AbuseIPDB » 54.38.198.238

54.38.198.238 was found in our database!

This IP was reported 46 times. Confidence of Abuse is 100%: ?

100%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	ip238.ip-54-38-198.eu
Domain Name	ovh.com
Country	Poland
City	Warsaw, Mazowieckie

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 54.38.198.238

Whois 54.38.198.238

IP Abuse Reports for 54.38.198.238:

This IP address has been reported a total of 46 times from 38 distinct sources. 54.38.198.238 was first reported on May 25th 2023, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	Date	Comment	Categories
MU-star.net	27 May 2023	Invalid user gcti from 54.38.198.238 port 54512	Port Scan Brute-Force SSH
Anonymous	26 May 2023	May 26 14:15:19 mordormail sshd[123495]: Invalid user ambari from 54.38.198.238 port 46628 May ... show moreMay 26 14:15:19 mordormail sshd[123495]: Invalid user ambari from 54.38.198.238 port 46628 May 26 14:15:19 mordormail sshd[123495]: Disconnected from invalid user ambari 54.38.198.238 port 46628 [preauth] May 26 14:19:22 mordormail sshd[142552]: Disconnected from authenticating user root 54.38.198.238 port 60972 [preauth] ... show less	Brute-Force SSH
Apache	26 May 2023	(sshd) Failed SSH login from 54.38.198.238 (PL/Poland/ip238.ip-54-38-198.eu): 5 in the last 300 secs	Brute-Force SSH
jk jk	26 May 2023	WAF_blocked	Hacking Web App Attack
Anonymous	26 May 2023	: Ip 54.38.198.238 performed crowdsecurity/ssh-slow-bf arround 2023-05-26T11:55:40Z 1 times	SSH
Adam Dudzik	26 May 2023	May 26 12:11:15 pihole sshd[2140884]: Failed password for root from 54.38.198.238 port 56870 ssh2<br ... show moreMay 26 12:11:15 pihole sshd[2140884]: Failed password for root from 54.38.198.238 port 56870 ssh2 May 26 12:12:23 pihole sshd[2140912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=root May 26 12:12:24 pihole sshd[2140912]: Failed password for root from 54.38.198.238 port 51252 ssh2 show less	Brute-Force SSH
Anonymous	26 May 2023	54.38.198.238 (PL/Poland/ip238.ip-54-38-198.eu), 5 distributed sshd attacks on account [REDACTED] in ... show more54.38.198.238 (PL/Poland/ip238.ip-54-38-198.eu), 5 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: May 26 03:34:43 sshd[1139254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=[USERNAME] show less	DDoS Attack
gac	26 May 2023	May 26 07:55:10 41nt sshd[663803]: Failed password for root from 54.38.198.238 port 41246 ssh2 ... show moreMay 26 07:55:10 41nt sshd[663803]: Failed password for root from 54.38.198.238 port 41246 ssh2 May 26 07:56:12 41nt sshd[664337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=root May 26 07:56:15 41nt sshd[664337]: Failed password for root from 54.38.198.238 port 47690 ssh2 May 26 07:57:20 41nt sshd[664882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=root May 26 07:57:22 41nt sshd[664882]: Failed password for root from 54.38.198.238 port 53008 ssh2 ... show less	Brute-Force SSH
MazenHost	26 May 2023	May 26 04:57:48 EscobarDEV sshd[40904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show moreMay 26 04:57:48 EscobarDEV sshd[40904]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=root May 26 04:57:50 EscobarDEV sshd[40904]: Failed password for root from 54.38.198.238 port 43630 ssh2 May 26 04:58:57 EscobarDEV sshd[40928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 user=root May 26 04:59:00 EscobarDEV sshd[40928]: Failed password for root from 54.38.198.238 port 44646 ssh2 ... show less	Brute-Force SSH
Dario B.	26 May 2023	DATE:2023-05-26 04:55:52, IP:54.38.198.238, PORT:ssh SSH brute force auth on honeypot server (epe-ho ... show moreDATE:2023-05-26 04:55:52, IP:54.38.198.238, PORT:ssh SSH brute force auth on honeypot server (epe-honey1-hq) show less	Brute-Force SSH
Anonymous	26 May 2023	SSH Brute Force Attack	Brute-Force SSH
chirorist	26 May 2023	2023-05-26T11:17:00.361079waf.chirorist.org sshd[2372850]: pam_unix(sshd:auth): authentication failu ... show more2023-05-26T11:17:00.361079waf.chirorist.org sshd[2372850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 2023-05-26T11:17:02.861904waf.chirorist.org sshd[2372850]: Failed password for invalid user jerry from 54.38.198.238 port 36374 ssh2 2023-05-26T11:18:01.962912waf.chirorist.org sshd[2372852]: Invalid user nisec from 54.38.198.238 port 36232 2023-05-26T11:18:01.967173waf.chirorist.org sshd[2372852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.198.238 2023-05-26T11:18:03.509207waf.chirorist.org sshd[2372852]: Failed password for invalid user nisec from 54.38.198.238 port 36232 ssh2 ... show less	Brute-Force SSH
IrisFlower	26 May 2023	Unauthorized connection attempt detected from IP address 54.38.198.238 to port 2323 [J]	Port Scan Hacking
0xNath	26 May 2023	2023-05-26T04:12:08.682585+02:00 srv1.renaudna.fr sshd[200851]: Failed password for root from 54.38. ... show more2023-05-26T04:12:08.682585+02:00 srv1.renaudna.fr sshd[200851]: Failed password for root from 54.38.198.238 port 44640 ssh2 2023-05-26T04:12:09.353111+02:00 srv1.renaudna.fr sshd[200851]: Disconnected from authenticating user root 54.38.198.238 port 44640 [preauth] 2023-05-26T04:16:33.378840+02:00 srv1.renaudna.fr sshd[201565]: Invalid user jerry from 54.38.198.238 port 33406 ... show less	Brute-Force SSH
balsakup.fr	26 May 2023	[ssh] SSH attack	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩