Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-20T01:33:09.713760+02:00 vpn.rev-crew.info sshd-session[556671]: Invalid user steve from 138.124.109.253 port 35582
2026-10-20T01:33:09.809677+02:00 vpn.rev-crew.info sshd-session[556671]: Disconnected from invalid user steve 138.124.109.253 ...
show more2026-10-20T01:33:09.713760+02:00 vpn.rev-crew.info sshd-session[556671]: Invalid user steve from 138.124.109.253 port 35582
2026-10-20T01:33:09.809677+02:00 vpn.rev-crew.info sshd-session[556671]: Disconnected from invalid user steve 138.124.109.253 port 35582 [preauth]
2026-10-20T01:35:58.264476+02:00 vpn.rev-crew.info sshd-session[556684]: Disconnected from authenticating user root 138.124.109.253 port 43296 [preauth]
2026-10-20T01:37:21.906898+02:00 vpn.rev-crew.info sshd-session[556690]: Invalid user nico from 138.124.109.253 port 34006
...
show less
2026-10-21T02:12:53.596441-04:00 lg sshd[1458212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.109.253 user=root
2026-10-21T02:12:56.101279-04:00 lg sshd[1458212]: Failed password for root from 138 ...
show more2026-10-21T02:12:53.596441-04:00 lg sshd[1458212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.109.253 user=root
2026-10-21T02:12:56.101279-04:00 lg sshd[1458212]: Failed password for root from 138.124.109.253 port 59332 ssh2
2026-10-21T02:15:59.451889-04:00 lg sshd[1458216]: Invalid user master from 138.124.109.253 port 43468
2026-10-21T02:15:59.464428-04:00 lg sshd[1458216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.109.253
2026-10-21T02:16:01.500632-04:00 lg sshd[1458216]: Failed password for invalid user master from 138.124.109.253 port 43468 ssh2
...
show less
Oct 20 22:38:18 kelvin sshd[484045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.109.253
Oct 20 22:38:20 kelvin sshd[484045]: Failed password for invalid user user from 138.124.109.253 port 34508 s ...
show moreOct 20 22:38:18 kelvin sshd[484045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.109.253
Oct 20 22:38:20 kelvin sshd[484045]: Failed password for invalid user user from 138.124.109.253 port 34508 ssh2
Oct 20 22:55:30 kelvin sshd[484237]: Invalid user david from 138.124.109.253 port 35280
...
show less
Brute-Force
SSH
Anonymous
Oct 21 06:42:46 fell sshd[1262416]: Invalid user user from 138.124.109.253 port 50832
Oct 21 06:46:39 fell sshd[1262448]: Invalid user ssl from 138.124.109.253 port 53398
Oct 21 06:48:14 fell sshd[1262457]: Invalid user jak from 138.124.109.253 port ...
show moreOct 21 06:42:46 fell sshd[1262416]: Invalid user user from 138.124.109.253 port 50832
Oct 21 06:46:39 fell sshd[1262448]: Invalid user ssl from 138.124.109.253 port 53398
Oct 21 06:48:14 fell sshd[1262457]: Invalid user jak from 138.124.109.253 port 44838
...
show less
Brute-Force
SSH
Anonymous
sshd: Invalid user user from 138.124.109.253 port 49200
sshd: Invalid user ssl from 138.124.109.253 port 60172
Oct 21 01:42:04 v2202011133598132617 sshd[880135]: Invalid user soporte from 138.124.109.253 port 54470
Oct 21 01:48:53 v2202011133598132617 sshd[885732]: Invalid user login from 138.124.109.253 port 59720
Oct 21 01:52:18 v2202011133598132617 sshd[88 ...
show moreOct 21 01:42:04 v2202011133598132617 sshd[880135]: Invalid user soporte from 138.124.109.253 port 54470
Oct 21 01:48:53 v2202011133598132617 sshd[885732]: Invalid user login from 138.124.109.253 port 59720
Oct 21 01:52:18 v2202011133598132617 sshd[888577]: Invalid user webdev from 138.124.109.253 port 47948
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown