This IP address has been reported a total of
105
times from
68 distinct
sources.
149.102.138.187 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
This IP address carried out 1 SSH credential attack (attempts) on 27-07-2025. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 27-07-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
(sshd) Failed SSH login from 149.102.138.187 (DE/Germany/vmi2722115.contaboserver.net): 5 in the las ...
show more(sshd) Failed SSH login from 149.102.138.187 (DE/Germany/vmi2722115.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 28 03:13:10 18048 sshd[31695]: Invalid user user from 149.102.138.187 port 60142
Jul 28 03:13:12 18048 sshd[31695]: Failed password for invalid user user from 149.102.138.187 port 60142 ssh2
Jul 28 03:13:16 18048 sshd[31704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.102.138.187 user=root
Jul 28 03:13:18 18048 sshd[31704]: Failed password for root from 149.102.138.187 port 60166 ssh2
Jul 28 03:13:24 18048 sshd[31706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.102.138.187 user=root
show less
(sshd) Failed SSH login from 149.102.138.187 (DE/Germany/vmi2722115.contaboserver.net): 5 in the las ...
show more(sshd) Failed SSH login from 149.102.138.187 (DE/Germany/vmi2722115.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 28 02:56:58 15887 sshd[16535]: Invalid user test from 149.102.138.187 port 36520
Jul 28 02:57:01 15887 sshd[16535]: Failed password for invalid user test from 149.102.138.187 port 36520 ssh2
Jul 28 02:57:03 15887 sshd[16593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.102.138.187 user=root
Jul 28 02:57:05 15887 sshd[16593]: Failed password for root from 149.102.138.187 port 36546 ssh2
Jul 28 02:57:09 15887 sshd[16599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.102.138.187 user=root
show less
This IP address carried out 2 port scanning attempts on 27-07-2025. For more information or to repor ...
show moreThis IP address carried out 2 port scanning attempts on 27-07-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2025-07-28T06:20:49.078965+02:00 rma01.ch.pop.as202427.net sshd[2691576]: User root from 149.102.138 ...
show more2025-07-28T06:20:49.078965+02:00 rma01.ch.pop.as202427.net sshd[2691576]: User root from 149.102.138.187 not allowed because not listed in AllowUsers
2025-07-28T06:20:50.454764+02:00 rma01.ch.pop.as202427.net sshd[2691581]: Invalid user test from 149.102.138.187 port 56474
2025-07-28T06:20:54.886826+02:00 rma01.ch.pop.as202427.net sshd[2691604]: User root from 149.102.138.187 not allowed because not listed in AllowUsers
...
show less
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbf ...
show morespam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabriken Security API - WFSecAPI
show less
Web Spam
Showing 1 to
15
of 105 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩