This IP address has been reported a total of
48
times from
39 distinct
sources.
38.242.232.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 38.242.232.20 (DE/Germany/vmi2797815.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 38.242.232.20 (DE/Germany/vmi2797815.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 4 09:23:19 14016 sshd[1343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.232.20 user=root
Jun 4 09:23:21 14016 sshd[1343]: Failed password for root from 38.242.232.20 port 47018 ssh2
Jun 4 09:26:42 14016 sshd[3098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.232.20 user=root
Jun 4 09:26:44 14016 sshd[3098]: Failed password for root from 38.242.232.20 port 49004 ssh2
Jun 4 09:28:46 14016 sshd[4237]: Invalid user planka from 38.242.232.20 port 59316
show less
Jun 4 08:26:18 brown sshd[292035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreJun 4 08:26:18 brown sshd[292035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.232.20 user=root
Jun 4 08:26:20 brown sshd[292035]: Failed password for root from 38.242.232.20 port 56470 ssh2
Jun 4 08:28:23 brown sshd[292073]: Invalid user planka from 38.242.232.20 port 52024
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-06-04T14:48:10.981026+02:00 Linux11 sshd-session[2960390]: Failed password for invalid user mon ...
show more2026-06-04T14:48:10.981026+02:00 Linux11 sshd-session[2960390]: Failed password for invalid user monica from 38.242.232.20 port 59268 ssh2
2026-06-04T14:50:09.057875+02:00 Linux11 sshd-session[2971621]: Invalid user weber from 38.242.232.20 port 40054
2026-06-04T14:50:09.060473+02:00 Linux11 sshd-session[2971621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.232.20
2026-06-04T14:50:11.337966+02:00 Linux11 sshd-session[2971621]: Failed password for invalid user weber from 38.242.232.20 port 40054 ssh2
2026-06-04T14:52:20.341809+02:00 Linux11 sshd-session[2984021]: Invalid user cnet from 38.242.232.20 port 49088
2026-06-04T14:52:20.344170+02:00 Linux11 sshd-session[2984021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.242.232.20
2026-06-04T14:52:21.755023+02:00 Linux11 sshd-session[2984021]: Failed password for invalid user cnet from 38.242.232.20 port 49088 ssh2
2026-06-04T14:56:24.950510+02
...
show less
(sshd) Failed SSH login from 38.242.232.20 (DE/Germany/vmi2797815.contaboserver.net): 5 in the last ...
show more(sshd) Failed SSH login from 38.242.232.20 (DE/Germany/vmi2797815.contaboserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 4 07:32:54 18113 sshd[30434]: Invalid user bat from 38.242.232.20 port 36200
Jun 4 07:32:56 18113 sshd[30434]: Failed password for invalid user bat from 38.242.232.20 port 36200 ssh2
Jun 4 07:46:16 18113 sshd[4993]: Invalid user monica from 38.242.232.20 port 60690
Jun 4 07:46:18 18113 sshd[4993]: Failed password for invalid user monica from 38.242.232.20 port 60690 ssh2
Jun 4 07:48:17 18113 sshd[6016]: Invalid user weber from 38.242.232.20 port 52604
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T10:22:51Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-04T10:22:51Z and 2026-06-04T11:22:54Z
show less
Brute-Force
SSH
Showing 1 to
15
of 48 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩