This IP address has been reported a total of
17,736
times from
1,644 distinct
sources.
138.99.80.102 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T06:23:43.897731+00:00 ubuntu-4gb-hel1-2 sshd[2038756]: Invalid user admin from 138.99.80. ...
show more2026-06-03T06:23:43.897731+00:00 ubuntu-4gb-hel1-2 sshd[2038756]: Invalid user admin from 138.99.80.102 port 52692
2026-06-03T06:27:58.548872+00:00 ubuntu-4gb-hel1-2 sshd[2042633]: Invalid user dspace from 138.99.80.102 port 34806
2026-06-03T06:29:57.770623+00:00 ubuntu-4gb-hel1-2 sshd[2044477]: Invalid user afa from 138.99.80.102 port 54000
2026-06-03T06:31:56.547791+00:00 ubuntu-4gb-hel1-2 sshd[2046222]: Invalid user logviewer from 138.99.80.102 port 53060
2026-06-03T06:33:48.725184+00:00 ubuntu-4gb-hel1-2 sshd[2047965]: Invalid user test2 from 138.99.80.102 port 43534
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-03T15:50:18.320529+10:00 sleep-salami sshd[884007]: Invalid user foo from 138.99.80.102 port ...
show more2026-06-03T15:50:18.320529+10:00 sleep-salami sshd[884007]: Invalid user foo from 138.99.80.102 port 49580
2026-06-03T15:50:18.682156+10:00 sleep-salami sshd[884007]: Disconnected from invalid user foo 138.99.80.102 port 49580 [preauth]
2026-06-03T15:52:21.635316+10:00 sleep-salami sshd[884023]: Disconnected from authenticating user root 138.99.80.102 port 36118 [preauth]
2026-06-03T15:54:23.085759+10:00 sleep-salami sshd[884029]: Invalid user chenghao from 138.99.80.102 port 58214
2026-06-03T15:54:23.453888+10:00 sleep-salami sshd[884029]: Disconnected from invalid user chenghao 138.99.80.102 port 58214 [preauth]
...
show less
2026-06-03T15:34:34.545738+10:00 sleep-salami sshd[883878]: Invalid user vikas from 138.99.80.102 po ...
show more2026-06-03T15:34:34.545738+10:00 sleep-salami sshd[883878]: Invalid user vikas from 138.99.80.102 port 40138
2026-06-03T15:34:34.907097+10:00 sleep-salami sshd[883878]: Disconnected from invalid user vikas 138.99.80.102 port 40138 [preauth]
2026-06-03T15:36:36.173269+10:00 sleep-salami sshd[883905]: Invalid user deploy from 138.99.80.102 port 39414
2026-06-03T15:36:36.529242+10:00 sleep-salami sshd[883905]: Disconnected from invalid user deploy 138.99.80.102 port 39414 [preauth]
2026-06-03T15:38:33.581788+10:00 sleep-salami sshd[883919]: Disconnected from authenticating user root 138.99.80.102 port 34554 [preauth]
...
show less
2026-06-03T15:16:41.603244+10:00 sleep-salami sshd[883727]: Disconnected from invalid user username1 ...
show more2026-06-03T15:16:41.603244+10:00 sleep-salami sshd[883727]: Disconnected from invalid user username1 138.99.80.102 port 33030 [preauth]
2026-06-03T15:18:39.826197+10:00 sleep-salami sshd[883736]: Disconnected from authenticating user root 138.99.80.102 port 32900 [preauth]
2026-06-03T15:20:40.012730+10:00 sleep-salami sshd[883751]: Disconnected from authenticating user root 138.99.80.102 port 52540 [preauth]
2026-06-03T15:22:42.810877+10:00 sleep-salami sshd[883775]: Invalid user nmrsu from 138.99.80.102 port 58640
2026-06-03T15:22:43.169127+10:00 sleep-salami sshd[883775]: Disconnected from invalid user nmrsu 138.99.80.102 port 58640 [preauth]
...
show less
Jun 3 07:16:10 pbx-router-01.de.pbx-host.com sshd[3516407]: Disconnected from invalid user username ...
show moreJun 3 07:16:10 pbx-router-01.de.pbx-host.com sshd[3516407]: Disconnected from invalid user username1 138.99.80.102 port 48514 [preauth]
Jun 3 07:18:08 pbx-router-01.de.pbx-host.com sshd[3516810]: Disconnected from authenticating user root 138.99.80.102 port 60186 [preauth]
Jun 3 07:20:08 pbx-router-01.de.pbx-host.com sshd[3517241]: Disconnected from authenticating user root 138.99.80.102 port 44776 [preauth]
Jun 3 07:22:12 pbx-router-01.de.pbx-host.com sshd[3517669]: Invalid user nmrsu from 138.99.80.102 port 35018
Jun 3 07:22:12 pbx-router-01.de.pbx-host.com sshd[3517669]: Disconnected from invalid user nmrsu 138.99.80.102 port 35018 [preauth]
show less
2026-06-03T04:21:22.851171+00:00 ubuntu sshd[75786]: Invalid user deb from 138.99.80.102 port 53586
...
show more2026-06-03T04:21:22.851171+00:00 ubuntu sshd[75786]: Invalid user deb from 138.99.80.102 port 53586
2026-06-03T04:21:22.854833+00:00 ubuntu sshd[75786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102
2026-06-03T04:21:25.005172+00:00 ubuntu sshd[75786]: Failed password for invalid user deb from 138.99.80.102 port 53586 ssh2
2026-06-03T04:23:59.912631+00:00 ubuntu sshd[75845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.80.102 user=root
2026-06-03T04:24:01.947841+00:00 ubuntu sshd[75845]: Failed password for root from 138.99.80.102 port 57112 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T02:57:39Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T02:57:39Z and 2026-06-03T04:06:54Z
show less