JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 201.138.189.215

201.138.189.215 was found in our database!

This IP was reported 658 times. Confidence of Abuse is 100%: ?

100%

ISP	Gestión de direccionamiento UniNet
Usage Type	Fixed Line ISP
ASN	AS8151
Hostname(s)	215-189-138-201.prod-infinitum.com.mx
Domain Name	uninet.net.mx
Country	🇲🇽 Mexico
City	Puebla, Puebla

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 201.138.189.215

Whois 201.138.189.215

IP Abuse Reports for 201.138.189.215:

This IP address has been reported a total of 658 times from 374 distinct sources. 201.138.189.215 was first reported on May 28th 2026, and the most recent report was 9 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇰🇷 Woodie	2026-05-29 01:14:11 (6 days ago)	2026-05-28T21:07:55.370701-04:00 debian sshd[3274962]: Failed password for invalid user redmine from ... show more 2026-05-28T21:07:55.370701-04:00 debian sshd[3274962]: Failed password for invalid user redmine from 201.138.189.215 port 42668 ssh2 2026-05-28T21:12:48.652905-04:00 debian sshd[3278028]: Invalid user redmine from 201.138.189.215 port 59218 2026-05-28T21:12:48.656255-04:00 debian sshd[3278028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 2026-05-28T21:12:50.514783-04:00 debian sshd[3278028]: Failed password for invalid user redmine from 201.138.189.215 port 59218 ssh2 2026-05-28T21:14:10.459907-04:00 debian sshd[3278829]: Invalid user wy from 201.138.189.215 port 57498 ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-05-29 01:02:17 (6 days ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇺🇸 LSPCCU	2026-05-29 01:00:42 (6 days ago)	TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Brute-Force ... show more TSEC Honeypot Network report. Threat score: 100/100. Categories: DDoS Attack, Port Scan, Brute-Force, SSH. Honeypot: ssh-telnet, cowrie. Context: Attacker IP 201. show less	DDoS Attack Port Scan Brute-Force SSH
🇺🇸 COMPLEX	2026-05-29 01:00:28 (6 days ago)	Banned by Multi Agent · node …2oz5 · attempts=5 · SSH brute-force / scan	Brute-Force SSH
🇵🇱 Wepted	2026-05-29 00:40:17 (6 days ago)	2026-05-29T02:32:57.584537+02:00 axisverse sshd-session[1428075]: Invalid user tung from 201.138.189 ... show more 2026-05-29T02:32:57.584537+02:00 axisverse sshd-session[1428075]: Invalid user tung from 201.138.189.215 port 35214 2026-05-29T02:38:50.774423+02:00 axisverse sshd-session[1447406]: Invalid user admin from 201.138.189.215 port 58324 2026-05-29T02:40:15.992012+02:00 axisverse sshd-session[1451725]: Invalid user odoo2 from 201.138.189.215 port 54006 ... show less	Brute-Force SSH
🇩🇪 Nevermind	2026-05-29 00:39:36 (6 days ago)	May 29 02:32:14 server1 sshd[1214836]: Invalid user tung from 201.138.189.215 port 53258 May 29 02:3 ... show more May 29 02:32:14 server1 sshd[1214836]: Invalid user tung from 201.138.189.215 port 53258 May 29 02:38:10 server1 sshd[1215762]: Invalid user admin from 201.138.189.215 port 45010 May 29 02:39:36 server1 sshd[1215968]: Invalid user odoo2 from 201.138.189.215 port 51056 ... show less	Brute-Force SSH
🇳🇱 myip.foo	2026-05-29 00:37:57 (6 days ago)	[myip.foo] 2026-05-29T00:31:59.328249+00:00 sshd[680875]: Invalid user tung from 201.138.189.215 por ... show more [myip.foo] 2026-05-29T00:31:59.328249+00:00 sshd[680875]: Invalid user tung from 201.138.189.215 port 43640 2026-05-29T00:37:56.554131+00:00 sshd[681011]: Invalid user admin from 201.138.189.215 port 49516 show less	Brute-Force SSH
Anonymous	2026-05-29 00:36:09 (6 days ago)	2026-05-29T00:33:09.129294+00:00 anubis sshd[852189]: Failed password for invalid user tung from 201 ... show more 2026-05-29T00:33:09.129294+00:00 anubis sshd[852189]: Failed password for invalid user tung from 201.138.189.215 port 53580 ssh2 2026-05-29T00:34:33.866933+00:00 anubis sshd[852322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 user=root 2026-05-29T00:34:35.996767+00:00 anubis sshd[852322]: Failed password for root from 201.138.189.215 port 53978 ssh2 2026-05-29T00:36:05.909695+00:00 anubis sshd[853002]: pam_unix(sshd:auth): authenticat ... show less	Brute-Force SSH
Anonymous	2026-05-29 00:35:24 (6 days ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 ezscale	2026-05-29 00:12:53 (6 days ago)	SSH brute force on atl-03.node.vps.ezscale.tech (3 failures). Detected by fail2ban.	Brute-Force SSH
🇬🇧 paradoxnetworks	2026-05-29 00:12:47 (6 days ago)	2026-05-29T00:08:23.027632+00:00 edge-ora-lhr01 sshd[1288729]: Invalid user scott from 201.138.189.2 ... show more 2026-05-29T00:08:23.027632+00:00 edge-ora-lhr01 sshd[1288729]: Invalid user scott from 201.138.189.215 port 47638 2026-05-29T00:09:51.225634+00:00 edge-ora-lhr01 sshd[1288796]: Invalid user andrew from 201.138.189.215 port 45260 2026-05-29T00:12:47.677382+00:00 edge-ora-lhr01 sshd[1293872]: Invalid user admin from 201.138.189.215 port 51234 ... show less	Brute-Force SSH
🇰🇷 Woodie	2026-05-29 00:09:36 (6 days ago)	2026-05-28T20:06:37.798486-04:00 debian sshd[3234827]: Failed password for root from 201.138.189.215 ... show more 2026-05-28T20:06:37.798486-04:00 debian sshd[3234827]: Failed password for root from 201.138.189.215 port 56144 ssh2 2026-05-28T20:08:08.462031-04:00 debian sshd[3235713]: Invalid user scott from 201.138.189.215 port 50752 2026-05-28T20:08:08.465455-04:00 debian sshd[3235713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 2026-05-28T20:08:09.998585-04:00 debian sshd[3235713]: Failed password for invalid user scott from 201.138.189.215 port 50752 ssh2 2026-05-28T20:09:35.930450-04:00 debian sshd[3236517]: Invalid user andrew from 201.138.189.215 port 38546 ... show less	Brute-Force SSH
🇸🇪 sa0azs	2026-05-29 00:08:31 (6 days ago)	May 29 02:06:59 OakCottage sshd[21741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more May 29 02:06:59 OakCottage sshd[21741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 user=root May 29 02:07:01 OakCottage sshd[21741]: Failed password for root from 201.138.189.215 port 46734 ssh2 May 29 02:08:30 OakCottage sshd[21792]: Invalid user scott from 201.138.189.215 port 57444 ... show less	Brute-Force SSH
Anonymous	2026-05-28 23:43:23 (6 days ago)	2026-05-29T01:37:14.060090vfs-server-01 sshd[8788]: Invalid user admin from 201.138.189.215 port 455 ... show more 2026-05-29T01:37:14.060090vfs-server-01 sshd[8788]: Invalid user admin from 201.138.189.215 port 45552 2026-05-29T01:40:26.111961vfs-server-01 sshd[8822]: Invalid user developer from 201.138.189.215 port 46100 2026-05-29T01:43:22.639800vfs-server-01 sshd[8849]: Invalid user hduser from 201.138.189.215 port 52690 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-28 23:35:39 (6 days ago)	201.138.189.215 (MX/Mexico/215-189-138-201.prod-infinitum.com.mx), 5 distributed sshd attacks on acc ... show more 201.138.189.215 (MX/Mexico/215-189-138-201.prod-infinitum.com.mx), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 28 18:35:17 15120 sshd[28786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.138.189.215 user=root May 28 18:35:19 15120 sshd[28786]: Failed password for root from 201.138.189.215 port 44598 ssh2 May 28 18:35:24 15120 sshd[28839]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.189.208.13 user=root May 28 17:39:46 15120 sshd[32730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.96.202.189 user=root May 28 17:39:48 15120 sshd[32730]: Failed password for root from 101.96.202.189 port 43150 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 601 to 615 of 658 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 174.75.211.204

🇮🇷 2.180.41.169

🇭🇰 202.82.20.241

🇳🇱 193.176.31.243

🇫🇷 185.255.126.68

🇵🇰 103.102.40.224

🇵🇸 87.252.110.52

🇨🇦 85.217.149.68

🇬🇧 81.19.219.250

🇺🇸 34.21.76.3

🇲🇽 2806:10a6:14:f243:653f:4fa9:2b51:8097

🇵🇭 222.127.153.46

🇪🇸 212.231.190.106

🇮🇩 202.72.196.75

🇦🇺 202.62.129.18

🇮🇳 202.62.88.27

🇺🇸 174.75.211.203

🇺🇸 170.106.179.118

🇯🇵 160.251.233.37

🇵🇰 153.117.1.188