This IP address has been reported a total of
17,758
times from
1,646 distinct
sources.
138.99.80.102 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-04T13:48:08.088847 ARES sshd[5657]: Failed password for invalid user info from 138.99.80.102 ...
show more2026-06-04T13:48:08.088847 ARES sshd[5657]: Failed password for invalid user info from 138.99.80.102 port 44984 ssh2
2026-06-04T13:50:13.256324 ARES sshd[5695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102 user=root
2026-06-04T13:50:15.211962 ARES sshd[5695]: Failed password for root from 138.99.80.102 port 54792 ssh2
...
show less
Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-04T11:18:58Z and 2026-06-0 ...
show moreCowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2026-06-04T11:18:58Z and 2026-06-04T11:24:53Z
show less
2026-06-04T20:21:09.850029 vps1.chirorist.org sshd[2157809]: pam_unix(sshd:auth): authentication fai ...
show more2026-06-04T20:21:09.850029 vps1.chirorist.org sshd[2157809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102
2026-06-04T20:21:12.618228 vps1.chirorist.org sshd[2157809]: Failed password for invalid user whatsapp from 138.99.80.102 port 33948 ssh2
2026-06-04T20:23:18.108738 vps1.chirorist.org sshd[2157815]: Invalid user jhlee from 138.99.80.102 port 59128
2026-06-04T20:23:18.111448 vps1.chirorist.org sshd[2157815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102
2026-06-04T20:23:20.589376 vps1.chirorist.org sshd[2157815]: Failed password for invalid user jhlee from 138.99.80.102 port 59128 ssh2
...
show less
2026-06-04T13:21:25.671348+02:00 proxmox sshd[268895]: Invalid user whatsapp from 138.99.80.102 port ...
show more2026-06-04T13:21:25.671348+02:00 proxmox sshd[268895]: Invalid user whatsapp from 138.99.80.102 port 50724
2026-06-04T13:21:25.672653+02:00 proxmox sshd[268895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102
2026-06-04T13:21:27.969574+02:00 proxmox sshd[268895]: Failed password for invalid user whatsapp from 138.99.80.102 port 50724 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T10:32:15.398594+00:00 rs2 sshd[78210]: Invalid user samba from 138.99.80.102 port 36080
2 ...
show more2026-06-04T10:32:15.398594+00:00 rs2 sshd[78210]: Invalid user samba from 138.99.80.102 port 36080
2026-06-04T10:37:47.745409+00:00 rs2 sshd[78483]: Invalid user alex from 138.99.80.102 port 41810
2026-06-04T10:39:50.611898+00:00 rs2 sshd[78488]: Invalid user developer from 138.99.80.102 port 33132
...
show less
Brute-Force
SSH
Anonymous
Jun 4 13:31:47 venus sshd[1737536]: Invalid user samba from 138.99.80.102 port 58124
Jun 4 13:37:4 ...
show moreJun 4 13:31:47 venus sshd[1737536]: Invalid user samba from 138.99.80.102 port 58124
Jun 4 13:37:43 venus sshd[1738112]: Invalid user alex from 138.99.80.102 port 40844
Jun 4 13:39:47 venus sshd[1738293]: Invalid user developer from 138.99.80.102 port 49384
...
show less
Brute-Force
SSH
Anonymous
SSH brute-force
Brute-Force
Showing 16 to
30
of 17758 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩