Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 38.148.20.160:
This IP address has been reported a total of
14
times from
13 distinct
sources.
38.148.20.160 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 4
reports;
France
with 2
reports;
Poland
with 2
reports.
The most common categories in these recent reports were:
SSH
12
times;
Brute-Force
10
times;
Port Scan
2
times;
Hacking
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 2 13:37:46 s1-4-gra7 sshd[1643572]: error: maximum authentication attempts exceeded for root fr ...
show moreSep 2 13:37:46 s1-4-gra7 sshd[1643572]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 36964 ssh2 [preauth]
Sep 2 13:37:55 s1-4-gra7 sshd[1643574]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 37023 ssh2 [preauth]
show less
2026-09-02T01:33:22.495689+03:00 kotia sshd-session[566891]: error: maximum authentication attempts ...
show more2026-09-02T01:33:22.495689+03:00 kotia sshd-session[566891]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 41554 ssh2 [preauth]
...
show less
Sep 2 06:14:14 mx1 sshd[2795791]: error: maximum authentication attempts exceeded for root from 38. ...
show moreSep 2 06:14:14 mx1 sshd[2795791]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 52875 ssh2 [preauth]
Sep 2 06:14:23 mx1 sshd[2795872]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 52941 ssh2 [preauth]
Sep 2 06:14:32 mx1 sshd[2795972]: error: maximum authentication attempts exceeded for root from 38.148.20.160 port 52994 ssh2 [preauth]
...
show less
2026-09-01T23:40:47.875119+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20. ...
show more2026-09-01T23:40:47.875119+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20.160 port 46726 ssh2
2026-09-01T23:40:48.057016+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20.160 port 46726 ssh2
2026-09-01T23:40:48.231681+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20.160 port 46726 ssh2
2026-09-01T23:40:48.404618+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20.160 port 46726 ssh2
2026-09-01T23:40:48.576736+03:00 atom sshd-session[522004]: Failed password for root from 38.148.20.160 port 46726 ssh2
...
show less
SSH
Anonymous
Sep 1 18:13:21 f2b auth.info sshd[1359110]: Failed password for root from 38.148.20.160 port 47318 ...
show moreSep 1 18:13:21 f2b auth.info sshd[1359110]: Failed password for root from 38.148.20.160 port 47318 ssh2
Sep 1 18:13:21 f2b auth.info sshd[1359110]: Failed password for root from 38.148.20.160 port 47318 ssh2
Sep 1 18:13:21 f2b auth.info sshd[1359110]: Failed password for root from 38.148.20.160 port 47318 ssh2
...
show less
2026-09-01T09:46:44.987918-06:00 b146-22 sshd[864072]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-01T09:46:44.987918-06:00 b146-22 sshd[864072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.148.20.160 user=root
2026-09-01T09:46:47.174092-06:00 b146-22 sshd[864072]: Failed password for invalid user root from 38.148.20.160 port 49847 ssh2
2026-09-01T09:46:51.270092-06:00 b146-22 sshd[864072]: Failed password for invalid user root from 38.148.20.160 port 49847 ssh2
...
show less
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
Port Scan
Hacking
Brute-Force
Anonymous
Sep 1 09:40:16 sshd-session[10576]: Received disconnect from 38.148.20.160 port 60884:11: disconne ...
show moreSep 1 09:40:16 sshd-session[10576]: Received disconnect from 38.148.20.160 port 60884:11: disconnected by user [preauth]
Sep 1 09:40:25 sshd-session[10578]: User admin from 38.148.20.160 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 22.
2026-09-01T03:51:26.540354+02:00 dokploy-2 sshd-session[3755444]: Failed password for root from 38.1 ...
show more2026-09-01T03:51:26.540354+02:00 dokploy-2 sshd-session[3755444]: Failed password for root from 38.148.20.160 port 56917 ssh2
2026-09-01T03:51:29.026171+02:00 dokploy-2 sshd-session[3755444]: Failed password for root from 38.148.20.160 port 56917 ssh2
2026-09-01T03:51:31.597469+02:00 dokploy-2 sshd-session[3755444]: Failed password for root from 38.148.20.160 port 56917 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
