JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.12.31.149

38.12.31.149 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	Cogent Communications, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS402169
Domain Name	cogentco.com
Country	🇺🇸 United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.12.31.149

Whois 38.12.31.149

IP Abuse Reports for 38.12.31.149:

This IP address has been reported a total of 10 times from 9 distinct sources. 38.12.31.149 was first reported on December 21st 2025, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇹🇷 rtbh.com.tr	2025-12-29 20:10:43 (5 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-12-29 06:50:35 (5 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇮🇹 lavocedelsavuto.it	2025-12-29 05:11:37 (5 months ago)	2025-12-29T06:11:08.655427+01:00 Server sshd[448961]: Failed password for root from 38.12.31.149 por ... show more 2025-12-29T06:11:08.655427+01:00 Server sshd[448961]: Failed password for root from 38.12.31.149 port 57124 ssh2 2025-12-29T06:11:20.878929+01:00 Server sshd[449133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root 2025-12-29T06:11:22.698722+01:00 Server sshd[449133]: Failed password for root from 38.12.31.149 port 59272 ssh2 2025-12-29T06:11:34.585578+01:00 Server sshd[449302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root 2025-12-29T06:11:36.325652+01:00 Server sshd[449302]: Failed password for root from 38.12.31.149 port 60990 ssh2 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-27 09:56:51 (5 months ago)	38.12.31.149 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 sec ... show more 38.12.31.149 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 27 03:53:51 15540 sshd[19358]: Failed password for root from 101.47.48.238 port 33640 ssh2 Dec 27 03:56:19 15540 sshd[19606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root Dec 27 03:56:21 15540 sshd[19606]: Failed password for root from 38.12.31.149 port 41000 ssh2 Dec 27 03:56:32 15540 sshd[19610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root Dec 27 03:56:34 15540 sshd[19610]: Failed password for root from 38.12.31.149 port 42756 ssh2 IP Addresses Blocked: 101.47.48.238 (SG/Singapore/-) show less	Brute-Force SSH
🇰🇷 hanb.jp	2025-12-25 13:18:17 (5 months ago)	Dec 25 13:18:05 v4bgp sshd[4055387]: Failed password for root from 38.12.31.149 port 42956 ssh2 Dec ... show more Dec 25 13:18:05 v4bgp sshd[4055387]: Failed password for root from 38.12.31.149 port 42956 ssh2 Dec 25 13:18:14 v4bgp sshd[4055395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root Dec 25 13:18:16 v4bgp sshd[4055395]: Failed password for root from 38.12.31.149 port 45168 ssh2 ... show less	Brute-Force SSH
🇺🇸 webnestify	2025-12-23 07:05:13 (5 months ago)	[Webnestify Honeypot - UK] Unauthorized connection attempt on port 2222.	Port Scan Hacking Brute-Force
🇺🇸 bigscoots.com	2025-12-23 06:38:06 (5 months ago)	(sshd) Failed SSH login from 38.12.31.149 (US/United States/-): 5 in the last 3600 secs; Ports: ; D ... show more (sshd) Failed SSH login from 38.12.31.149 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Dec 23 00:37:28 18157 sshd[12130]: Did not receive identification string from 38.12.31.149 port 45098 Dec 23 00:37:35 18157 sshd[12131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root Dec 23 00:37:38 18157 sshd[12131]: Failed password for root from 38.12.31.149 port 45376 ssh2 Dec 23 00:37:48 18157 sshd[12133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root Dec 23 00:37:50 18157 sshd[12133]: Failed password for root from 38.12.31.149 port 47138 ssh2 show less	Brute-Force SSH
🇫🇷 Kaas	2025-12-22 05:42:23 (5 months ago)	Automatic ban by Fail2Ban	Brute-Force SSH
🇫🇷 geeek	2025-12-21 10:03:06 (5 months ago)	Port scanning: 2222 TCP Blocked	Port Scan
🇺🇸 mubusys.com	2025-12-21 09:49:04 (5 months ago)	2025-12-21T06:48:53.727324 vmi1618921.contaboserver.net sshd[662810]: pam_unix(sshd:auth): authentic ... show more 2025-12-21T06:48:53.727324 vmi1618921.contaboserver.net sshd[662810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.12.31.149 user=root 2025-12-21T06:48:55.661100 vmi1618921.contaboserver.net sshd[662810]: Failed password for root from 38.12.31.149 port 36566 ssh2 2025-12-21T06:48:57.695469 vmi1618921.contaboserver.net sshd[662810]: Connection closed by authenticating user root 38.12.31.149 port 36566 [preauth] show less	Brute-Force SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.218

🇺🇸 72.223.188.94

🇭🇰 47.238.67.71

🇺🇸 45.33.84.124

🇬🇧 209.42.19.17

🇲🇿 197.249.5.16

🇧🇷 187.19.27.112

🇦🇷 167.250.118.3

🇺🇸 143.42.1.213

🇨🇳 117.30.113.122

🇭🇰 114.111.52.109

🇳🇱 104.248.196.147

🇧🇬 79.124.56.138

🇺🇸 72.206.74.97

🇺🇸 67.207.84.8

🇺🇸 52.20.198.190

🇭🇰 47.243.135.197

🇭🇰 47.238.79.172

🇺🇸 40.119.28.203

🇺🇸 20.65.194.6