This IP address has been reported a total of
1,135
times from
419 distinct
sources.
209.38.166.81 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
209.38.166.81 (GB/United Kingdom/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more209.38.166.81 (GB/United Kingdom/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 5 14:00:41 15145 sshd[23391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.37.174.180 user=root
Jun 5 13:54:41 15145 sshd[20550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.37.174.180 user=root
Jun 5 13:54:43 15145 sshd[20550]: Failed password for root from 211.37.174.180 port 33490 ssh2
Jun 5 13:49:44 15145 sshd[18298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81 user=root
Jun 5 13:49:47 15145 sshd[18298]: Failed password for root from 209.38.166.81 port 51602 ssh2
IP Addresses Blocked:
211.37.174.180 (KR/South Korea/-)
show less
2026-05-08T07:41:11.518128+02:00 mail sshd[3199993]: Invalid user hypernex from 209.38.166.81 port 3 ...
show more2026-05-08T07:41:11.518128+02:00 mail sshd[3199993]: Invalid user hypernex from 209.38.166.81 port 39670
2026-05-08T07:41:11.529439+02:00 mail sshd[3199993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81
2026-05-08T07:41:13.864303+02:00 mail sshd[3199993]: Failed password for invalid user hypernex from 209.38.166.81 port 39670 ssh2
...
show less
Jun 5 05:27:43 vps-eb8e942e sshd-session[1081392]: Connection closed by invalid user debian 209.38. ...
show moreJun 5 05:27:43 vps-eb8e942e sshd-session[1081392]: Connection closed by invalid user debian 209.38.166.81 port 50184 [preauth]
Jun 5 06:02:13 vps-eb8e942e sshd-session[1083486]: Connection from 209.38.166.81 port 47450 on 57.128.195.69 port 2222 rdomain ""
Jun 5 06:02:13 vps-eb8e942e sshd-session[1083486]: Invalid user git from 209.38.166.81 port 47450
...
show less
2026-06-05T02:48:27.329073+02:00 vps sshd[488]: Invalid user slashdirt from 209.38.166.81 port 35936 ...
show more2026-06-05T02:48:27.329073+02:00 vps sshd[488]: Invalid user slashdirt from 209.38.166.81 port 35936
2026-06-05T02:48:27.340851+02:00 vps sshd[488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81
2026-06-05T02:48:29.135673+02:00 vps sshd[488]: Failed password for invalid user slashdirt from 209.38.166.81 port 35936 ssh2
...
show less
2026-06-04T22:03:05.504364+05:30 serverstack.pro sshd[3257242]: pam_unix(sshd:auth): authentication ...
show more2026-06-04T22:03:05.504364+05:30 serverstack.pro sshd[3257242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81
2026-06-04T22:03:07.985219+05:30 serverstack.pro sshd[3257242]: Failed password for invalid user debian from 209.38.166.81 port 57392 ssh2
2026-06-04T22:12:35.098632+05:30 serverstack.pro sshd[3259881]: Invalid user web3 from 209.38.166.81 port 48894
...
show less
Jun 4 14:58:54 vps2 sshd[2101730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreJun 4 14:58:54 vps2 sshd[2101730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81
Jun 4 14:58:56 vps2 sshd[2101730]: Failed password for invalid user deploy from 209.38.166.81 port 58418 ssh2
Jun 4 15:04:24 vps2 sshd[2102615]: Invalid user git from 209.38.166.81 port 33084
...
show less
2026-06-04T13:31:21.300351 ns2.elhacker.net proftpd[3830711]: session[3830711] 0.0.0.0 (209.38.166.8 ...
show more2026-06-04T13:31:21.300351 ns2.elhacker.net proftpd[3830711]: session[3830711] 0.0.0.0 (209.38.166.81[209.38.166.81]): USER nas: no such user found from 209.38.166.81 [209.38.166.81] to ::ffff:192.168.0.3:2222
2026-06-04T13:38:53.910331 ns2.elhacker.net proftpd[3839786]: session[3839786] 0.0.0.0 (209.38.166.81[209.38.166.81]): USER satoshi: no such user found from 209.38.166.81 [209.38.166.81] to ::ffff:192.168.0.3:2222
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-03T05:35:58.316599+02:00 hades sshd[2448587]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-06-03T05:35:58.316599+02:00 hades sshd[2448587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.166.81
2026-06-03T05:36:00.508519+02:00 hades sshd[2448587]: Failed password for invalid user hash from 209.38.166.81 port 57888 ssh2
2026-06-03T05:42:30.100593+02:00 hades sshd[2451468]: Invalid user zabbix from 209.38.166.81 port 34332
...
show less