This IP address has been reported a total of
30
times from
28 distinct
sources.
38.148.20.143 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Aug 26 19:09:34 sqltest sshd[436959]: error: maximum authentication attempts exceeded for root from ...
show moreAug 26 19:09:34 sqltest sshd[436959]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 42709 ssh2 [preauth]
Aug 26 19:09:45 sqltest sshd[437339]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 42769 ssh2 [preauth]
Aug 26 19:09:53 sqltest sshd[437779]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 42837 ssh2 [preauth]
...
show less
Blocked by UFW (TCP on 22)
Source port: 35188
TTL: 51
Packet length: 44
TOS: 0x00
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 35188
TTL: 51
Packet length: 44
TOS: 0x00
This report (for 38.148.20.143) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-08-26T09:17:10.359600+00:00 instance-20241105-1148 sshd[1093250]: error: maximum authentication ...
show more2026-08-26T09:17:10.359600+00:00 instance-20241105-1148 sshd[1093250]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 48690 ssh2 [preauth]
2026-08-26T09:17:21.402825+00:00 instance-20241105-1148 sshd[1093252]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 48761 ssh2 [preauth]
2026-08-26T09:17:31.243223+00:00 instance-20241105-1148 sshd[1093254]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 48823 ssh2 [preauth]
2026-08-26T09:17:50.142470+00:00 instance-20241105-1148 sshd[1093258]: Invalid user admin from 38.148.20.143 port 48958
2026-08-26T09:17:51.149787+00:00 instance-20241105-1148 sshd[1093258]: error: maximum authentication attempts exceeded for invalid user admin from 38.148.20.143 port 48958 ssh2 [preauth]
...
show less
2026-08-26T15:46:18.559283+10:00 smtp.geddy.au sshd-session[1856324]: Failed password for root from ...
show more2026-08-26T15:46:18.559283+10:00 smtp.geddy.au sshd-session[1856324]: Failed password for root from 38.148.20.143 port 33901 ssh2
2026-08-26T15:46:20.883878+10:00 smtp.geddy.au sshd-session[1856324]: Failed password for root from 38.148.20.143 port 33901 ssh2
2026-08-26T15:46:22.690271+10:00 smtp.geddy.au sshd-session[1856324]: Failed password for root from 38.148.20.143 port 33901 ssh2
2026-08-26T15:46:24.542898+10:00 smtp.geddy.au sshd-session[1856324]: Failed password for root from 38.148.20.143 port 33901 ssh2
...
show less
Aug 26 03:40:26 racknerd-f329d41 sshd[131629]: Failed password for root from 38.148.20.143 port 4765 ...
show moreAug 26 03:40:26 racknerd-f329d41 sshd[131629]: Failed password for root from 38.148.20.143 port 47650 ssh2
Aug 26 03:40:24 racknerd-f329d41 sshd[131629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.148.20.143 user=root
Aug 26 03:40:26 racknerd-f329d41 sshd[131629]: Failed password for root from 38.148.20.143 port 47650 ssh2
Aug 26 03:40:43 racknerd-f329d41 sshd[131629]: error: maximum authentication attempts exceeded for root from 38.148.20.143 port 47650 ssh2 [preauth]
...
show less
2026-08-25T09:00:56.221398-06:00 b146-71 sshd[405732]: pam_unix(sshd:auth): authentication failure; ...
show more2026-08-25T09:00:56.221398-06:00 b146-71 sshd[405732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.148.20.143 user=root
2026-08-25T09:00:58.316234-06:00 b146-71 sshd[405732]: Failed password for invalid user root from 38.148.20.143 port 34197 ssh2
2026-08-25T09:01:02.465242-06:00 b146-71 sshd[405732]: Failed password for invalid user root from 38.148.20.143 port 34197 ssh2
...
show less
2026-08-25T14:45:13.117Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-08-25T14:45:13.117Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 38.148.20.143.
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less