This IP address has been reported a total of
1,560
times from
45 distinct
sources.
138.2.98.41 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-07T01:56:20.979885+09:00 no6 sshd[655088]: Connection closed by authenticating user root 138 ...
show more2026-06-07T01:56:20.979885+09:00 no6 sshd[655088]: Connection closed by authenticating user root 138.2.98.41 port 53828 [preauth]
...
show less
2026-06-06 10:36:11 connection from 138.2.98.41
2026-06-06 15:01:58 connection from 138.2.98.41
2026 ...
show more2026-06-06 10:36:11 connection from 138.2.98.41
2026-06-06 15:01:58 connection from 138.2.98.41
2026-06-06 15:01:59 connection from 138.2.98.41
2026-06-06 16:07:48 connection from 138.2.98.41
2026-06-06 16:07:48 connection from 138.2.98.41
...
show less
2026-06-06T15:18:10.866251+00:00 instance-20241019-1127 sshd[2817174]: Connection closed by authenti ...
show more2026-06-06T15:18:10.866251+00:00 instance-20241019-1127 sshd[2817174]: Connection closed by authenticating user root 138.2.98.41 port 31660 [preauth]
...
show less
2026-06-06 07:19:46 connection from 138.2.98.41
2026-06-06 09:23:54 connection from 138.2.98.41
2026 ...
show more2026-06-06 07:19:46 connection from 138.2.98.41
2026-06-06 09:23:54 connection from 138.2.98.41
2026-06-06 09:23:54 connection from 138.2.98.41
2026-06-06 15:15:52 connection from 138.2.98.41
2026-06-06 15:15:52 connection from 138.2.98.41
...
show less
2026-06-06T23:44:37.339126+09:00 no2 sshd[2588556]: Connection closed by authenticating user root 13 ...
show more2026-06-06T23:44:37.339126+09:00 no2 sshd[2588556]: Connection closed by authenticating user root 138.2.98.41 port 25208 [preauth]
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
โข Credentials: root:LeitboGi0r ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
โข Credentials: root:LeitboGi0ro, root:123@@@
โข Number of login attempts: 2
โข 7 command(s) were executed during the session
โข Client: SSH-2.0-paramiko_4.0.0
โข Uploaded files: bendi.py
show less
2026-06-06T13:41:14.335895+00:00 instance-20241105-1951 sshd[2017930]: Connection closed by authenti ...
show more2026-06-06T13:41:14.335895+00:00 instance-20241105-1951 sshd[2017930]: Connection closed by authenticating user root 138.2.98.41 port 32868 [preauth]
...
show less
Blocked by UFW on ampereone [5522/tcp]
Source port: 46978
TTL: 253
Packet length: 40
TOS: 0x00
This ...
show moreBlocked by UFW on ampereone [5522/tcp]
Source port: 46978
TTL: 253
Packet length: 40
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-06T10:54:26.106900+00:00 instance-20241105-1951 sshd[2017051]: Connection closed by authenti ...
show more2026-06-06T10:54:26.106900+00:00 instance-20241105-1951 sshd[2017051]: Connection closed by authenticating user root 138.2.98.41 port 65084 [preauth]
...
show less
2026-06-06 04:14:16 connection from 138.2.98.41
2026-06-06 04:14:16 connection from 138.2.98.41
2026 ...
show more2026-06-06 04:14:16 connection from 138.2.98.41
2026-06-06 04:14:16 connection from 138.2.98.41
2026-06-06 07:02:44 connection from 138.2.98.41
2026-06-06 07:02:45 connection from 138.2.98.41
2026-06-06 10:36:10 connection from 138.2.98.41
...
show less