This IP address has been reported a total of
33
times from
27 distinct
sources.
138.124.98.31 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-07T20:44:27.158253+02:00 webmail sshd[2450984]: Invalid user ubuntu from 138.124.98.31 port ...
show more2026-07-07T20:44:27.158253+02:00 webmail sshd[2450984]: Invalid user ubuntu from 138.124.98.31 port 54908
...
show less
2026-07-07T17:07:09.670608+02:00 webmail sshd[2396397]: Invalid user ubuntu from 138.124.98.31 port ...
show more2026-07-07T17:07:09.670608+02:00 webmail sshd[2396397]: Invalid user ubuntu from 138.124.98.31 port 37842
2026-07-07T18:18:57.730621+02:00 webmail sshd[2414445]: Invalid user ubuntu from 138.124.98.31 port 34328
...
show less
(sshd) Failed SSH login from 138.124.98.31 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; ...
show more(sshd) Failed SSH login from 138.124.98.31 (-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 7 15:51:13 ded01 sshd[1983571]: Did not receive identification string from 138.124.98.31 port 40234
Jul 7 15:51:58 ded01 sshd[1983902]: Did not receive identification string from 138.124.98.31 port 59114
Jul 7 15:51:58 ded01 sshd[1983904]: Did not receive identification string from 138.124.98.31 port 33586
Jul 7 15:52:08 ded01 sshd[1984119]: Did not receive identification string from 138.124.98.31 port 42960
Jul 7 16:05:15 ded01 sshd[1994647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.124.98.31 user=root
show less
2026-07-06T21:03:38.334629 telos sshd[3517956]: Invalid user ubuntu from 138.124.98.31 port 52962
20 ...
show more2026-07-06T21:03:38.334629 telos sshd[3517956]: Invalid user ubuntu from 138.124.98.31 port 52962
2026-07-06T22:39:39.435427 telos sshd[3518180]: Invalid user ubuntu from 138.124.98.31 port 48978
2026-07-07T01:08:51.671921 telos sshd[3518663]: Invalid user ubuntu from 138.124.98.31 port 53312
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: ubuntu, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH tarpit (endlessh) connection from 138.124.98.31
Automated sensor: 1 SSH connection/probe attempts on port(s) 22 over the last 24h (latest 2026-07-06 ...
show moreAutomated sensor: 1 SSH connection/probe attempts on port(s) 22 over the last 24h (latest 2026-07-06T18:22Z).
show less
Jul 4 01:45:55 mx1 sshd[3508649]: Invalid user ubuntu from 138.124.98.31 port 34350
Jul 4 02:43:17 ...
show moreJul 4 01:45:55 mx1 sshd[3508649]: Invalid user ubuntu from 138.124.98.31 port 34350
Jul 4 02:43:17 mx1 sshd[3540703]: Invalid user ubuntu from 138.124.98.31 port 53610
Jul 4 04:38:56 mx1 sshd[3604526]: Invalid user ubuntu from 138.124.98.31 port 47690
...
show less
SSH credential brute-force observed by honeypot.
Source IP: 138.124.98.31
Targeted device: NAS
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 138.124.98.31
Targeted device: NAS
First seen: 03 Jul 2026 07:33:52 UTC
Last seen: 03 Jul 2026 09:44:24 UTC
Attempts: 4
Client: SSH-2.0-phpseclib_1.0 (openssl)
Sample credentials: root:123456, ubuntu:ubuntu, ubuntu:123456, root:123456cz
show less
Brute-Force
SSH
IoT Targeted
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩