JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 150.138.182.190

150.138.182.190 was found in our database!

This IP was reported 538 times. Confidence of Abuse is 100%: ?

100%

ISP	CHINANET SHANDONG PROVINCE NETWORK
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58541
Domain Name	chinatelecom.cn
Country	🇨🇳 China
City	Qingdao, Shandong

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 150.138.182.190

Whois 150.138.182.190

IP Abuse Reports for 150.138.182.190:

This IP address has been reported a total of 538 times from 257 distinct sources. 150.138.182.190 was first reported on February 10th 2026, and the most recent report was 4 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 PauloPSLABS	2026-04-15 19:55:04 (1 month ago)	SSH brute-force detected by fail2ban 5 failures in 600 seconds.	Brute-Force SSH
🇫🇷 900cm	2026-04-15 19:34:11 (1 month ago)	Apr 15 21:34:11 raspberrypi sshd[2226]: Failed password for root from 150.138.182.190 port 60870 ssh ... show more Apr 15 21:34:11 raspberrypi sshd[2226]: Failed password for root from 150.138.182.190 port 60870 ssh2 ... show less	Port Scan Brute-Force SSH
Anonymous	2026-04-15 14:53:58 (1 month ago)	Apr 15 16:53:36 fi7 sshd[3527957]: Failed password for root from 150.138.182.190 port 40380 ssh2 Apr ... show more Apr 15 16:53:36 fi7 sshd[3527957]: Failed password for root from 150.138.182.190 port 40380 ssh2 Apr 15 16:53:55 fi7 sshd[3527961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root Apr 15 16:53:57 fi7 sshd[3527961]: Failed password for root from 150.138.182.190 port 44544 ssh2 ... show less	Brute-Force SSH
🇫🇷 tecnicorioja	2026-04-15 08:00:15 (1 month ago)	Failed password for root Apr 15 04:22:08 port 39562	Brute-Force SSH
🇺🇸 Xarcotic	2026-04-15 05:07:59 (1 month ago)	SSH login on honeypot.	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-14 23:57:44 (1 month ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/150.138.182.190 2026-0 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/150.138.182.190 2026-04-14 12:30:27 ["uname -s -m"] show less	Brute-Force
🇫🇮 FlamingMojo	2026-04-14 21:06:55 (1 month ago)	Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-04-14T21:06:55Z	Brute-Force SSH
🇺🇸 SANYALnet Labs	2026-04-14 17:26:30 (1 month ago)	Apr 14 17:26:23 hecnet-us-east-gw sshd[4169612]: User root from 150.138.182.190 not allowed because ... show more Apr 14 17:26:23 hecnet-us-east-gw sshd[4169612]: User root from 150.138.182.190 not allowed because not listed in AllowUsers Apr 14 17:26:25 hecnet-us-east-gw sshd[4169612]: Failed none for invalid user root from 150.138.182.190 port 35796 ssh2 Apr 14 17:26:30 hecnet-us-east-gw sshd[4169612]: Failed password for invalid user root from 150.138.182.190 port 35796 ssh2 ... show less	Brute-Force
🇵🇱 Chris314	2026-04-14 12:40:06 (1 month ago)	Successful SSH login observed on Cowrie honeypot VPS-POLOGNE-01. Username=root.	Brute-Force SSH
🇨🇦 nickto	2026-04-14 07:57:31 (1 month ago)	Apr 14 03:57:20 Tower sshd-session[564704]: Connection from 150.138.182.190 port 50564 on 192.168.10 ... show more Apr 14 03:57:20 Tower sshd-session[564704]: Connection from 150.138.182.190 port 50564 on 192.168.10.220 port 22 rdomain "" Apr 14 03:57:23 Tower sshd-session[564704]: Failed password for root from 150.138.182.190 port 50564 ssh2 Apr 14 03:57:25 Tower sshd-session[564704]: Connection closed by authenticating user root 150.138.182.190 port 50564 [preauth] Apr 14 03:57:26 Tower sshd-session[564873]: Connection from 150.138.182.190 port 52838 on 192.168.10.220 port 22 rdomain "" show less	Brute-Force SSH
🇵🇱 JavaStart	2026-04-14 05:27:58 (1 month ago)	Apr 14 07:27:21 javastart sshd[2724753]: Failed password for root from 150.138.182.190 port 56012 ss ... show more Apr 14 07:27:21 javastart sshd[2724753]: Failed password for root from 150.138.182.190 port 56012 ssh2 Apr 14 07:27:38 javastart sshd[2724809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root Apr 14 07:27:40 javastart sshd[2724809]: Failed password for root from 150.138.182.190 port 58832 ssh2 Apr 14 07:27:55 javastart sshd[2724847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root Apr 14 07:27:57 javastart sshd[2724847]: Failed password for root from 150.138.182.190 port 35052 ssh2 ... show less	Brute-Force SSH
🇨🇳 ThreatBook.io	2026-04-14 01:15:10 (1 month ago)	ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/150.138.182.190 2026-0 ... show more ThreatBook Intelligence: Scanner,IDC more details on https://threatbook.io/ip/150.138.182.190 2026-04-13 22:29:58 ["uname -s -m"] show less	Brute-Force
🇨🇦 Slackin' Jack	2026-04-13 20:13:30 (1 month ago)	Triggered honeypot on port 22. (150.138.182.190)	Port Scan
🇺🇸 bigscoots.com	2026-04-13 16:20:37 (1 month ago)	150.138.182.190 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more 150.138.182.190 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 13 11:20:06 21255 sshd[11191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root Apr 13 11:20:07 21255 sshd[11191]: Failed password for root from 150.138.182.190 port 39272 ssh2 Apr 13 11:20:14 21255 sshd[11327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root Apr 13 11:20:16 21255 sshd[11327]: Failed password for root from 150.138.182.190 port 42936 ssh2 Apr 13 11:20:18 21255 sshd[11338]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.227.145.175 user=root IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 paradigma-software.de	2026-04-13 15:16:36 (1 month ago)	2026-04-13T17:15:09.842195+02:00 s15260644 sshd[706485]: pam_unix(sshd:auth): authentication failure ... show more 2026-04-13T17:15:09.842195+02:00 s15260644 sshd[706485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root 2026-04-13T17:16:12.933317+02:00 s15260644 sshd[706489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root 2026-04-13T17:16:34.857756+02:00 s15260644 sshd[706492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.138.182.190 user=root show less	Brute-Force Hacking

Showing 211 to 225 of 538 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 2a09:bac5:398e:16dc::247:6a

🇳🇱 195.62.32.180

🇫🇷 194.5.53.112

🇺🇸 192.3.196.157

🇺🇸 147.185.132.138

🇨🇳 118.145.111.55

🇷🇺 94.29.124.198

🇳🇱 88.210.63.69

🇺🇸 23.254.190.207

🇺🇸 2a02:4780:4:a7cc::1

🇬🇧 193.163.125.18

🇰🇷 121.165.187.77

🇳🇵 103.182.174.60

🇨🇳 101.126.71.100

🇺🇸 91.230.168.124

🇳🇱 77.83.39.95

🇺🇸 64.225.62.193

🇸🇬 43.160.233.207

🇿🇦 41.10.221.171

🇮🇳 36.255.91.220