This IP address has been reported a total of
170
times from
103 distinct
sources.
209.38.252.13 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 3000)
Source port: 61007
TTL: 237
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 3000)
Source port: 61007
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 209.38.252.13) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
ban-reviewer auto report; ip=209.38.252.13; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; c ...
show moreban-reviewer auto report; ip=209.38.252.13; scenario=crowdsecurity/ssh-slow-bf; verdict=valid_ban; confidence=0.90; categories=14,15,18,22; active_decisions=1; lookback_decisions=1; nginx_requests=0; appsec_matches=0; auth_events=26; kernel_events=0; signals=Multiple failed SSH authentication attempts with different usernames (admin, root); Pattern of repeated connection closed by invalid/authenticating user from same IP; High frequency of SSH-related events in short time window
show less
2026-02-20T08:17:52.937051+01:00 Linux02 sshd[23840]: Failed password for invalid user developer fro ...
show more2026-02-20T08:17:52.937051+01:00 Linux02 sshd[23840]: Failed password for invalid user developer from 209.38.252.13 port 55834 ssh2
2026-02-20T08:18:30.294271+01:00 Linux02 sshd[25498]: Invalid user developer from 209.38.252.13 port 52114
2026-02-20T08:18:30.389557+01:00 Linux02 sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.252.13
2026-02-20T08:18:32.745272+01:00 Linux02 sshd[25498]: Failed password for invalid user developer from 209.38.252.13 port 52114 ssh2
2026-02-20T08:19:08.421445+01:00 Linux02 sshd[26938]: Invalid user developer from 209.38.252.13 port 57120
2026-02-20T08:19:08.526586+01:00 Linux02 sshd[26938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.252.13
2026-02-20T08:19:10.768993+01:00 Linux02 sshd[26938]: Failed password for invalid user developer from 209.38.252.13 port 57120 ssh2
2026-02-20T08:19:48.443723+01:00 Linux02 sshd[28459]: Invalid user developer
...
show less
2026-02-20T10:17:25.500709pantelemone.ru sshd[2770478]: Failed password for invalid user developer f ...
show more2026-02-20T10:17:25.500709pantelemone.ru sshd[2770478]: Failed password for invalid user developer from 209.38.252.13 port 38402 ssh2
2026-02-20T10:18:02.628887pantelemone.ru sshd[2770631]: Invalid user developer from 209.38.252.13 port 33116
2026-02-20T10:18:02.780870pantelemone.ru sshd[2770631]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.252.13
2026-02-20T10:18:04.961585pantelemone.ru sshd[2770631]: Failed password for invalid user developer from 209.38.252.13 port 33116 ssh2
2026-02-20T10:18:41.513856pantelemone.ru sshd[2770736]: Invalid user developer from 209.38.252.13 port 33820
...
show less
Feb 20 07:13:09 ubuntu-8gb-hel1-2 sshd[238456]: pam_unix(sshd:auth): authentication failure; logname ...
show moreFeb 20 07:13:09 ubuntu-8gb-hel1-2 sshd[238456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.252.13
Feb 20 07:13:10 ubuntu-8gb-hel1-2 sshd[238456]: Failed password for invalid user developer from 209.38.252.13 port 37484 ssh2
Feb 20 07:13:47 ubuntu-8gb-hel1-2 sshd[239541]: Invalid user developer from 209.38.252.13 port 33964
...
show less
Brute-Force
SSH
Showing 1 to
15
of 170 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩