This IP address has been reported a total of
346
times from
213 distinct
sources.
138.197.70.224 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
2024-06-25T05:33:48.857998+02:00 myvps sshd[141351]: Failed password for invalid user user1 from 138 ...
show more2024-06-25T05:33:48.857998+02:00 myvps sshd[141351]: Failed password for invalid user user1 from 138.197.70.224 port 42258 ssh2
2024-06-25T05:34:35.309520+02:00 myvps sshd[141422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.70.224 user=root
2024-06-25T05:34:37.412547+02:00 myvps sshd[141422]: Failed password for root from 138.197.70.224 port 39942 ssh2
2024-06-25T05:35:25.521477+02:00 myvps sshd[141508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.70.224 user=root
2024-06-25T05:35:27.162302+02:00 myvps sshd[141508]: Failed password for root from 138.197.70.224 port 47834 ssh2
...
show less
Jun 29 21:51:00 LFTRBULGARIA sshd[154549]: Failed password for root from 138.197.70.224 port 48842 s ...
show moreJun 29 21:51:00 LFTRBULGARIA sshd[154549]: Failed password for root from 138.197.70.224 port 48842 ssh2
Jun 29 21:51:43 LFTRBULGARIA sshd[154609]: Invalid user oracle from 138.197.70.224 port 38188
Jun 29 21:51:43 LFTRBULGARIA sshd[154609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.70.224
Jun 29 21:51:43 LFTRBULGARIA sshd[154609]: Invalid user oracle from 138.197.70.224 port 38188
Jun 29 21:51:45 LFTRBULGARIA sshd[154609]: Failed password for invalid user oracle from 138.197.70.224 port 38188 ssh2
Jun 29 21:52:24 LFTRBULGARIA sshd[154668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.70.224 user=root
Jun 29 21:52:25 LFTRBULGARIA sshd[154668]: Failed password for root from 138.197.70.224 port 42282 ssh2
...
show less
Brute-Force
SSH
Anonymous
138.197.70.224 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more138.197.70.224 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 29 15:50:18 server2 sshd[11184]: Failed password for root from 1.13.79.144 port 32816 ssh2
Jun 29 15:49:26 server2 sshd[10990]: Failed password for root from 208.81.201.3 port 37182 ssh2
Jun 29 15:49:27 server2 sshd[10996]: Failed password for root from 197.5.145.73 port 53386 ssh2
Jun 29 15:50:11 server2 sshd[11172]: Failed password for root from 195.158.4.210 port 57988 ssh2
Jun 29 15:50:15 server2 sshd[11177]: Failed password for root from 138.197.70.224 port 59580 ssh2
IP Addresses Blocked:
1.13.79.144 (CN/China/-)
208.81.201.3 (US/United States/-)
197.5.145.73 (TN/Tunisia/-)
195.158.4.210 (UZ/Uzbekistan/-)
show less
Jun 29 21:06:33 belaz-gitlab-server sshd[596371]: Invalid user test from 138.197.70.224 port 49346
J ...
show moreJun 29 21:06:33 belaz-gitlab-server sshd[596371]: Invalid user test from 138.197.70.224 port 49346
Jun 29 21:06:33 belaz-gitlab-server sshd[596371]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.70.224
Jun 29 21:06:35 belaz-gitlab-server sshd[596371]: Failed password for invalid user test from 138.197.70.224 port 49346 ssh2
...
show less
Jun 29 19:37:39 schenklradio sshd[2696022]: Invalid user dev from 138.197.70.224 port 45072
Jun 29 1 ...
show moreJun 29 19:37:39 schenklradio sshd[2696022]: Invalid user dev from 138.197.70.224 port 45072
Jun 29 19:38:21 schenklradio sshd[2696214]: Invalid user admin from 138.197.70.224 port 38226
Jun 29 19:39:50 schenklradio sshd[2697206]: Invalid user admin from 138.197.70.224 port 46664
Jun 29 19:41:17 schenklradio sshd[2697831]: Invalid user dep from 138.197.70.224 port 34872
Jun 29 19:42:47 schenklradio sshd[2698447]: Invalid user admin from 138.197.70.224 port 42368
...
show less
Jun 29 19:03:45 nospam3 sshd[1472046]: Invalid user Admin from 138.197.70.224 port 50804
Jun 29 19:0 ...
show moreJun 29 19:03:45 nospam3 sshd[1472046]: Invalid user Admin from 138.197.70.224 port 50804
Jun 29 19:04:30 nospam3 sshd[1472078]: Invalid user developer from 138.197.70.224 port 41220
Jun 29 19:05:56 nospam3 sshd[1472166]: Invalid user ubuntu from 138.197.70.224 port 36392
Jun 29 19:06:37 nospam3 sshd[1472203]: Invalid user mine from 138.197.70.224 port 41210
Jun 29 19:12:39 nospam3 sshd[1472541]: Invalid user user from 138.197.70.224 port 49982
...
show less
Brute-Force
SSH
Showing 1 to
15
of 346 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩