 2026-10-29T09:48:22.539778+08:00 laxh2-202411170129435ddf18 sshd[3483759]: Invalid user tunnel from 138.99.124.1 port 33020 2026-10-29T09:48:22.552710+08:00 laxh2-202411170129435ddf18 sshd[3483759]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.124.1 2026-10-29T09:48:24.634148+08:00 laxh2-202411170129435ddf18 sshd[3483759]: Failed password for invalid user tunnel from 138.99.124.1 port 33020 ssh2 2026-10-29T09:50:13.892307+08:00 laxh2-202411170129435ddf18 sshd[3483792]: Invalid user pavel from 138.99.124.1 port 39624 ... show less	Brute-Force SSH

Showing 1 to 15 of 263 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇨🇳 180.153.236.119

🇹🇷 176.53.37.188

🇺🇸 137.184.74.89

🇮🇩 103.99.27.125

🇫🇷 51.75.253.68

🇨🇳 36.137.180.219

🇺🇸 18.221.179.104

🇫🇷 217.182.253.249

🇺🇸 205.210.31.55

🇧🇩 202.84.34.85

🇵🇰 202.47.40.227

🇺🇸 199.165.159.78

🇺🇸 195.184.76.188

🇵🇰 182.191.191.81

🇺🇸 162.216.149.90

🇹🇷 109.122.6.141

🇹🇷 109.122.6.137

🇺🇸 91.230.168.141

🇺🇸 73.247.254.96

🇰🇷 61.72.55.130