This IP address has been reported a total of
1,234
times from
151 distinct
sources.
198.38.91.141 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured server. Multiple failed aut ...
show moreRepeated SSH brute force and user enumeration attempts against a secured server. Multiple failed authentication attempts from this IP across an extended period.
show less
Jun 15 13:59:06 smtp sshd[2328531]: error: maximum authentication attempts exceeded for invalid user ...
show moreJun 15 13:59:06 smtp sshd[2328531]: error: maximum authentication attempts exceeded for invalid user root from 198.38.91.141 port 38222 ssh2 [preauth]
...
show less
Jun 14 03:56:38 vpn sshd[2545665]: User root from 198.38.91.141 not allowed because not listed in Al ...
show moreJun 14 03:56:38 vpn sshd[2545665]: User root from 198.38.91.141 not allowed because not listed in AllowUsers
Jun 15 08:44:14 vpn sshd[2868100]: User root from 198.38.91.141 not allowed because not listed in AllowUsers
Jun 15 12:25:58 vpn sshd[2909856]: User root from 198.38.91.141 not allowed because not listed in AllowUsers
...
show less
Unwanted traffic detected by honeypot on June 14, 2026: brute force and hacking attacks (5 over ssh) ...
show moreUnwanted traffic detected by honeypot on June 14, 2026: brute force and hacking attacks (5 over ssh).
show less
2026-06-15T02:44:41.114369 rhel-20gb-ash-1 sshd[761839]: Disconnected from authenticating user root ...
show more2026-06-15T02:44:41.114369 rhel-20gb-ash-1 sshd[761839]: Disconnected from authenticating user root 198.38.91.141 port 58654 [preauth]
...
show less
2026-06-12T12:53:33.894123+02:00 ns3150947 sshd-session[3324221]: Disconnected from authenticating u ...
show more2026-06-12T12:53:33.894123+02:00 ns3150947 sshd-session[3324221]: Disconnected from authenticating user root 198.38.91.141 port 33680 [preauth]
2026-06-14T12:35:57.801466+02:00 ns3150947 sshd-session[180314]: Disconnected from authenticating user root 198.38.91.141 port 45096 [preauth]
2026-06-15T07:15:08.451123+02:00 ns3150947 sshd-session[546752]: Disconnected from authenticating user root 198.38.91.141 port 48924 [preauth]
...
show less
Jun 14 21:21:35 netllama sshd-session[3832116]: User root from 198.38.91.141 not allowed because not ...
show moreJun 14 21:21:35 netllama sshd-session[3832116]: User root from 198.38.91.141 not allowed because not listed in AllowUsers
Jun 14 21:21:35 netllama sshd-session[3832116]: error: maximum authentication attempts exceeded for invalid user root from 198.38.91.141 port 42714 ssh2 [preauth]
...
show less