JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 120.157.38.167

120.157.38.167 was found in our database!

This IP was reported 161 times. Confidence of Abuse is 45%: ?

45%

ISP	Telstra Limited
Usage Type	Fixed Line ISP
ASN	AS1221
Domain Name	telstra.net
Country	🇦🇺 Australia
City	Melbourne, Victoria

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 120.157.38.167

Whois 120.157.38.167

IP Abuse Reports for 120.157.38.167:

This IP address has been reported a total of 161 times from 68 distinct sources. 120.157.38.167 was first reported on April 27th 2022, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-07-12 05:04:06 (3 hours ago)	IP & Port Scan.	SSH Port Scan Brute-Force
🇺🇸 MPL	2026-07-12 00:12:15 (8 hours ago)	tcp/23 (8 or more attempts)	Port Scan
Anonymous	2026-07-11 19:34:35 (13 hours ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/ ... show more Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
Anonymous	2026-07-11 15:15:55 (17 hours ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
🇺🇸 MPL	2026-07-11 14:41:07 (18 hours ago)	tcp/23 (4 or more attempts)	Port Scan
🇫🇷 security.rdmc.fr	2026-07-11 13:39:47 (19 hours ago)	Port Scan Attack proto:TCP src:47384 dst:23	Port Scan
🇵🇱 sefinek.net	2026-07-11 13:37:33 (19 hours ago)	Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/ ... show more Honeypot hit: Unauthorized connection attempt detected on 23/TELNET Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Hacking Port Scan
🇦🇹 urnilxfgbez	2025-09-20 22:45:00 (9 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇹🇷 rtbh.com.tr	2025-09-20 08:08:53 (9 months ago)	list.rtbh.com.tr report: tcp/22	Brute-Force
🇩🇪 SELECT-IT Beratung und IT Dienstleistung GmbH	2025-09-20 06:11:57 (9 months ago)	2025-09-20T08:13:41.659190+02:00 runner3 sshd[62034]: Invalid user ubnt from 120.157.38.167 port 447 ... show more 2025-09-20T08:13:41.659190+02:00 runner3 sshd[62034]: Invalid user ubnt from 120.157.38.167 port 44798 2025-09-20T08:13:42.006890+02:00 runner3 sshd[62034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 2025-09-20T08:13:43.681256+02:00 runner3 sshd[62034]: Failed password for invalid user ubnt from 120.157.38.167 port 44798 ssh2 2025-09-20T08:13:48.308760+02:00 runner3 sshd[62382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 user=root 2025-09-20T08:13:50.143156+02:00 runner3 sshd[62382]: Failed password for root from 120.157.38.167 port 60848 ssh2 ... show less	Brute-Force SSH
🇦🇹 ipi.at	2025-09-20 05:17:46 (9 months ago)	2025-09-20T07:17:43.676374+02:00 n23 sshd[386108]: pam_unix(sshd:auth): authentication failure; logn ... show more 2025-09-20T07:17:43.676374+02:00 n23 sshd[386108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 2025-09-20T07:17:45.887818+02:00 n23 sshd[386108]: Failed password for invalid user a from 120.157.38.167 port 54000 ssh2 ... show less	Brute-Force SSH
🇺🇸 yzfdude1	2025-09-19 15:00:05 (9 months ago)	Sep 19 08:59:57 daffy sshd[1483450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ... show more Sep 19 08:59:57 daffy sshd[1483450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 Sep 19 08:59:59 daffy sshd[1483450]: Failed password for invalid user a from 120.157.38.167 port 41428 ssh2 Sep 19 09:00:04 daffy sshd[1483455]: Invalid user ubnt from 120.157.38.167 port 36002 ... show less	Brute-Force SSH
🇬🇧 SuperEvilLuke	2025-09-19 12:56:40 (9 months ago)	2025-09-19T13:56:30.138983panel sshd[357939]: Invalid user ubnt from 120.157.38.167 port 48622 2025- ... show more 2025-09-19T13:56:30.138983panel sshd[357939]: Invalid user ubnt from 120.157.38.167 port 48622 2025-09-19T13:56:30.452771panel sshd[357939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 2025-09-19T13:56:32.760683panel sshd[357939]: Failed password for invalid user ubnt from 120.157.38.167 port 48622 ssh2 2025-09-19T13:56:37.663108panel sshd[357965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.157.38.167 user=root 2025-09-19T13:56:39.596287panel sshd[357965]: Failed password for root from 120.157.38.167 port 43554 ssh2 ... show less	Brute-Force SSH
🇦🇹 urnilxfgbez	2025-09-18 22:45:00 (9 months ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
🇺🇸 RAP	2025-09-18 18:49:03 (9 months ago)	2025-09-18 18:49:03 UTC Unauthorized activity to TCP port 23. Telnet	Port Scan

Showing 1 to 15 of 161 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇫🇷 161.97.113.41

🇬🇧 154.16.44.26

🇫🇷 85.217.140.32

🇬🇧 35.203.211.237

🇬🇧 35.203.210.28

🇦🇺 16.176.136.157

🇩🇪 167.94.146.57

🇺🇸 162.217.100.196

🇮🇳 139.59.6.237

🇺🇸 66.132.195.109

🇸🇬 47.236.188.232

🇳🇱 45.148.10.230

🇳🇱 45.148.10.152

🇺🇸 40.77.167.11

🇬🇧 217.146.80.103

🇸🇪 176.10.197.168

🇫🇮 147.185.133.109

🇫🇷 51.68.111.203

🇫🇮 193.187.151.154

🇫🇮 147.185.133.137