This IP address has been reported a total of
219
times from
164 distinct
sources.
59.38.131.149 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-04T10:54:39.874781+01:00 cow sshd-session[2940439]: Failed password for invalid user alireza ...
show more2026-06-04T10:54:39.874781+01:00 cow sshd-session[2940439]: Failed password for invalid user alireza from 59.38.131.149 port 41358 ssh2
2026-06-04T10:58:42.034321+01:00 cow sshd-session[2943653]: Invalid user sysadmin from 59.38.131.149 port 49084
2026-06-04T10:58:42.038519+01:00 cow sshd-session[2943653]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149
2026-06-04T10:58:44.076042+01:00 cow sshd-session[2943653]: Failed password for invalid user sysadmin from 59.38.131.149 port 49084 ssh2
2026-06-04T10:59:40.981689+01:00 cow sshd-session[2944444]: Invalid user harry from 59.38.131.149 port 60834
...
show less
Brute-Force
SSH
Anonymous
Jun 4 10:29:12 38 sshd[2264039]: Invalid user dev from 59.38.131.149 port 46428
Jun 4 10:29:42 38 ...
show moreJun 4 10:29:12 38 sshd[2264039]: Invalid user dev from 59.38.131.149 port 46428
Jun 4 10:29:42 38 sshd[2264043]: Invalid user frappe from 59.38.131.149 port 52078
Jun 4 10:30:16 38 sshd[2264060]: Invalid user junior from 59.38.131.149 port 57722
Jun 4 10:30:46 38 sshd[2264063]: Invalid user sambauser from 59.38.131.149 port 35144
Jun 4 10:32:56 38 sshd[2264085]: Invalid user clamav from 59.38.131.149 port 57714
...
show less
2026-06-04T02:27:02.148037+00:00 Dokploy sshd[3570929]: Invalid user infinity from 59.38.131.149 por ...
show more2026-06-04T02:27:02.148037+00:00 Dokploy sshd[3570929]: Invalid user infinity from 59.38.131.149 port 33792
2026-06-04T02:27:36.191314+00:00 Dokploy sshd[3570991]: Invalid user parth from 59.38.131.149 port 42846
2026-06-04T02:28:10.329578+00:00 Dokploy sshd[3571064]: Invalid user vmuser from 59.38.131.149 port 51568
2026-06-04T02:29:50.689775+00:00 Dokploy sshd[3571291]: Invalid user koha from 59.38.131.149 port 50588
2026-06-04T02:30:21.238224+00:00 Dokploy sshd[3571357]: Invalid user gituser from 59.38.131.149 port 58764
...
show less
2026-06-04T09:41:01.567697+08:00 *hostname* sshd-session[145450]: Invalid user admin from 59.38.131. ...
show more2026-06-04T09:41:01.567697+08:00 *hostname* sshd-session[145450]: Invalid user admin from 59.38.131.149 port 34508
2026-06-04T09:42:49.864765+08:00 *hostname* sshd-session[145500]: Connection from 59.38.131.149 port 54742 on 10.89.160.7 port 22 rdomain ""
2026-06-04T09:42:50.105514+08:00 *hostname* sshd-session[145500]: Invalid user jack from 59.38.131.149 port 54742
2026-06-04T09:44:31.977300+08:00 *hostname* sshd-session[145590]: Connection from 59.38.131.149 port 46716 on 10.89.160.7 port 22 rdomain ""
2026-06-04T09:44:32.220269+08:00 *hostname* sshd-session[145590]: Invalid user username from 59.38.131.149 port 46716
show less
2026-06-04T03:31:14.113860+02:00 router02.wira-gmbh.de sshd[3891584]: Invalid user u1 from 59.38.131 ...
show more2026-06-04T03:31:14.113860+02:00 router02.wira-gmbh.de sshd[3891584]: Invalid user u1 from 59.38.131.149 port 38460
2026-06-04T03:31:14.299763+02:00 router02.wira-gmbh.de sshd[3891584]: Disconnected from invalid user u1 59.38.131.149 port 38460 [preauth]
2026-06-04T03:39:38.693989+02:00 router02.wira-gmbh.de sshd[3893901]: Invalid user user10 from 59.38.131.149 port 53948
2026-06-04T03:39:38.901782+02:00 router02.wira-gmbh.de sshd[3893901]: Disconnected from invalid user user10 59.38.131.149 port 53948 [preauth]
2026-06-04T03:40:35.070799+02:00 router02.wira-gmbh.de sshd[3894390]: Connection closed by 59.38.131.149 port 35844 [preauth]
show less
Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-06-03T23:50:00Z and 2026-06- ...
show moreCowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2026-06-03T23:50:00Z and 2026-06-04T00:22:32Z
show less
2026-06-04T00:00:04.296834+00:00 cdn-nl sshd[280160]: Invalid user ftpuser2 from 59.38.131.149 port ...
show more2026-06-04T00:00:04.296834+00:00 cdn-nl sshd[280160]: Invalid user ftpuser2 from 59.38.131.149 port 41558
2026-06-04T00:04:19.227438+00:00 cdn-nl sshd[280195]: Invalid user howard from 59.38.131.149 port 60964
2026-06-04T00:05:44.510306+00:00 cdn-nl sshd[280214]: Invalid user mcserver from 59.38.131.149 port 48610
...
show less
Brute-Force
SSH
Anonymous
2026-06-04T01:51:03.227971 www.yerkanian.com sshd[818970]: pam_unix(sshd:auth): authentication failu ...
show more2026-06-04T01:51:03.227971 www.yerkanian.com sshd[818970]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149
2026-06-04T01:51:05.339971 www.yerkanian.com sshd[818970]: Failed password for invalid user fran from 59.38.131.149 port 52322 ssh2
2026-06-04T01:55:21.700887 www.yerkanian.com sshd[818998]: Invalid user user from 59.38.131.149 port 43500
2026-06-04T01:55:21.706792 www.yerkanian.com sshd[818998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149
2026-06-04T01:55:23.904162 www.yerkanian.com sshd[818998]: Failed password for invalid user user from 59.38.131.149 port 43500 ssh2
2026-06-04T02:01:01.386415 www.yerkanian.com sshd[819041]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.38.131.149 user=root
2026-06-04T02:01:03.593624 www.yerkanian.com sshd[819041]: Failed password for root from 59.38.131.149 port 50552 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 219 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩