This IP address has been reported a total of
181
times from
130 distinct
sources.
202.65.238.55 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 55
reports;
United States of America
with 28
reports;
Netherlands
with 13
reports.
The most common categories in these recent reports were:
Brute-Force
159
times;
SSH
157
times;
Port Scan
6
times;
Web App Attack
4
times;
Bad Web Bot
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
2026-10-13T04:58:24.800945+02:00 oH9i97bxiccs sshd[1383493]: pam_unix(sshd:auth): authentication fai ...
show more2026-10-13T04:58:24.800945+02:00 oH9i97bxiccs sshd[1383493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.65.238.55
2026-10-13T04:58:26.964598+02:00 oH9i97bxiccs sshd[1383493]: Failed password for invalid user hussain from 202.65.238.55 port 39120 ssh2
...
show less
2026-10-13T04:41:28.539568+02:00 oH9i97bxiccs sshd[1373705]: pam_unix(sshd:auth): authentication fai ...
show more2026-10-13T04:41:28.539568+02:00 oH9i97bxiccs sshd[1373705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.65.238.55
2026-10-13T04:41:29.890312+02:00 oH9i97bxiccs sshd[1373705]: Failed password for invalid user abc from 202.65.238.55 port 63410 ssh2
...
show less
Multiple SSH login attempts from 202.65.238.55 targeting user(s): root | Server Managed by Focusnic
Brute-Force
SSH
Anonymous
2026-10-13T02:24:18.924772+00:00 rs2 sshd[203904]: Invalid user testuser from 202.65.238.55 port 144 ...
show more2026-10-13T02:24:18.924772+00:00 rs2 sshd[203904]: Invalid user testuser from 202.65.238.55 port 14466
2026-10-13T02:28:59.584395+00:00 rs2 sshd[203944]: Invalid user sagar from 202.65.238.55 port 55448
2026-10-13T02:35:08.728435+00:00 rs2 sshd[203983]: Invalid user andi from 202.65.238.55 port 12057
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 11/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 11/100 (info) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 6 (4 bad password, 2 invalid user) | 0 success | 11 total SSH log events | seen on 1 sensor(s)
Origin: Indonesia (ID) | AS45700 PT. NAP Info Lintas Nusa | 202.65.238.0/24
First seen: 2026-10-13 02:14:22 UTC | Last seen: 2026-10-13 02:33:40 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Oct 13 01:16:51 tenantos sshd[3308074]: Invalid user vahid from 202.65.238.55 port 62559
Oct 13 01:3 ...
show moreOct 13 01:16:51 tenantos sshd[3308074]: Invalid user vahid from 202.65.238.55 port 62559
Oct 13 01:34:42 tenantos sshd[3309353]: Invalid user user from 202.65.238.55 port 1530
Oct 13 01:37:45 tenantos sshd[3309563]: Invalid user user from 202.65.238.55 port 64834
...
show less
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-10-13T00:17:24Z and 2026-10- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-10-13T00:17:24Z and 2026-10-13T00:26:58Z
show less
Oct 13 02:18:34 v2202011133598132617 sshd[4177410]: Invalid user vector from 202.65.238.55 port 4155 ...
show moreOct 13 02:18:34 v2202011133598132617 sshd[4177410]: Invalid user vector from 202.65.238.55 port 4155
Oct 13 02:22:35 v2202011133598132617 sshd[4180691]: Invalid user helpdesk from 202.65.238.55 port 59425
Oct 13 02:24:20 v2202011133598132617 sshd[4182204]: Invalid user ventas01 from 202.65.238.55 port 25730
...
show less
