This IP address has been reported a total of
888
times from
438 distinct
sources.
45.165.238.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-06-03T02:50:45.458910+02:00 arm-fr sshd[2320712]: Invalid user abdullah from 45.165.238.2 port ...
show more2026-06-03T02:50:45.458910+02:00 arm-fr sshd[2320712]: Invalid user abdullah from 45.165.238.2 port 48186
2026-06-03T02:55:19.911751+02:00 arm-fr sshd[2322483]: Invalid user mas from 45.165.238.2 port 41434
2026-06-03T02:57:19.288152+02:00 arm-fr sshd[2323257]: Invalid user lc from 45.165.238.2 port 49920
...
show less
Jun 2 18:41:30 b146-48 sshd[397466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 2 18:41:30 b146-48 sshd[397466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2
Jun 2 18:41:31 b146-48 sshd[397466]: Failed password for invalid user abdullah from 45.165.238.2 port 59312 ssh2
Jun 2 18:53:58 b146-48 sshd[397576]: Invalid user mas from 45.165.238.2 port 39386
...
show less
Brute-Force
SSH
Anonymous
2026-06-03T02:37:34.224964 prodWEB sshd[55072]: Connection from 45.165.238.2 port 56356 on 57.128.10 ...
show more2026-06-03T02:37:34.224964 prodWEB sshd[55072]: Connection from 45.165.238.2 port 56356 on 57.128.10.223 port 22 rdomain ""
2026-06-03T02:37:35.314674 prodWEB sshd[55072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2 user=root
2026-06-03T02:37:36.835173 prodWEB sshd[55072]: Failed password for root from 45.165.238.2 port 56356 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-03T02:11:22.265845 prodWEB sshd[54611]: Connection from 45.165.238.2 port 55776 on 57.128.10 ...
show more2026-06-03T02:11:22.265845 prodWEB sshd[54611]: Connection from 45.165.238.2 port 55776 on 57.128.10.223 port 22 rdomain ""
2026-06-03T02:11:23.344676 prodWEB sshd[54611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2 user=root
2026-06-03T02:11:25.727824 prodWEB sshd[54611]: Failed password for root from 45.165.238.2 port 55776 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH abuse or brute force attack detected by Fail2Ban
SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
Anonymous
2026-06-03T01:43:31.345011 prodWEB sshd[53921]: Invalid user helena from 45.165.238.2 port 46444
202 ...
show more2026-06-03T01:43:31.345011 prodWEB sshd[53921]: Invalid user helena from 45.165.238.2 port 46444
2026-06-03T01:43:31.348763 prodWEB sshd[53921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2
2026-06-03T01:43:33.526879 prodWEB sshd[53921]: Failed password for invalid user helena from 45.165.238.2 port 46444 ssh2
...
show less
Report 2426129 with IP 3450598 for SSH brute-force attack by source 3462468 via ssh-honeypot/0.2.0+h ...
show moreReport 2426129 with IP 3450598 for SSH brute-force attack by source 3462468 via ssh-honeypot/0.2.0+http
show less
(sshd) Failed SSH login from 45.165.238.2 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Directio ...
show more(sshd) Failed SSH login from 45.165.238.2 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 2 17:44:34 18024 sshd[20096]: Invalid user backend from 45.165.238.2 port 40304
Jun 2 17:44:36 18024 sshd[20096]: Failed password for invalid user backend from 45.165.238.2 port 40304 ssh2
Jun 2 17:55:41 18024 sshd[24597]: Invalid user danya from 45.165.238.2 port 41480
Jun 2 17:55:44 18024 sshd[24597]: Failed password for invalid user danya from 45.165.238.2 port 41480 ssh2
Jun 2 17:57:52 18024 sshd[25462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2 user=root
show less
2026-06-02T23:59:32.227024+02:00 proxy-nl1 sshd[498633]: pam_unix(sshd:auth): authentication failure ...
show more2026-06-02T23:59:32.227024+02:00 proxy-nl1 sshd[498633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2 user=root
2026-06-02T23:59:33.899915+02:00 proxy-nl1 sshd[498633]: Failed password for root from 45.165.238.2 port 45068 ssh2
2026-06-03T00:01:39.122800+02:00 proxy-nl1 sshd[498834]: Invalid user public from 45.165.238.2 port 54134
2026-06-03T00:01:39.125664+02:00 proxy-nl1 sshd[498834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.165.238.2
2026-06-03T00:01:41.231869+02:00 proxy-nl1 sshd[498834]: Failed password for invalid user public from 45.165.238.2 port 54134 ssh2
show less
Brute-Force
SSH
Showing 91 to
105
of 888 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩