This IP address has been reported a total of
17
times from
14 distinct
sources.
38.70.79.52 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
France
with 2
reports;
India
with 2
reports.
The most common categories in these recent reports were:
SSH
16
times;
Brute-Force
15
times;
Port Scan
2
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
2026-10-18T02:45:29.986170+02:00 v2202408231204281807 sshd-session[129679]: pam_unix(sshd:auth): aut ...
show more2026-10-18T02:45:29.986170+02:00 v2202408231204281807 sshd-session[129679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.70.79.52 user=root
2026-10-18T02:45:31.906643+02:00 v2202408231204281807 sshd-session[129679]: Failed password for root from 38.70.79.52 port 51238 ssh2
...
show less
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
2026-10-17T10:42:25.827301+00:00 pterodactyl-tunnel-ip sshd-session[1358675]: Failed password for ro ...
show more2026-10-17T10:42:25.827301+00:00 pterodactyl-tunnel-ip sshd-session[1358675]: Failed password for root from 38.70.79.52 port 55118 ssh2
2026-10-17T10:42:28.818364+00:00 pterodactyl-tunnel-ip sshd-session[1358680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.70.79.52 user=root
2026-10-17T10:42:31.085046+00:00 pterodactyl-tunnel-ip sshd-session[1358680]: Failed password for root from 38.70.79.52 port 51510 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Fail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines inc ...
show moreFail2Ban SSH brute-force ban on bebricow.hostes.io. jail=sshd; source=fail2ban; no raw log lines included.
show less
2026-10-16T13:48:40.122052+02:00 gaia sshd[1217738]: Failed password for invalid user root from 38.7 ...
show more2026-10-16T13:48:40.122052+02:00 gaia sshd[1217738]: Failed password for invalid user root from 38.70.79.52 port 53246 ssh2
2026-10-16T13:48:40.835161+02:00 gaia sshd[1217748]: Connection from 38.70.79.52 port 35084 on 148.251.110.65 port 22 rdomain ""
2026-10-16T13:48:41.510655+02:00 gaia sshd[1217748]: User root from 38.70.79.52 not allowed because not listed in AllowUsers
...
show less
Automated sensor: 5140 SSH brute-force attempts over the last 24h (latest 2026-10-15T15:00Z). Userna ...
show moreAutomated sensor: 5140 SSH brute-force attempts over the last 24h (latest 2026-10-15T15:00Z). Usernames tried: root.
show less
Oct 15 09:50:51 gamehost sshd[3239133]: Failed password for root from 38.70.79.52 port 49456 ssh2
Oc ...
show moreOct 15 09:50:51 gamehost sshd[3239133]: Failed password for root from 38.70.79.52 port 49456 ssh2
Oct 15 09:50:53 gamehost sshd[3239135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.70.79.52 user=root
Oct 15 09:50:54 gamehost sshd[3239135]: Failed password for root from 38.70.79.52 port 47178 ssh2
Oct 15 09:50:56 gamehost sshd[3239137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.70.79.52 user=root
Oct 15 09:50:58 gamehost sshd[3239137]: Failed password for root from 38.70.79.52 port 42112 ssh2
...
show less
This IP address carried out 13 port scanning attempts on 14-10-2026. For more information or to repo ...
show moreThis IP address carried out 13 port scanning attempts on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 2 SSH credential attack (attempts) on 14-10-2026. For more information o ...
show moreThis IP address carried out 2 SSH credential attack (attempts) on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-14T09:20:30.536691+02:00 ezri sshd[1175334]: error: kex_exchange_identification: Connection ...
show more2026-10-14T09:20:30.536691+02:00 ezri sshd[1175334]: error: kex_exchange_identification: Connection closed by remote host
2026-10-14T09:20:30.537655+02:00 ezri sshd[1175334]: Connection closed by 38.70.79.52 port 50116
2026-10-14T09:20:31.318573+02:00 ezri sshd[1175335]: User root from 38.70.79.52 not allowed because not listed in AllowUsers
2026-10-14T09:20:31.476449+02:00 ezri sshd[1175335]: Connection closed by invalid user root 38.70.79.52 port 58606 [preauth]
...
show less
