JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 159.138.240.221

159.138.240.221 was found in our database!

This IP was reported 8 times. Confidence of Abuse is 0%: ?

ISP	Huawei Thailand Clouds
Usage Type	Data Center/Web Hosting/Transit
ASN	AS136907
Domain Name	huawei.com
Country	🇹🇭 Thailand
City	Bangkok, Bangkok

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 159.138.240.221

Whois 159.138.240.221

IP Abuse Reports for 159.138.240.221:

This IP address has been reported a total of 8 times from 8 distinct sources. 159.138.240.221 was first reported on July 13th 2024, and the most recent report was 1 year ago.

Old Reports: The most recent abuse report for this IP address is from 1 year ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇪🇸 saima	2024-07-14 00:00:09 (1 year ago)	Detected 37 times. SSH Brute-Force from address 159.138.240.221	Brute-Force SSH
🇨🇿 lp	2024-07-13 09:20:33 (1 year ago)	SSH Brute force: 30 attempts were recorded from 159.138.240.221 2024-07-13T10:28:33+02:00 Disconnect ... show more SSH Brute force: 30 attempts were recorded from 159.138.240.221 2024-07-13T10:28:33+02:00 Disconnected from authenticating user root 159.138.240.221 port 56368 [preauth] 2024-07-13T10:36:48+02:00 Disconnected from authenticating user root 159.138.240.221 port 40580 [preauth] 2024-07-13T10:37:42+02:00 Disconnected from authenticating user root 159.138.240.221 port 54208 [preauth] 2024-07-13T10:38:43+02:00 Disconnected from authenticating user root 159.138.240.221 port 39018 [preauth] 2024-07-13T10:39:38+02:00 Disconnected from authenticating user root 159.138.240.221 port 51944 [preauth] 2024-07-13T10:40:42+02:00 Disconnected from authenticating user root 159.138.240.221 port 50628 [preauth] 2024-07-13T10:41:35+02:00 Disconnected from authenticating user root 159.138.240.221 port 47222 [preauth] 2024-07-13T10:42:31+02:00 Disconnected from authenticating user root 159.138.240.221 port 3318 show less	Brute-Force SSH
Anonymous	2024-07-13 08:02:05 (1 year ago)	2024-07-13T09:57:05.201072+02:00 mx01 sshd[2491604]: Invalid user elasticuser from 159.138.240.221 p ... show more 2024-07-13T09:57:05.201072+02:00 mx01 sshd[2491604]: Invalid user elasticuser from 159.138.240.221 port 60520 2024-07-13T10:01:00.221850+02:00 mx01 sshd[2492677]: Invalid user erpnext from 159.138.240.221 port 47560 2024-07-13T10:02:04.881298+02:00 mx01 sshd[2492755]: Invalid user admin from 159.138.240.221 port 51604 ... show less	Brute-Force SSH
🇧🇷 diego	2024-07-13 07:52:39 (1 year ago)	[rede-166-249] (sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute ... show more [rede-166-249] (sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 13 04:47:13 sshd[29750]: Invalid user [USERNAME] from 159.138.240.221 port 45856 Jul 13 04:47:16 sshd[29750]: Failed password for invalid user [USERNAME] from 159.138.240.221 port 45856 ssh2 Jul 13 04:51:43 sshd[30042]: Failed password for [USERNAME] from 159.138.240.221 port 33076 ssh2 Jul 13 04:52:35 sshd[30103]: Invalid user [USERNAME] from 159.138.240.221 port 55960 Jul 13 04:52:37 sshd[30103]: Failed password for invalid user [USERNAME] from 159.138.240.221 port 55960 ssh2 show less	Port Scan
🇩🇪 Enki	2024-07-13 07:45:30 (1 year ago)	Invalid user dockeruser from 159.138.240.221 port 33350	Brute-Force SSH
Anonymous	2024-07-13 07:15:38 (1 year ago)	(sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute.hwclouds-dns.c ... show more (sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 13 07:12:21 sshd[913102]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.240.221 user=[USERNAME] show less	SSH
🇺🇸 bigscoots.com	2024-07-13 06:28:04 (1 year ago)	(sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute.hwclouds-dns.c ... show more (sshd) Failed SSH login from 159.138.240.221 (TH/Thailand/ecs-159-138-240-221.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 13 01:23:02 17961 sshd[7294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.240.221 user=root Jul 13 01:23:04 17961 sshd[7294]: Failed password for root from 159.138.240.221 port 56322 ssh2 Jul 13 01:26:43 17961 sshd[7724]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.240.221 user=root Jul 13 01:26:46 17961 sshd[7724]: Failed password for root from 159.138.240.221 port 33020 ssh2 Jul 13 01:27:59 17961 sshd[7862]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.240.221 user=mysql show less	Brute-Force SSH
🇮🇹 LTM	2024-07-13 06:20:01 (1 year ago)	SSH - Attempt to login using invalid or illegal credential	Port Scan Brute-Force SSH

Showing 1 to 8 of 8 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇹🇷 212.87.199.64

🇲🇴 182.93.50.90

🇺🇸 170.106.74.215

🇺🇸 152.32.183.231

🇺🇸 66.132.186.227

🇬🇧 2a06:4880:6000::78

🇫🇷 185.177.72.17

🇫🇷 91.231.89.1

🇨🇱 200.89.69.247

🇷🇺 78.138.168.46

🇺🇸 35.253.200.48

🇺🇸 185.223.152.121

🇷🇺 178.251.142.14

🇳🇱 178.227.168.19

🇧🇷 177.104.199.160

🇩🇪 167.172.104.217

🇹🇭 147.50.227.79

🇨🇳 118.212.120.214

🇺🇸 107.172.156.243

🇺🇸 34.85.135.207