JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 182.138.158.66

182.138.158.66 was found in our database!

This IP was reported 464 times. Confidence of Abuse is 47%: ?

47%

ISP	CHINANET Sichuan province network
Usage Type	Fixed Line ISP
ASN	AS4134
Domain Name	sctel.com.cn
Country	🇨🇳 China
City	Chengdu, Sichuan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 182.138.158.66

Whois 182.138.158.66

IP Abuse Reports for 182.138.158.66:

This IP address has been reported a total of 464 times from 102 distinct sources. 182.138.158.66 was first reported on May 20th 2022, and the most recent report was 43 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 PeravixGroup	2026-06-06 11:43:30 (43 minutes ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-06-01 16:35:57 (4 days ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-30 00:12:30 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-05-28 10:51:37 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-05-28 00:57:39 (1 week ago)	Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: M ... show more Honeypot detection: Memcached unauthorized access / amplification attempt on port 11211. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇺🇸 MPL	2026-05-28 00:24:29 (1 week ago)	tcp/5598 (2 or more attempts)	Port Scan
🇬🇧 PeravixGroup	2026-05-22 06:26:58 (2 weeks ago)	Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity ... show more Honeypot detection: Apache CouchDB unauthorized access / exploitation attempt on port 5984. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇷🇸 Scan	2026-05-21 01:18:00 (2 weeks ago)	MultiHost/MultiPort Probe, Scan, Hack -	Port Scan Hacking
🇦🇺 trentwiles.com	2026-05-19 11:35:49 (2 weeks ago)	Unauthorized connection attempt detected from IP address 182.138.158.66 to port 1148 [SYD]	Port Scan
🇺🇸 MPL	2026-05-19 02:29:14 (2 weeks ago)	tcp/2166 (2 or more attempts)	Port Scan
🇩🇪 Justin F. \| AS204464	2026-05-14 13:07:22 (3 weeks ago)	Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 7500 [1] TCP Reported by: ... show more Honeypot [nx-infrastructure]: Unauthorized traffic (16 bytes of payload); 7500 [1] TCP Reported by: Justin F. show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-05-13 22:17:50 (3 weeks ago)	2026-05-13T22:17:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-05-13T22:17:50+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=182.138.158.66 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=13150 DF PROTO=TCP SPT=17548 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 2026-05-13T22:17:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=182.138.158.66 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=13151 DF PROTO=TCP SPT=17548 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 2026-05-13T22:17:53+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=182.138.158.66 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=43 ID=13152 DF PROTO=TCP SPT=17548 DPT=22 WINDOW=29200 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force SSH
🇯🇵 mkaraki	2026-05-13 00:19:44 (3 weeks ago)	1778631578 # Service_probe # SIGNATURE_SEND # source_ip:182.138.158.66 # dst_port:5001 ...	Port Scan
🇺🇸 xmission.com	2026-05-12 15:44:19 (3 weeks ago)	Blocked by UFW (TCP on 58000) Source port: 63686 TTL: 239 Packet length: 44 TOS: 0x00 This report ( ... show more Blocked by UFW (TCP on 58000) Source port: 63686 TTL: 239 Packet length: 44 TOS: 0x00 This report (for 182.138.158.66) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇨🇳 ThreatBook.io	2026-05-08 00:17:18 (4 weeks ago)	ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/182.138.158.66 2026-05- ... show more ThreatBook Intelligence: Zombie,IDC more details on https://threatbook.io/ip/182.138.158.66 2026-05-07 13:38:53 http://www.wujieliulan.com/ show less	Web App Attack

Showing 1 to 15 of 464 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇲🇲 103.154.241.61

🇷🇺 91.211.236.106

🇩🇪 47.245.142.106

🇩🇪 213.209.159.56

🇮🇳 202.62.88.25

🇵🇱 185.40.86.7

🇨🇳 120.79.186.89

🇧🇪 35.205.15.227

🇺🇸 34.235.129.148

🇨🇳 1.94.208.167

🇲🇽 189.194.140.170

🇨🇳 175.0.24.9

🇺🇸 162.216.149.12

🇱🇹 141.98.11.41

🇱🇹 81.30.98.158

🇭🇺 188.36.7.196

🇳🇱 176.65.139.173

🇨🇳 171.217.70.151

🇭🇰 152.32.216.70

🇺🇸 143.244.153.64