JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 178.104.102.138

178.104.102.138 was found in our database!

This IP was reported 68 times. Confidence of Abuse is 100%: ?

100%

ISP	Hetzner Online GmbH
Usage Type	Data Center/Web Hosting/Transit
ASN	AS24940
Hostname(s)	static.138.102.104.178.clients.your-server.de
Domain Name	hetzner.com
Country	🇩🇪 Germany
City	Nuremberg, Bavaria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 178.104.102.138

Whois 178.104.102.138

IP Abuse Reports for 178.104.102.138:

This IP address has been reported a total of 68 times from 50 distinct sources. 178.104.102.138 was first reported on May 15th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Rack2reports	2026-05-31 19:36:47 (1 week ago)	Rack2 Reports: SSH hijacking. HASSH: f555226df1963d1d3c09daf865abdc9a. Total attacks (30d): 46.	Brute-Force Exploited Host SSH
🇩🇪 iamimmanuelraj	2026-05-29 02:32:09 (1 week ago)	Fail2ban SSH Bruteforce - Port = 22 - Failures = 5 - Time = 1778879479	Brute-Force SSH
🇩🇪 club77	2026-05-16 07:49:42 (3 weeks ago)	2026-05-16T15:45:06.199510+08:00 broadside gitea[1511]: User root from 178.104.102.138 not allowed b ... show more 2026-05-16T15:45:06.199510+08:00 broadside gitea[1511]: User root from 178.104.102.138 not allowed because not listed in AllowUsers 2026-05-16T15:48:30.490536+08:00 broadside gitea[1511]: User root from 178.104.102.138 not allowed because not listed in AllowUsers 2026-05-16T15:49:41.888490+08:00 broadside gitea[1511]: User root from 178.104.102.138 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 ParaBug	2026-05-16 07:47:17 (3 weeks ago)	2026-05-16T09:47:16.674586+02:00 r2d2 sshd-session[106498]: error: maximum authentication attempts e ... show more 2026-05-16T09:47:16.674586+02:00 r2d2 sshd-session[106498]: error: maximum authentication attempts exceeded for root from 178.104.102.138 port 52450 ssh2 [preauth] ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 07:44:33 (3 weeks ago)	178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attacks on ... show more 178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 07:43:41 24015 sshd[3975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.64.197 user=root May 16 07:41:45 24015 sshd[3665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root May 16 07:41:47 24015 sshd[3665]: Failed password for root from 178.104.102.138 port 52866 ssh2 May 16 07:44:10 24015 sshd[4149]: Failed password for root from 43.130.36.39 port 55712 ssh2 May 16 07:44:08 24015 sshd[4149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.130.36.39 user=root IP Addresses Blocked: 142.93.64.197 (US/-/-) show less	Brute-Force SSH
Anonymous	2026-05-16 07:21:37 (3 weeks ago)	attempts to hack passwords	SSH
🇩🇪 Portuseco Biling	2026-05-16 07:18:09 (3 weeks ago)	--HETZNER-F2B blocked SSH BF--	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 07:10:30 (3 weeks ago)	178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attacks on ... show more 178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 02:09:15 15070 sshd[14125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.130.10.94 user=root May 16 02:09:17 15070 sshd[14125]: Failed password for root from 43.130.10.94 port 57556 ssh2 May 16 01:58:48 15070 sshd[13004]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.36.158 user=root May 16 01:58:51 15070 sshd[13004]: Failed password for root from 43.159.36.158 port 37956 ssh2 May 16 02:10:22 15070 sshd[14231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root IP Addresses Blocked: 43.130.10.94 (US/-/-) 43.159.36.158 (SG/-/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 06:46:46 (3 weeks ago)	(sshd) Failed SSH login from 178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de): 5 ... show more (sshd) Failed SSH login from 178.104.102.138 (DE/-/static.138.102.104.178.clients.your-server.de): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 16 01:39:05 15518 sshd[20959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root May 16 01:39:07 15518 sshd[20959]: Failed password for root from 178.104.102.138 port 54234 ssh2 May 16 01:45:22 15518 sshd[21471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root May 16 01:45:24 15518 sshd[21471]: Failed password for root from 178.104.102.138 port 42650 ssh2 May 16 01:46:31 15518 sshd[21552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root show less	Brute-Force SSH
🇩🇪 Lazentis	2026-05-16 06:38:58 (3 weeks ago)	Unauthorized access attempt to port 22 (tcp)	Brute-Force SSH
🇵🇱 tkhaldi	2026-05-16 06:35:49 (3 weeks ago)	2026-05-16T06:33:07.521529+00:00 scw-elegant-chopin sshd-session[2825404]: Invalid user gino from 17 ... show more 2026-05-16T06:33:07.521529+00:00 scw-elegant-chopin sshd-session[2825404]: Invalid user gino from 178.104.102.138 port 60944 2026-05-16T06:35:48.569282+00:00 scw-elegant-chopin sshd-session[2825545]: Invalid user pierre from 178.104.102.138 port 33662 ... show less	Brute-Force SSH
🇵🇱 tkhaldi	2026-05-16 06:14:22 (3 weeks ago)	2026-05-16T06:03:42.948678+00:00 scw-elegant-chopin sshd-session[2823904]: Invalid user developer fr ... show more 2026-05-16T06:03:42.948678+00:00 scw-elegant-chopin sshd-session[2823904]: Invalid user developer from 178.104.102.138 port 55432 2026-05-16T06:10:43.373927+00:00 scw-elegant-chopin sshd-session[2824275]: Invalid user ubuntu from 178.104.102.138 port 56490 2026-05-16T06:14:22.012683+00:00 scw-elegant-chopin sshd-session[2824434]: Invalid user sun from 178.104.102.138 port 58128 ... show less	Brute-Force SSH
🇺🇸 Rocky Mountain Bioengineering Symposium	2026-05-16 06:04:53 (3 weeks ago)	2026-05-16T00:04:52.590517-06:00 KLAS-A sshd[11547]: Invalid user developer from 178.104.102.138 por ... show more 2026-05-16T00:04:52.590517-06:00 KLAS-A sshd[11547]: Invalid user developer from 178.104.102.138 port 34012 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-16 05:37:25 (3 weeks ago)	178.104.102.138 (DE/Germany/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attac ... show more 178.104.102.138 (DE/Germany/static.138.102.104.178.clients.your-server.de), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 16 00:11:38 17389 sshd[15914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.154.207.145 user=root May 16 00:11:40 17389 sshd[15914]: Failed password for root from 198.154.207.145 port 33840 ssh2 May 16 00:04:21 17389 sshd[15287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.154.207.145 user=root May 16 00:37:11 17389 sshd[18554]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.104.102.138 user=root May 16 00:04:23 17389 sshd[15287]: Failed password for root from 198.154.207.145 port 60268 ssh2 IP Addresses Blocked: 198.154.207.145 (US/United States/145-207-154-198.unifiedlayer.com) show less	Brute-Force SSH
🇩🇪 rico-j.de	2026-05-16 05:03:23 (3 weeks ago)	2026-05-16T07:02:11.011018+02:00 rico-j.de sshd-session[584880]: Connection from 178.104.102.138 por ... show more 2026-05-16T07:02:11.011018+02:00 rico-j.de sshd-session[584880]: Connection from 178.104.102.138 port 55802 on 5.45.102.214 port 22 rdomain "" 2026-05-16T07:02:11.079073+02:00 rico-j.de sshd-session[584880]: Invalid user udev-monitor from 178.104.102.138 port 55802 2026-05-16T07:03:22.307684+02:00 rico-j.de sshd-session[586042]: Connection from 178.104.102.138 port 52224 on 5.45.102.214 port 22 rdomain "" 2026-05-16T07:03:22.381022+02:00 rico-j.de sshd-session[586042]: User root from 178.104.102.138 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH

Showing 1 to 15 of 68 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 165.154.254.11

🇨🇲 154.126.163.64

🇮🇪 2a05:d018:10df:d400:8489:deb:d3bd:fe95

🇮🇳 216.10.242.215

🇯🇵 203.25.124.28

🇨🇳 171.114.230.31

🇺🇸 150.107.38.251

🇫🇷 91.231.89.27

🇧🇬 79.124.60.146

🇩🇪 209.38.226.71

🇺🇸 195.184.76.207

🇬🇧 193.163.125.118

🇸🇬 178.128.213.238

🇺🇸 165.154.182.179

🇻🇳 125.212.217.143

🇺🇸 64.62.197.202

🇺🇸 50.86.92.82

🇺🇸 47.251.123.229

🇳🇱 45.142.193.53

🇺🇸 2607:f8b0:4001:c07::128