Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
201.238.194.80 (CL/Chile/-), 7 distributed sshd attacks on account [magi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 13 07:39:38 server5 sshd[9799]: Failed password for invalid user magi from 195.250.25.102 p ...
show more201.238.194.80 (CL/Chile/-), 7 distributed sshd attacks on account [magi] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 13 07:39:38 server5 sshd[9799]: Failed password for invalid user magi from 195.250.25.102 port 54118 ssh2
Nov 13 06:57:12 server5 sshd[30410]: Invalid user magi from 103.20.144.141
Nov 13 06:57:15 server5 sshd[30410]: Failed password for invalid user magi from 103.20.144.141 port 45426 ssh2
Nov 13 07:03:55 server5 sshd[31625]: Invalid user magi from 201.238.194.80
Nov 13 07:03:57 server5 sshd[31625]: Failed password for invalid user magi from 201.238.194.80 port 49504 ssh2
Nov 13 07:39:36 server5 sshd[9799]: Invalid user magi from 195.250.25.102
Nov 13 07:55:16 server5 sshd[13512]: Invalid user magi from 94.72.127.149
IP Addresses Blocked:
195.250.25.102 (GB/United Kingdom/-)
103.20.144.141 (VN/Vietnam/-)
show less
2026-11-13T02:06:27.907359+00:00 ukbox.klej.net sshd-session[52934]: Invalid user ukbox from 201.238.194.80 port 33494
2026-11-13T02:06:28.137191+00:00 ukbox.klej.net sshd-session[52934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show more2026-11-13T02:06:27.907359+00:00 ukbox.klej.net sshd-session[52934]: Invalid user ukbox from 201.238.194.80 port 33494
2026-11-13T02:06:28.137191+00:00 ukbox.klej.net sshd-session[52934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.194.80
2026-11-13T02:06:30.891141+00:00 ukbox.klej.net sshd-session[52934]: Failed password for invalid user ukbox from 201.238.194.80 port 33494 ssh2
2026-11-13T07:50:44.468079+00:00 ukbox.klej.net sshd-session[60795]: Invalid user klej from 201.238.194.80 port 37114
...
show less
Nov 13 02:18:39 <server> sshd\[9980\]: Invalid user netmetro from 201.238.194.80Nov 13 02:18:42 <server> sshd\[9980\]: Failed password for invalid user netmetro from 201.238.194.80 port 48864 ssh2
...
Brute-Force
SSH
Anonymous
Nov 12 12:10:29 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238.194.80
Nov 12 20:13:11 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238.194.80
Nov 13 08:26:17 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238 ...
show moreNov 12 12:10:29 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238.194.80
Nov 12 20:13:11 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238.194.80
Nov 13 08:26:17 mail fail2ban.actions [614]: NOTICE [sshd] Ban 201.238.194.80
show less
2026-11-12T23:35:11.097872+00:00 arrow sshd-session[642671]: Failed password for invalid user arrow from 201.238.194.80 port 40934 ssh2
2026-11-12T23:43:50.544904+00:00 arrow sshd-session[643009]: pam_unix(sshd:auth): authentication failure; logname= ...
show more2026-11-12T23:35:11.097872+00:00 arrow sshd-session[642671]: Failed password for invalid user arrow from 201.238.194.80 port 40934 ssh2
2026-11-12T23:43:50.544904+00:00 arrow sshd-session[643009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.194.80 user=root
2026-11-12T23:43:52.830896+00:00 arrow sshd-session[643009]: Failed password for root from 201.238.194.80 port 49662 ssh2
...
show less
Nov 12 15:16:46 v sshd\[3226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.194.80 user=working
Nov 12 15:16:48 v sshd\[3226\]: Failed password for working from 201.238.194.80 port 40484 ssh2
No ...
show moreNov 12 15:16:46 v sshd\[3226\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.194.80 user=working
Nov 12 15:16:48 v sshd\[3226\]: Failed password for working from 201.238.194.80 port 40484 ssh2
Nov 12 16:26:59 v sshd\[7869\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.238.194.80 user=root
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
