This IP address has been reported a total of
18
times from
12 distinct
sources.
138.99.65.84 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-02T01:23:12.485007+00:00 mail sshd[991092]: Invalid user devops from 138.99.65.84 port 59380 ...
show more2026-09-02T01:23:12.485007+00:00 mail sshd[991092]: Invalid user devops from 138.99.65.84 port 59380
2026-09-02T02:57:07.934120+00:00 mail sshd[995725]: Invalid user leverage from 138.99.65.84 port 49835
2026-09-02T04:30:28.635224+00:00 mail sshd[1001045]: Invalid user staker2 from 138.99.65.84 port 17459
...
show less
2026-09-01T14:28:21.395849+00:00 sgp01 sshd[1401031]: Invalid user crypto from 138.99.65.84 port 567 ...
show more2026-09-01T14:28:21.395849+00:00 sgp01 sshd[1401031]: Invalid user crypto from 138.99.65.84 port 56700
2026-09-01T15:04:13.408745+00:00 sgp01 sshd[1403953]: Invalid user wallet from 138.99.65.84 port 60412
2026-09-01T15:46:48.322189+00:00 sgp01 sshd[1407042]: Invalid user wallet from 138.99.65.84 port 3388
2026-09-01T16:28:21.604183+00:00 sgp01 sshd[1409218]: Invalid user admin from 138.99.65.84 port 45080
2026-09-01T17:11:31.561881+00:00 sgp01 sshd[1411614]: Invalid user admin from 138.99.65.84 port 50676
...
show less
Sep 1 15:24:45 mx sshd[1260327]: Invalid user wallet from 138.99.65.84 port 33591
Sep 1 15:24:45 m ...
show moreSep 1 15:24:45 mx sshd[1260327]: Invalid user wallet from 138.99.65.84 port 33591
Sep 1 15:24:45 mx sshd[1260327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.99.65.84
Sep 1 15:24:47 mx sshd[1260327]: Failed password for invalid user wallet from 138.99.65.84 port 33591 ssh2
...
show less
2026-09-01T07:36:04.224004-04:00 site sshd-session[165631]: User root from 138.99.65.84 not allowed ...
show more2026-09-01T07:36:04.224004-04:00 site sshd-session[165631]: User root from 138.99.65.84 not allowed because not listed in AllowUsers
2026-09-01T10:49:38.298887-04:00 site sshd-session[176974]: Invalid user crypto from 138.99.65.84 port 65470
2026-09-01T11:09:50.152532-04:00 site sshd-session[177172]: Invalid user wallet from 138.99.65.84 port 53486
...
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-09-01T13:24Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-09-01T13:24Z). Usernames tried: root.
show less
Participating in DDoS Amplification Attack! Sending 11 requests over 19071s asking for ?0? of atlass ...
show moreParticipating in DDoS Amplification Attack! Sending 11 requests over 19071s asking for ?0? of atlassian.com, apple.com, cisco.com
show less
DNS Poisoning
DDoS Attack
Hacking
Brute-Force
Exploited Host
Showing 1 to
15
of 18 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ