This IP address has been reported a total of
38
times from
33 distinct
sources.
138.84.43.80 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
France
with 6
reports;
United States of America
with 5
reports.
The most common categories in these recent reports were:
SSH
37
times;
Brute-Force
36
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-23T02:40:04.014501+01:00 web01 sshd[4060725]: Failed password for invalid user upload from 1 ...
show more2026-10-23T02:40:04.014501+01:00 web01 sshd[4060725]: Failed password for invalid user upload from 138.84.43.80 port 57725 ssh2
2026-10-23T02:46:28.775367+01:00 web01 sshd[4061925]: Invalid user ftpuser from 138.84.43.80 port 32879
2026-10-23T02:46:28.777377+01:00 web01 sshd[4061925]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80
2026-10-23T02:46:30.914865+01:00 web01 sshd[4061925]: Failed password for invalid user ftpuser from 138.84.43.80 port 32879 ssh2
2026-10-23T02:47:59.750644+01:00 web01 sshd[4062207]: Invalid user deploy from 138.84.43.80 port 30783
...
show less
2026-10-23T01:38:04.195006+00:00 vps1.gnome.moe sshd-session[604039]: Failed password for invalid us ...
show more2026-10-23T01:38:04.195006+00:00 vps1.gnome.moe sshd-session[604039]: Failed password for invalid user upload from 138.84.43.80 port 64439 ssh2
2026-10-23T01:46:09.075043+00:00 vps1.gnome.moe sshd-session[608703]: Invalid user ftpuser from 138.84.43.80 port 55078
2026-10-23T01:46:09.079328+00:00 vps1.gnome.moe sshd-session[608703]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80
2026-10-23T01:46:10.273022+00:00 vps1.gnome.moe sshd-session[608703]: Failed password for invalid user ftpuser from 138.84.43.80 port 55078 ssh2
2026-10-23T01:47:39.389062+00:00 vps1.gnome.moe sshd-session[609795]: Invalid user deploy from 138.84.43.80 port 58328
...
show less
2026-10-22T23:19:33.813980+00:00 wp-control sshd[970050]: Invalid user backend from 138.84.43.80 por ...
show more2026-10-22T23:19:33.813980+00:00 wp-control sshd[970050]: Invalid user backend from 138.84.43.80 port 62183
2026-10-22T23:24:01.646477+00:00 wp-control sshd[970289]: Invalid user terraria from 138.84.43.80 port 40355
2026-10-22T23:25:29.113657+00:00 wp-control sshd[971021]: Invalid user candy from 138.84.43.80 port 19224
2026-10-22T23:26:53.553328+00:00 wp-control sshd[971074]: Invalid user mary from 138.84.43.80 port 50782
2026-10-22T23:28:15.543440+00:00 wp-control sshd[971255]: Invalid user geo from 138.84.43.80 port 34699
...
show less
2026-10-22T22:40:34.657717+00:00 hms1593 sshd-session[4077210]: Failed password for root from 138.84 ...
show more2026-10-22T22:40:34.657717+00:00 hms1593 sshd-session[4077210]: Failed password for root from 138.84.43.80 port 7395 ssh2
2026-10-22T22:42:05.234873+00:00 hms1593 sshd-session[4078847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80 user=root
2026-10-22T22:42:07.912751+00:00 hms1593 sshd-session[4078847]: Failed password for root from 138.84.43.80 port 12100 ssh2
...
show less
2026-10-22T19:33:52.835795-03:00 vmi2819241 sshd-session[2053407]: Failed password for invalid user ...
show more2026-10-22T19:33:52.835795-03:00 vmi2819241 sshd-session[2053407]: Failed password for invalid user root from 138.84.43.80 port 4018 ssh2
2026-10-22T19:40:36.222012-03:00 vmi2819241 sshd-session[2055955]: User root from 138.84.43.80 not allowed because not listed in AllowUsers
2026-10-22T19:40:36.265071-03:00 vmi2819241 sshd-session[2055955]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80 user=root
2026-10-22T19:40:38.760104-03:00 vmi2819241 sshd-session[2055955]: Failed password for invalid user root from 138.84.43.80 port 65388 ssh2
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-10-22T23:56:48.394553+02:00 vmd183731 sshd-session[212570]: pam_unix(sshd:auth): authentication ...
show more2026-10-22T23:56:48.394553+02:00 vmd183731 sshd-session[212570]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80
2026-10-22T23:56:49.786329+02:00 vmd183731 sshd-session[212570]: Failed password for invalid user admin from 138.84.43.80 port 49369 ssh2
2026-10-22T23:58:14.596254+02:00 vmd183731 sshd-session[212911]: Invalid user tmpuser from 138.84.43.80 port 57421
2026-10-22T23:58:14.601827+02:00 vmd183731 sshd-session[212911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80
2026-10-22T23:58:16.827408+02:00 vmd183731 sshd-session[212911]: Failed password for invalid user tmpuser from 138.84.43.80 port 57421 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-22T21:50:49.019643+00:00 subaru sshd-session[1560132]: Disconnected from authenticating user ...
show more2026-10-22T21:50:49.019643+00:00 subaru sshd-session[1560132]: Disconnected from authenticating user root 138.84.43.80 port 34588 [preauth]
2026-10-22T21:57:08.284587+00:00 subaru sshd-session[1567847]: Invalid user admin from 138.84.43.80 port 3916
2026-10-22T21:57:08.289228+00:00 subaru sshd-session[1567847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.84.43.80
2026-10-22T21:57:10.034974+00:00 subaru sshd-session[1567847]: Failed password for invalid user admin from 138.84.43.80 port 3916 ssh2
2026-10-22T21:57:12.058272+00:00 subaru sshd-session[1567847]: Disconnected from invalid user admin 138.84.43.80 port 3916 [preauth]
...
show less