This IP address has been reported a total of
66
times from
62 distinct
sources.
161.35.38.138 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
United States of America
with 10
reports;
France
with 8
reports.
The most common categories in these recent reports were:
SSH
50
times;
Brute-Force
47
times;
Port Scan
6
times;
FTP Brute-Force
1
time;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-11T20:05:39.388748shield sshd\[13467\]: Invalid user deploy from 161.35.38.138 port 42410
20 ...
show more2026-10-11T20:05:39.388748shield sshd\[13467\]: Invalid user deploy from 161.35.38.138 port 42410
2026-10-11T20:05:39.460762shield sshd\[13467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.38.138
2026-10-11T20:05:41.937832shield sshd\[13467\]: Failed password for invalid user deploy from 161.35.38.138 port 42410 ssh2
2026-10-11T20:08:20.994161shield sshd\[13853\]: Invalid user deploy from 161.35.38.138 port 54304
2026-10-11T20:08:21.065782shield sshd\[13853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.38.138
show less
2026-10-11T21:55:08.982632+02:00 Linux08 sshd[9880]: Failed password for invalid user nvidia from 16 ...
show more2026-10-11T21:55:08.982632+02:00 Linux08 sshd[9880]: Failed password for invalid user nvidia from 161.35.38.138 port 35634 ssh2
2026-10-11T21:57:40.695874+02:00 Linux08 sshd[14831]: Invalid user admin from 161.35.38.138 port 33308
2026-10-11T21:57:40.725433+02:00 Linux08 sshd[14831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.38.138
2026-10-11T21:57:42.109765+02:00 Linux08 sshd[14831]: Failed password for invalid user admin from 161.35.38.138 port 33308 ssh2
2026-10-11T22:00:13.592563+02:00 Linux08 sshd[20668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.38.138 user=root
2026-10-11T22:00:15.649189+02:00 Linux08 sshd[20668]: Failed password for root from 161.35.38.138 port 41136 ssh2
2026-10-11T22:02:41.072673+02:00 Linux08 sshd[26869]: Invalid user server from 161.35.38.138 port 43538
2026-10-11T22:02:41.090824+02:00 Linux08 sshd[26869]: pam_unix(sshd:auth): authentication failure;
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 24/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 24/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 8 (1 bad password, 7 invalid user) | 0 success | 13 total SSH log events | seen on 1 sensor(s)
Origin: United Kingdom (GB) | AS14061 DigitalOcean, LLC | datacenter | 161.35.38.0/24
First seen: 2026-10-11 19:47:47 UTC | Last seen: 2026-10-11 20:01:42 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Brute-Force
SSH
Anonymous
2026-10-11T19:53:29.583057+00:00 de-fra2-dns1 sshd[2669217]: Invalid user nvidia from 161.35.38.138 ...
show more2026-10-11T19:53:29.583057+00:00 de-fra2-dns1 sshd[2669217]: Invalid user nvidia from 161.35.38.138 port 35108
2026-10-11T19:56:05.584429+00:00 de-fra2-dns1 sshd[2669267]: Invalid user admin from 161.35.38.138 port 52864
2026-10-11T20:01:09.771147+00:00 de-fra2-dns1 sshd[2669310]: Invalid user server from 161.35.38.138 port 49150
...
show less
Oct 11 22:53:05 khomus sshd-session[1569]: Invalid user erpnext from 161.35.38.138 port 58940
Oct 11 ...
show moreOct 11 22:53:05 khomus sshd-session[1569]: Invalid user erpnext from 161.35.38.138 port 58940
Oct 11 22:53:05 khomus sshd-session[1569]: Connection closed by invalid user erpnext 161.35.38.138 port 58940 [preauth]
Oct 11 22:55:40 khomus sshd-session[1587]: Invalid user nvidia from 161.35.38.138 port 58996
Oct 11 22:55:40 khomus sshd-session[1587]: Connection closed by invalid user nvidia 161.35.38.138 port 58996 [preauth]
Oct 11 22:58:13 khomus sshd-session[1596]: Invalid user admin from 161.35.38.138 port 32970
...
show less
2026-10-12T04:52:45.744756+09:00 hh-vm-cm24-16g-nrt sshd[2422367]: Invalid user erpnext from 161.35. ...
show more2026-10-12T04:52:45.744756+09:00 hh-vm-cm24-16g-nrt sshd[2422367]: Invalid user erpnext from 161.35.38.138 port 44818
2026-10-12T04:55:20.203969+09:00 hh-vm-cm24-16g-nrt sshd[2422373]: Invalid user nvidia from 161.35.38.138 port 34502
2026-10-12T04:57:53.286147+09:00 hh-vm-cm24-16g-nrt sshd[2422380]: Invalid user admin from 161.35.38.138 port 55792
...
show less
Oct 11 21:52:18 jones sshd[1201462]: Failed password for [redacted] from 161.35.38.138 port 37448 ss ...
show moreOct 11 21:52:18 jones sshd[1201462]: Failed password for [redacted] from 161.35.38.138 port 37448 ssh2
Oct 11 21:54:47 jones sshd[1201574]: Invalid user [redacted] from 161.35.38.138 port 53214
Oct 11 21:54:47 jones sshd[1201574]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.38.138
Oct 11 21:54:49 jones sshd[1201574]: Failed password for [redacted] from 161.35.38.138 port 53214 ssh2
Oct 11 21:57:21 jones sshd[1201775]: Invalid user [redacted] from 161.35.38.138 port 45852
...
show less
2026-10-11T19:54:37.154336+00:00 mail.cfi.co sshd[4010693]: Invalid user nvidia from 161.35.38.138 p ...
show more2026-10-11T19:54:37.154336+00:00 mail.cfi.co sshd[4010693]: Invalid user nvidia from 161.35.38.138 port 33016
2026-10-11T19:57:11.001581+00:00 mail.cfi.co sshd[4010919]: Connection from 161.35.38.138 port 46650 on 206.189.122.172 port 22 rdomain ""
2026-10-11T19:57:11.015380+00:00 mail.cfi.co sshd[4010919]: Invalid user admin from 161.35.38.138 port 46650
...
show less
