This IP address has been reported a total of
200
times from
113 distinct
sources.
171.248.38.254 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Cons ...
show moreSSH honeypot detection (Endlessh tarpit, port 22). 1 probe(s) sustained for 0m total hold time. Consistent with automated SSH scanning/brute-force. Reported by dotnetdork.dev security honeypot.
show less
May 7 10:54:52 teamcity sshd[3740409]: Invalid user tester from 171.248.38.254 port 55444
May 7 11 ...
show moreMay 7 10:54:52 teamcity sshd[3740409]: Invalid user tester from 171.248.38.254 port 55444
May 7 11:12:02 teamcity sshd[3747708]: Invalid user ubuntu from 171.248.38.254 port 46304
May 7 11:13:46 teamcity sshd[3748544]: Invalid user steam from 171.248.38.254 port 35374
...
show less
May 7 02:10:12 debian-gitlab sshd[685832]: Invalid user ftpuser from 171.248.38.254 port 34062
May ...
show moreMay 7 02:10:12 debian-gitlab sshd[685832]: Invalid user ftpuser from 171.248.38.254 port 34062
May 7 02:16:19 debian-gitlab sshd[686028]: Invalid user user from 171.248.38.254 port 43264
...
show less
May 7 01:53:39 debian-gitlab sshd[685136]: Invalid user odoo from 171.248.38.254 port 51080
May 7 ...
show moreMay 7 01:53:39 debian-gitlab sshd[685136]: Invalid user odoo from 171.248.38.254 port 51080
May 7 01:58:07 debian-gitlab sshd[685313]: Invalid user erpnext from 171.248.38.254 port 43908
May 7 01:59:41 debian-gitlab sshd[685344]: Invalid user deploy from 171.248.38.254 port 60270
...
show less
2026-05-07T04:22:01.761297+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[871587]: Invalid user ql ...
show more2026-05-07T04:22:01.761297+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[871587]: Invalid user qlserver from 171.248.38.254 port 33000
2026-05-07T04:23:41.021097+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[871695]: Invalid user user from 171.248.38.254 port 50162
2026-05-07T04:28:14.158551+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[872037]: Invalid user ubuntu from 171.248.38.254 port 44912
...
show less
(sshd) Failed SSH login from 171.248.38.254 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 5 in the last 3 ...
show more(sshd) Failed SSH login from 171.248.38.254 (VN/Vietnam/dynamic-ip-adsl.viettel.vn): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 6 20:55:31 15448 sshd[5814]: Invalid user git from 171.248.38.254 port 43608
May 6 20:55:33 15448 sshd[5814]: Failed password for invalid user git from 171.248.38.254 port 43608 ssh2
May 6 21:00:10 15448 sshd[6530]: Invalid user ubuntu from 171.248.38.254 port 39468
May 6 21:00:13 15448 sshd[6530]: Failed password for invalid user ubuntu from 171.248.38.254 port 39468 ssh2
May 6 21:01:48 15448 sshd[6742]: Invalid user testuser from 171.248.38.254 port 56628
show less
May 6 23:02:16 temp-router-sip.merkur.local sshd[4175056]: Invalid user user from 171.248.38.254 po ...
show moreMay 6 23:02:16 temp-router-sip.merkur.local sshd[4175056]: Invalid user user from 171.248.38.254 port 35366
May 6 23:02:16 temp-router-sip.merkur.local sshd[4175056]: Disconnected from invalid user user 171.248.38.254 port 35366 [preauth]
May 6 23:06:44 temp-router-sip.merkur.local sshd[4175500]: Invalid user git from 171.248.38.254 port 58066
May 6 23:06:44 temp-router-sip.merkur.local sshd[4175500]: Disconnected from invalid user git 171.248.38.254 port 58066 [preauth]
May 6 23:08:19 temp-router-sip.merkur.local sshd[4175708]: Invalid user git from 171.248.38.254 port 46856
show less
2026-05-06T20:40:21.873614 vmi2089077.contaboserver.net sshd[3935986]: Invalid user vncuser from 171 ...
show more2026-05-06T20:40:21.873614 vmi2089077.contaboserver.net sshd[3935986]: Invalid user vncuser from 171.248.38.254 port 50120
2026-05-06T20:42:05.560530 vmi2089077.contaboserver.net sshd[3936637]: Invalid user ubuntu from 171.248.38.254 port 39704
2026-05-06T20:46:48.631199 vmi2089077.contaboserver.net sshd[3938391]: Invalid user ubuntu from 171.248.38.254 port 36126
...
show less
This IP address carried out 32 SSH credential attack (attempts) on 05-05-2026. For more information ...
show moreThis IP address carried out 32 SSH credential attack (attempts) on 05-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: ubuntu, Pass: [REDACTED]
May 6 18:23:24 pkdns2 sshd\[13114\]: Address 171.248.38.254 maps to dynamic-adsl.viettel.vn, but th ...
show moreMay 6 18:23:24 pkdns2 sshd\[13114\]: Address 171.248.38.254 maps to dynamic-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 6 18:23:24 pkdns2 sshd\[13114\]: Invalid user ubuntu from 171.248.38.254May 6 18:23:27 pkdns2 sshd\[13114\]: Failed password for invalid user ubuntu from 171.248.38.254 port 52276 ssh2May 6 18:24:56 pkdns2 sshd\[13147\]: Address 171.248.38.254 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 6 18:24:56 pkdns2 sshd\[13147\]: Invalid user git from 171.248.38.254May 6 18:24:59 pkdns2 sshd\[13147\]: Failed password for invalid user git from 171.248.38.254 port 40864 ssh2
...
show less
May 6 18:01:42 pkdns2 sshd\[12321\]: Address 171.248.38.254 maps to dynamic-ip-adsl.viettel.vn, but ...
show moreMay 6 18:01:42 pkdns2 sshd\[12321\]: Address 171.248.38.254 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 6 18:01:42 pkdns2 sshd\[12321\]: Invalid user terrariaserver from 171.248.38.254May 6 18:01:44 pkdns2 sshd\[12321\]: Failed password for invalid user terrariaserver from 171.248.38.254 port 42914 ssh2May 6 18:06:23 pkdns2 sshd\[12501\]: Address 171.248.38.254 maps to dynamic-ip-adsl.viettel.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!May 6 18:06:23 pkdns2 sshd\[12501\]: Invalid user user1 from 171.248.38.254May 6 18:06:26 pkdns2 sshd\[12501\]: Failed password for invalid user user1 from 171.248.38.254 port 36798 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 200 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩