This IP address has been reported a total of
35
times from
32 distinct
sources.
209.38.106.160 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 8046)
Source port: 61012
TTL: 237
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8046)
Source port: 61012
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 209.38.106.160) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-10-20T15:43:45.388583+02:00 vps kernel: [8874593.765673] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-20T15:43:45.388583+02:00 vps kernel: [8874593.765673] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=209.38.106.160 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=44872 PROTO=TCP SPT=61013 DPT=7443 WINDOW=1025 RES=0x00 SYN URGP=0
...
show less
2026-01-15T18:35:49.696522+01:00 router02.imr-richtsfeld.de sshd[2616108]: Invalid user postgres fro ...
show more2026-01-15T18:35:49.696522+01:00 router02.imr-richtsfeld.de sshd[2616108]: Invalid user postgres from 209.38.106.160 port 52932
2026-01-15T18:35:49.836192+01:00 router02.imr-richtsfeld.de sshd[2616108]: Connection closed by invalid user postgres 209.38.106.160 port 52932 [preauth]
2026-01-15T18:36:23.975926+01:00 router02.imr-richtsfeld.de sshd[2616412]: Invalid user ftp from 209.38.106.160 port 39182
2026-01-15T18:36:24.090290+01:00 router02.imr-richtsfeld.de sshd[2616412]: Connection closed by invalid user ftp 209.38.106.160 port 39182 [preauth]
2026-01-15T18:36:57.426237+01:00 router02.imr-richtsfeld.de sshd[2616647]: Invalid user ftp from 209.38.106.160 port 54106
show less
Brute-Force
Anonymous
2026-01-15 17:48:44,550 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
2026-01-15 ...
show more2026-01-15 17:48:44,550 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
2026-01-15 18:00:30,618 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
2026-01-15 18:11:59,831 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
2026-01-15 18:23:10,857 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
2026-01-15 18:34:42,972 fail2ban.actions [2629]: NOTICE [sshd] Ban 209.38.106.160
...
show less
FFM Jan 15 17:56:36 websrv01 sshd[552474]: Invalid user test from 209.38.106.160 port 38606
Jan 15 1 ...
show moreFFM Jan 15 17:56:36 websrv01 sshd[552474]: Invalid user test from 209.38.106.160 port 38606
Jan 15 17:56:36 websrv01 sshd[552474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.106.160
Jan 15 17:56:38 websrv01 sshd[552474]: Failed password for invalid user test from 209.38.106.160 port 38606 ssh2
Jan 15 17:57:10 websrv01 sshd[552504]: Invalid user test from 209.38.106.160 port 50644
show less
Brute-Force
SSH
Anonymous
2026-01-16T00:47:33.460594+08:00 TPHK sshd[2956452]: Invalid user admin from 209.38.106.160 port 375 ...
show more2026-01-16T00:47:33.460594+08:00 TPHK sshd[2956452]: Invalid user admin from 209.38.106.160 port 37586
2026-01-16T00:48:10.254639+08:00 TPHK sshd[2956800]: Invalid user admin from 209.38.106.160 port 54102
2026-01-16T00:48:46.871002+08:00 TPHK sshd[2957263]: Invalid user admin from 209.38.106.160 port 42164
2026-01-16T00:49:23.258202+08:00 TPHK sshd[2957618]: Invalid user admin from 209.38.106.160 port 39726
2026-01-16T00:49:58.949233+08:00 TPHK sshd[2957927]: Invalid user admin from 209.38.106.160 port 44864
2026-01-16T00:50:36.537683+08:00 TPHK sshd[2958270]: Invalid user admin from 209.38.106.160 port 39020
2026-01-16T00:51:12.718428+08:00 TPHK sshd[2958648]: Invalid user admin from 209.38.106.160 port 48198
2026-01-16T00:51:47.297808+08:00 TPHK sshd[2959100]: Invalid user admin from 209.38.106.160 port 48554
...
show less
FFM Jan 15 17:40:48 websrv01 sshd[550439]: Invalid user admin from 209.38.106.160 port 53294
Jan 15 ...
show moreFFM Jan 15 17:40:48 websrv01 sshd[550439]: Invalid user admin from 209.38.106.160 port 53294
Jan 15 17:40:48 websrv01 sshd[550439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.106.160
Jan 15 17:40:50 websrv01 sshd[550439]: Failed password for invalid user admin from 209.38.106.160 port 53294 ssh2
Jan 15 17:41:25 websrv01 sshd[550473]: Invalid user admin from 209.38.106.160 port 55922
show less
Brute-Force
SSH
Showing 1 to
15
of 35 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩