JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

38.12.22.28

Neutral Activity

Abuse Confidence Score

0% Low Risk

44 reports

40 reporters · latest 5 months ago

ISP: Cogent Communications, LLC
Usage Type: Fixed Line ISP
ASN: AS174
Domain Name: cogentco.com
Country: 🇺🇸 United States of America
City: San Jose, California

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

38.12.22.28 has been reported 44 times. The most recent report is from 5 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

44 from 40 distinct reporters

First reported

May 30th 2026

Most recent report

5 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2026-05-31 17:33:04 UTC · (5 months ago)	May 31 19:32:32 sshd-session[3908]: User admin from 38.12.22.28 not allowed because not listed in AllowUsers May 31 19:33:03 sshd-session[3919]: Invalid user orangepi from 38.12.22.28 port 59182 ...	Brute-Force SSH
🇩🇪 throny	2026-05-31 17:15:50 UTC · (5 months ago)	2026-05-31T19:09:53.633578+02:00 [REDACTED] sshd[2050537]: Invalid user admin from 38.12.22.28 port 36086 2026-05-31T19:10:25.351189+02:00 [REDACTED] sshd[2052013]: Invalid user orangepi from 38.12.22.28 port 36286 2026-05-31T19:14:14.744747+02:00 [R ... show more 2026-05-31T19:09:53.633578+02:00 [REDACTED] sshd[2050537]: Invalid user admin from 38.12.22.28 port 36086 2026-05-31T19:10:25.351189+02:00 [REDACTED] sshd[2052013]: Invalid user orangepi from 38.12.22.28 port 36286 2026-05-31T19:14:14.744747+02:00 [REDACTED] sshd[2060397]: Invalid user test from 38.12.22.28 port 37824 2026-05-31T19:14:46.154038+02:00 [REDACTED] sshd[2061427]: Invalid user user from 38.12.22.28 port 38132 2026-05-31T19:15:49.354280+02:00 [REDACTED] sshd[2063969]: Invalid user admin from 38.12.22.28 port 38522 show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-05-31 16:58:57 UTC · (5 months ago)	(sshd) Failed SSH login from 38.12.22.28 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 31 11:57:37 14555 sshd[6602]: Invalid user admin from 38.12.22.28 port 50088 May 31 11:57:39 14555 sshd[6602]: ... show more (sshd) Failed SSH login from 38.12.22.28 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 31 11:57:37 14555 sshd[6602]: Invalid user admin from 38.12.22.28 port 50088 May 31 11:57:39 14555 sshd[6602]: Failed password for invalid user admin from 38.12.22.28 port 50088 ssh2 May 31 11:58:10 14555 sshd[6945]: Invalid user orangepi from 38.12.22.28 port 50334 May 31 11:58:12 14555 sshd[6945]: Failed password for invalid user orangepi from 38.12.22.28 port 50334 ssh2 May 31 11:58:43 14555 sshd[7109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 user=root show less	Brute-Force SSH
🇹🇭 Sawasdee	2026-05-31 16:51:07 UTC · (5 months ago)	Unwanted checking 80 or 443 port ...	Bad Web Bot
🇩🇪 maxpower	2026-05-31 16:34:22 UTC · (5 months ago)	(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 38.12.22.28 (US/United States/-): 2 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 38.12.22.28 - - [31/May/2026:18:34:18 +0200] "GET /vendor/phpunit/phpu ... show more (exploit_critical) REGOLA 2 - Critical File Exploit Attempt 38.12.22.28 (US/United States/-): 2 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 38.12.22.28 - - [31/May/2026:18:34:18 +0200] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 10422 "-" "libredtail-http" "-" host=51.77.95.119 38.12.22.28 - - [31/May/2026:18:34:18 +0200] "GET /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php HTTP/1.1" 404 10418 "-" "libredtail-http" "-" host=51.77.95.119 show less	Port Scan
🇳🇱 mateisr	2026-05-31 16:29:18 UTC · (5 months ago)	Fail2Ban - SSHD brute-force SSH server ...	Brute-Force SSH
🇮🇪 AutosOnShow	2026-05-31 16:23:05 UTC · (5 months ago)	blocked for webapp attack \| path requested: /hello.world \| seen at 2026-05-31 16:22:48.754 \|	Web App Attack
🇩🇪 mxpgmbh	2026-05-31 16:20:43 UTC · (5 months ago)	2026-05-31T18:20:04.728074+02:00 ** sshd-session[63476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 user=root 2026-05-31T18:20:06.946446+02:00 sshd-session[63476]: Failed password for r ... show more 2026-05-31T18:20:04.728074+02:00 sshd-session[63476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 user=root 2026-05-31T18:20:06.946446+02:00 sshd-session[63476]: Failed password for root from 38.12.22.28 port 50296 ssh2 2026-05-31T18:20:40.461608+02:00 sshd-session[63610]: Invalid user from 38.12.22.28 port 50668 2026-05-31T18:20:40.463158+02:00 sshd-session[63610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 2026-05-31T18:20:42.322212+02:00 sshd-session[63610]: Failed password for invalid user ** from 38.12.22.28 port 50668 ssh2 show less	Brute-Force SSH
🇺🇸 xmission.com	2026-05-31 16:13:43 UTC · (5 months ago)	Blocked by UFW (TCP on 2222) Source port: 47745 TTL: 54 Packet length: 40 TOS: 0x00 This report (for 38.12.22.28) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter	Port Scan
🇩🇪 Admins@FBN	2026-05-31 16:01:40 UTC · (5 months ago)	FW-PortScan: Traffic Blocked srcport=65443 dstport=2375	Port Scan
🇺🇸 bigscoots.com	2026-05-31 16:00:18 UTC · (5 months ago)	(sshd) Failed SSH login from 38.12.22.28 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 31 10:58:55 15022 sshd[2243]: Invalid user admin from 38.12.22.28 port 44714 May 31 10:58:57 15022 sshd[2243]: ... show more (sshd) Failed SSH login from 38.12.22.28 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: May 31 10:58:55 15022 sshd[2243]: Invalid user admin from 38.12.22.28 port 44714 May 31 10:58:57 15022 sshd[2243]: Failed password for invalid user admin from 38.12.22.28 port 44714 ssh2 May 31 10:59:28 15022 sshd[2604]: Invalid user orangepi from 38.12.22.28 port 44944 May 31 10:59:30 15022 sshd[2604]: Failed password for invalid user orangepi from 38.12.22.28 port 44944 ssh2 May 31 11:00:00 15022 sshd[2772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 user=root show less	Brute-Force SSH
🇧🇷 SOC PR	2026-05-31 15:55:35 UTC · (5 months ago)	IPS: Apache HTTP Server Directory Traversal.	Web App Attack
🇩🇪 ghostwarriors	2026-05-31 15:50:49 UTC · (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇹🇷 zumbo.net	2026-05-31 15:49:11 UTC · (5 months ago)	2026-05-31T18:49:09.118282+03:00 vpn.zumbo.net sshd-session[12578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 2026-05-31T18:49:10.577522+03:00 vpn.zumbo.net sshd-session[12578]: Failed passwor ... show more 2026-05-31T18:49:09.118282+03:00 vpn.zumbo.net sshd-session[12578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.22.28 2026-05-31T18:49:10.577522+03:00 vpn.zumbo.net sshd-session[12578]: Failed password for invalid user admin from 38.12.22.28 port 44874 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-05-31 15:48:58 UTC · (5 months ago)	May 31 15:44:45 login sshd[188447]: Invalid user admin from 38.12.22.28 port 40266 May 31 15:45:16 login sshd[188449]: Invalid user orangepi from 38.12.22.28 port 40406 May 31 15:48:57 login sshd[188469]: Invalid user test from 38.12.22.28 port 41984 ... show more May 31 15:44:45 login sshd[188447]: Invalid user admin from 38.12.22.28 port 40266 May 31 15:45:16 login sshd[188449]: Invalid user orangepi from 38.12.22.28 port 40406 May 31 15:48:57 login sshd[188469]: Invalid user test from 38.12.22.28 port 41984 ... show less	Brute-Force SSH

Showing 1 to 15 of 44 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 45.148.10.141

🇫🇷 45.77.61.56

🇺🇸 20.65.202.19

🇦🇷 186.96.198.129

🇧🇾 178.172.246.234

🇵🇭 136.158.122.234

🇺🇸 66.132.224.15

🇬🇧 5.252.83.205

🇳🇱 193.47.62.69

🇧🇷 187.87.144.234

🇧🇷 177.137.215.192

🇺🇸 174.68.48.77

🇰🇷 125.130.102.172

🇻🇳 116.110.155.94

🇮🇳 103.231.44.170

🇭🇰 101.36.122.18

🇨🇳 36.131.210.82

🇺🇸 35.254.205.253

🇷🇺 31.173.2.182

🇳🇱 195.178.110.228