This IP address has been reported a total of
123
times from
85 distinct
sources.
209.38.85.158 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Nov 15 22:14:34 nervous-edison8 sshd[3584116]: Failed password for root from 209.38.85.158 port 5991 ...
show moreNov 15 22:14:34 nervous-edison8 sshd[3584116]: Failed password for root from 209.38.85.158 port 59910 ssh2
Nov 15 22:15:23 nervous-edison8 sshd[3584485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.85.158 user=root
Nov 15 22:15:26 nervous-edison8 sshd[3584485]: Failed password for root from 209.38.85.158 port 52012 ssh2
Nov 15 22:16:15 nervous-edison8 sshd[3584841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.85.158 user=root
Nov 15 22:16:17 nervous-edison8 sshd[3584841]: Failed password for root from 209.38.85.158 port 55228 ssh2
...
show less
2025-11-15T23:11:01.008081+01:00 gw-de17-01.guestgw.net sshd[1592541]: Connection closed by 209.38.8 ...
show more2025-11-15T23:11:01.008081+01:00 gw-de17-01.guestgw.net sshd[1592541]: Connection closed by 209.38.85.158 port 33994
2025-11-15T23:13:19.595575+01:00 gw-de17-01.guestgw.net sshd[1593023]: Connection closed by authenticating user root 209.38.85.158 port 48264 [preauth]
2025-11-15T23:14:10.246672+01:00 gw-de17-01.guestgw.net sshd[1593194]: Connection closed by authenticating user root 209.38.85.158 port 55264 [preauth]
2025-11-15T23:14:59.950092+01:00 gw-de17-01.guestgw.net sshd[1593297]: Connection closed by authenticating user root 209.38.85.158 port 51918 [preauth]
2025-11-15T23:15:52.101400+01:00 gw-de17-01.guestgw.net sshd[1593517]: Connection closed by authenticating user root 209.38.85.158 port 34236 [preauth]
show less
Nov 15 23:14:18 OakCottage sshd[21941]: Failed password for root from 209.38.85.158 port 35466 ssh2
...
show moreNov 15 23:14:18 OakCottage sshd[21941]: Failed password for root from 209.38.85.158 port 35466 ssh2
Nov 15 23:15:06 OakCottage sshd[22028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.85.158 user=root
Nov 15 23:15:09 OakCottage sshd[22028]: Failed password for root from 209.38.85.158 port 37180 ssh2
...
show less
2025-11-16T00:14:09.202241+02:00 ns3124905 sshd-session[2045437]: Failed password for root from 209. ...
show more2025-11-16T00:14:09.202241+02:00 ns3124905 sshd-session[2045437]: Failed password for root from 209.38.85.158 port 36298 ssh2
2025-11-16T00:14:57.838689+02:00 ns3124905 sshd-session[2045477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.85.158 user=root
2025-11-16T00:15:00.082568+02:00 ns3124905 sshd-session[2045477]: Failed password for root from 209.38.85.158 port 41918 ssh2
...
show less
Nov 15 22:13:13 localhost sshd[3593793]: Connection closed by authenticating user root 209.38.85.158 ...
show moreNov 15 22:13:13 localhost sshd[3593793]: Connection closed by authenticating user root 209.38.85.158 port 58840 [preauth]
Nov 15 22:14:00 localhost sshd[3593795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.85.158 user=root
Nov 15 22:14:02 localhost sshd[3593795]: Failed password for root from 209.38.85.158 port 38078 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 123 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩