This IP address has been reported a total of
33
times from
24 distinct
sources.
201.138.165.213 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-18T00:13:44.115010-05:00 nocix-dedi-bf2421-mci sshd-session[479815]: Invalid user hdm from 2 ...
show more2026-07-18T00:13:44.115010-05:00 nocix-dedi-bf2421-mci sshd-session[479815]: Invalid user hdm from 201.138.165.213 port 34204
2026-07-18T00:16:20.688924-05:00 nocix-dedi-bf2421-mci sshd-session[480029]: Invalid user reelftptv from 201.138.165.213 port 34140
2026-07-18T00:25:43.182002-05:00 nocix-dedi-bf2421-mci sshd-session[480668]: Invalid user bot from 201.138.165.213 port 41110
...
show less
Report 2559728 with IP 3607295 for SSH brute-force attack by source 3601953 via ssh-honeypot/0.2.0+h ...
show moreReport 2559728 with IP 3607295 for SSH brute-force attack by source 3601953 via ssh-honeypot/0.2.0+http
show less
2026-07-18T04:07:56.752211+00:00 de-fra2-dns3 sshd[3358148]: Invalid user vishnu from 201.138.165.21 ...
show more2026-07-18T04:07:56.752211+00:00 de-fra2-dns3 sshd[3358148]: Invalid user vishnu from 201.138.165.213 port 44828
2026-07-18T04:10:34.191692+00:00 de-fra2-dns3 sshd[3358198]: Invalid user kkk from 201.138.165.213 port 50972
2026-07-18T04:13:16.796061+00:00 de-fra2-dns3 sshd[3358223]: Invalid user solar from 201.138.165.213 port 35606
...
show less
2026-07-18T05:01:52.356521+02:00 Linux07 sshd[59031]: Invalid user tester from 201.138.165.213 port ...
show more2026-07-18T05:01:52.356521+02:00 Linux07 sshd[59031]: Invalid user tester from 201.138.165.213 port 59808
2026-07-18T05:01:52.360009+02:00 Linux07 sshd[59031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.165.213
2026-07-18T05:01:55.022870+02:00 Linux07 sshd[59031]: Failed password for invalid user tester from 201.138.165.213 port 59808 ssh2
2026-07-18T05:04:23.251493+02:00 Linux07 sshd[62512]: Invalid user postgres from 201.138.165.213 port 38994
2026-07-18T05:04:23.305178+02:00 Linux07 sshd[62512]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.165.213
2026-07-18T05:04:25.711640+02:00 Linux07 sshd[62512]: Failed password for invalid user postgres from 201.138.165.213 port 38994 ssh2
2026-07-18T05:06:49.108581+02:00 Linux07 sshd[755]: Invalid user brenda from 201.138.165.213 port 46970
2026-07-18T05:06:49.298737+02:00 Linux07 sshd[755]: pam_unix(sshd:auth): authentication failure; log
...
show less
Brute-Force
SSH
Anonymous
2026-07-18T02:50:59.933741+00:00 de-fra2-dns3 sshd[3355853]: Invalid user es from 201.138.165.213 po ...
show more2026-07-18T02:50:59.933741+00:00 de-fra2-dns3 sshd[3355853]: Invalid user es from 201.138.165.213 port 34994
2026-07-18T02:59:57.649224+00:00 de-fra2-dns3 sshd[3355991]: Invalid user tester from 201.138.165.213 port 43450
2026-07-18T03:02:37.501625+00:00 de-fra2-dns3 sshd[3356303]: Invalid user postgres from 201.138.165.213 port 37474
...
show less
Jul 18 04:50:58 charon sshd[1580741]: Failed password for invalid user es from 201.138.165.213 port ...
show moreJul 18 04:50:58 charon sshd[1580741]: Failed password for invalid user es from 201.138.165.213 port 36392 ssh2
Jul 18 04:57:19 charon sshd[1580770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.165.213 user=root
Jul 18 04:57:20 charon sshd[1580770]: Failed password for root from 201.138.165.213 port 43264 ssh2
...
show less
2026-07-18T08:26:07.518699localhost sshd[1915165]: Invalid user es from 201.138.165.213 port 53562
. ...
show more2026-07-18T08:26:07.518699localhost sshd[1915165]: Invalid user es from 201.138.165.213 port 53562
...
show less
Port Scan
Hacking
Brute-Force
Exploited Host
Web App Attack
Fail2Ban host=kvm518290 jail=sshd failures=5. Login abuse observed. sample=2026-07-18T04:47:11.54271 ...
show moreFail2Ban host=kvm518290 jail=sshd failures=5. Login abuse observed. sample=2026-07-18T04:47:11.542711+02:00 kvm518290 sshd-session[1269931]: Connection from 201.138.165.213 port 38920 on 78.108.216.80 port 22 rdomain "" 2026-07-18T04:47:12.440909+02:00 kvm518290 sshd-session[1269931]: Invalid user es from 201.138.165.213 port 38920 2026-07-18T04:47:12.617315+02:00 kvm518290 sshd-session[1269931]: Disconnected from invalid user es 201.138.165.213 port 38920 [preauth] 2026-07-18T04:53:30.424436+02:00 kvm518290 sshd-session[1273822]: Disconnected from authenticating user
show less
Brute-Force
SSH
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩