JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

151.36.138.104

Neutral Activity

Abuse Confidence Score

0% Low Risk

23 reports

18 reporters · latest 11 months ago

ISP: WIND TRE S.P.A.
Usage Type: Mobile ISP
ASN: AS1267
Domain Name: windtre.it
Country: 🇮🇹 Italy
City: Padua, Veneto

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

151.36.138.104 has been reported 23 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

23 from 18 distinct reporters

First reported

November 23rd 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 SpaceHost-Server	2025-11-25 23:29:48 UTC · (11 months ago)		Brute-Force Web App Attack
🇨🇳 ThreatBook.io	2025-11-25 00:48:56 UTC · (11 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/151.36.138.104	SSH
🇫🇷 SpaceHost-Server	2025-11-24 23:28:42 UTC · (11 months ago)		Brute-Force Web App Attack
🇹🇷 rtbh.com.tr	2025-11-24 20:10:06 UTC · (11 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
Anonymous	2025-11-24 03:11:03 UTC · (11 months ago)	Automatic Reporting - Brute Force Attempts	Brute-Force Web App Attack SSH
🇺🇸 bigscoots.com	2025-11-24 02:53:01 UTC · (11 months ago)	151.36.138.104 (IT/Italy/36.151.in-addr.arpa), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 23 20:52:48 14462 sshd[17745]: pam_unix(sshd:auth): authentication failure; l ... show more 151.36.138.104 (IT/Italy/36.151.in-addr.arpa), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Nov 23 20:52:48 14462 sshd[17745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.36.138.104 user=root Nov 23 20:50:16 14462 sshd[17533]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.188.57.249 user=root Nov 23 20:50:18 14462 sshd[17533]: Failed password for root from 60.188.57.249 port 44878 ssh2 Nov 23 20:48:13 14462 sshd[17342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.36.138.104 user=root Nov 23 20:48:15 14462 sshd[17342]: Failed password for root from 151.36.138.104 port 12183 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-11-24 02:12:33 UTC · (11 months ago)	Nov 24 03:09:27 guac-host01.view.srvfarm.net sshd[1723768]: Invalid user superset from 151.36.138.104 port 12830 Nov 24 03:09:27 guac-host01.view.srvfarm.net sshd[1723768]: Disconnected from invalid user superset 151.36.138.104 port 12830 [preauth] N ... show more Nov 24 03:09:27 guac-host01.view.srvfarm.net sshd[1723768]: Invalid user superset from 151.36.138.104 port 12830 Nov 24 03:09:27 guac-host01.view.srvfarm.net sshd[1723768]: Disconnected from invalid user superset 151.36.138.104 port 12830 [preauth] Nov 24 03:11:33 guac-host01.view.srvfarm.net sshd[1724442]: Invalid user server from 151.36.138.104 port 12877 Nov 24 03:11:33 guac-host01.view.srvfarm.net sshd[1724442]: Disconnected from invalid user server 151.36.138.104 port 12877 [preauth] Nov 24 03:12:32 guac-host01.view.srvfarm.net sshd[1724757]: Invalid user sopuser from 151.36.138.104 port 12717 show less	Brute-Force
🇵🇱 Szymekk	2025-11-24 02:09:54 UTC · (11 months ago)	Fail2Ban: SSH brute force attempt [srv11]	Brute-Force SSH
🇨🇭 ScanThe.Net	2025-11-24 02:06:55 UTC · (11 months ago)	ID: 6956864325 \| PORT: 222 \| https://151-36-138-104.scanthe.net	Port Scan
🇸🇬 itachi1706	2025-11-24 01:21:19 UTC · (11 months ago)	2025-11-24T01:20:23.813973+00:00 sg-jumphost-server sshd[2382929]: Disconnected from authenticating user root 151.36.138.104 port 12212 [preauth] 2025-11-24T01:21:18.453317+00:00 sg-jumphost-server sshd[2382947]: Invalid user zhangsan from 151.36.138 ... show more 2025-11-24T01:20:23.813973+00:00 sg-jumphost-server sshd[2382929]: Disconnected from authenticating user root 151.36.138.104 port 12212 [preauth] 2025-11-24T01:21:18.453317+00:00 sg-jumphost-server sshd[2382947]: Invalid user zhangsan from 151.36.138.104 port 12175 ... show less	Brute-Force SSH
🇩🇪 grassau.com	2025-11-24 01:16:48 UTC · (11 months ago)	(sshd) Failed SSH login from 151.36.138.104 (IT/Italy/36.151.in-addr.arpa)	Brute-Force SSH
🇸🇬 itachi1706	2025-11-24 01:05:20 UTC · (11 months ago)	2025-11-24T01:01:47.675651+00:00 sg-jumphost-server sshd[2382376]: Invalid user support from 151.36.138.104 port 12633 2025-11-24T01:01:47.958536+00:00 sg-jumphost-server sshd[2382376]: Disconnected from invalid user support 151.36.138.104 port 12633 ... show more 2025-11-24T01:01:47.675651+00:00 sg-jumphost-server sshd[2382376]: Invalid user support from 151.36.138.104 port 12633 2025-11-24T01:01:47.958536+00:00 sg-jumphost-server sshd[2382376]: Disconnected from invalid user support 151.36.138.104 port 12633 [preauth] 2025-11-24T01:05:19.463747+00:00 sg-jumphost-server sshd[2382508]: Invalid user odoo15 from 151.36.138.104 port 12109 ... show less	Brute-Force SSH
🇮🇹 yvoictra	2025-11-24 01:02:41 UTC · (11 months ago)	Nov 24 02:02:41 niove sshd[127202]: Invalid user support from 151.36.138.104 port 13022 ...	Brute-Force SSH
🇫🇮 itbyhf	2025-11-24 00:49:47 UTC · (11 months ago)	Nov 24 00:46:27 backup sshd[1961854]: Failed password for invalid user dspace from 151.36.138.104 port 12817 ssh2 Nov 24 00:48:40 backup sshd[1962157]: Invalid user user from 151.36.138.104 port 12553 Nov 24 00:48:40 backup sshd[1962157]: pam_unix(ss ... show more Nov 24 00:46:27 backup sshd[1961854]: Failed password for invalid user dspace from 151.36.138.104 port 12817 ssh2 Nov 24 00:48:40 backup sshd[1962157]: Invalid user user from 151.36.138.104 port 12553 Nov 24 00:48:40 backup sshd[1962157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.36.138.104 Nov 24 00:48:43 backup sshd[1962157]: Failed password for invalid user user from 151.36.138.104 port 12553 ssh2 Nov 24 00:49:46 backup sshd[1962327]: Invalid user elemental from 151.36.138.104 port 12560 ... show less	Brute-Force SSH
🇺🇸 NeverBehave	2025-11-24 00:33:26 UTC · (11 months ago)	Fail2ban Triggered	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇬 196.0.10.98

🇺🇸 98.93.209.120

🇹🇬 196.171.92.117

🇲🇲 103.5.121.97

🇸🇬 85.203.21.213

🇸🇬 85.203.21.57

🇺🇸 34.139.157.224

🇬🇧 2a06:4884:b000::d4

🇨🇦 165.227.45.60

🇺🇸 66.132.224.88

🇯🇵 49.251.137.156

🇸🇬 47.82.53.241

🇸🇬 47.82.50.111

🇦🇺 45.67.96.150

🇺🇸 3.87.216.125

🇰🇷 211.245.36.18

🇨🇭 209.99.187.10

🇨🇭 200.234.122.185

🇳🇱 195.178.110.227

🇺🇦 185.213.234.240