Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 38.25.84.20:
This IP address has been reported a total of
100
times from
68 distinct
sources.
38.25.84.20 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 26
reports;
Germany
with 20
reports;
France
with 11
reports.
The most common categories in these recent reports were:
SSH
95
times;
Brute-Force
90
times;
Port Scan
3
times;
Hacking
2
times;
Exploited Host
2
times;
Other
11
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-10T15:46:21.303170+02:00 serengeti2 sshd-session[1958706]: Invalid user ronald from 38.25.84 ...
show more2026-09-10T15:46:21.303170+02:00 serengeti2 sshd-session[1958706]: Invalid user ronald from 38.25.84.20 port 41098
2026-09-10T15:46:21.310322+02:00 serengeti2 sshd-session[1958706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
2026-09-10T15:46:23.531475+02:00 serengeti2 sshd-session[1958706]: Failed password for invalid user ronald from 38.25.84.20 port 41098 ssh2
2026-09-10T15:47:49.573106+02:00 serengeti2 sshd-session[1959043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20 user=root
2026-09-10T15:47:51.754818+02:00 serengeti2 sshd-session[1959043]: Failed password for root from 38.25.84.20 port 34838 ssh2
...
show less
2026-09-10T15:28:21.943406+02:00 serengeti2 sshd-session[1949875]: pam_unix(sshd:auth): authenticati ...
show more2026-09-10T15:28:21.943406+02:00 serengeti2 sshd-session[1949875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20 user=root
2026-09-10T15:28:23.831654+02:00 serengeti2 sshd-session[1949875]: Failed password for root from 38.25.84.20 port 34335 ssh2
2026-09-10T15:30:59.709912+02:00 serengeti2 sshd-session[1951391]: Invalid user test from 38.25.84.20 port 15804
2026-09-10T15:30:59.720556+02:00 serengeti2 sshd-session[1951391]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
2026-09-10T15:31:01.779951+02:00 serengeti2 sshd-session[1951391]: Failed password for invalid user test from 38.25.84.20 port 15804 ssh2
...
show less
2026-09-10T15:01:22.403942+02:00 serengeti2 sshd-session[1935003]: Failed password for root from 38. ...
show more2026-09-10T15:01:22.403942+02:00 serengeti2 sshd-session[1935003]: Failed password for root from 38.25.84.20 port 3405 ssh2
2026-09-10T15:02:36.355460+02:00 serengeti2 sshd-session[1935329]: Invalid user botuser from 38.25.84.20 port 15780
2026-09-10T15:02:36.360804+02:00 serengeti2 sshd-session[1935329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
2026-09-10T15:02:38.220054+02:00 serengeti2 sshd-session[1935329]: Failed password for invalid user botuser from 38.25.84.20 port 15780 ssh2
2026-09-10T15:03:56.264953+02:00 serengeti2 sshd-session[1935917]: Invalid user edit from 38.25.84.20 port 48723
...
show less
2026-09-10T14:42:19.833930+02:00 server9 sshd[36910]: Invalid user b from 38.25.84.20 port 18785
202 ...
show more2026-09-10T14:42:19.833930+02:00 server9 sshd[36910]: Invalid user b from 38.25.84.20 port 18785
2026-09-10T14:47:00.216004+02:00 server9 sshd[37201]: Invalid user system from 38.25.84.20 port 55275
2026-09-10T14:48:20.168494+02:00 server9 sshd[37404]: Invalid user nexus from 38.25.84.20 port 4639
2026-09-10T14:49:32.971053+02:00 server9 sshd[37469]: Invalid user adams from 38.25.84.20 port 18498
2026-09-10T14:50:43.553645+02:00 server9 sshd[38113]: Invalid user backend from 38.25.84.20 port 30901
...
show less
2026-09-10T14:46:13.336039+02:00 serengeti2 sshd-session[1928346]: Failed password for invalid user ...
show more2026-09-10T14:46:13.336039+02:00 serengeti2 sshd-session[1928346]: Failed password for invalid user b from 38.25.84.20 port 47204 ssh2
2026-09-10T14:47:34.639864+02:00 serengeti2 sshd-session[1928674]: Invalid user system from 38.25.84.20 port 61986
2026-09-10T14:47:34.647111+02:00 serengeti2 sshd-session[1928674]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
2026-09-10T14:47:36.875967+02:00 serengeti2 sshd-session[1928674]: Failed password for invalid user system from 38.25.84.20 port 61986 ssh2
2026-09-10T14:48:52.781029+02:00 serengeti2 sshd-session[1929147]: Invalid user nexus from 38.25.84.20 port 52168
...
show less
AetherFox VoidGuard detected: Sep 10 13:56:04 heimdall sshd[440278]: Failed password for root from 3 ...
show moreAetherFox VoidGuard detected: Sep 10 13:56:04 heimdall sshd[440278]: Failed password for root from 38.25.84.20 port 39653 ssh2
Sep 10 13:57:34 heimdall sshd[440318]: Invalid user pzuser from 38.25.84.20 port 51173
Sep 10 13:57:34 heimdall sshd[440318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
Sep 10 13:57:35 heimdall sshd[440318]: Failed password for invalid user pzuser from 38.25.84.20 port 51173 ssh2
Sep 10 13:58:46 heimdall sshd[440339]: Invalid user arjun from 38.25.84.20 port 1582
...
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 12/100 (info) | Phase: reconnaissance (low-volume probing)
Failed auth: 9 (3 bad password, 6 invalid user) | 0 success | 21 total SSH log events | seen on 1 sensor(s)
Origin: Peru (PE) | AS265691 WI-NET TELECOM S.A.C. | 38.25.84.0/24
First seen: 2026-09-10 11:22:26 UTC | Last seen: 2026-09-10 11:32:49 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
Sep 10 12:13:50 box sshd[1860872]: Invalid user markh from 38.25.84.20 port 63074
Sep 10 12:13:50 bo ...
show moreSep 10 12:13:50 box sshd[1860872]: Invalid user markh from 38.25.84.20 port 63074
Sep 10 12:13:50 box sshd[1860872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
Sep 10 12:13:51 box sshd[1860872]: Failed password for invalid user markh from 38.25.84.20 port 63074 ssh2
Sep 10 12:15:06 box sshd[1861566]: Invalid user siteadmin from 38.25.84.20 port 10628
Sep 10 12:15:06 box sshd[1861566]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.25.84.20
Sep 10 12:15:07 box sshd[1861566]: Failed password for invalid user siteadmin from 38.25.84.20 port 10628 ssh2
Sep 10 12:16:16 box sshd[1862562]: Invalid user temp from 38.25.84.20 port 21368
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
2026-09-10T12:10:35.480808+02:00 savine sshd-session[1738866]: Invalid user dmdba from 38.25.84.20 p ...
show more2026-09-10T12:10:35.480808+02:00 savine sshd-session[1738866]: Invalid user dmdba from 38.25.84.20 port 42789
...
show less
2026-09-10T07:42:49.689160+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[2166341]: Invalid user appuser f ...
show more2026-09-10T07:42:49.689160+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[2166341]: Invalid user appuser from 38.25.84.20 port 47829
2026-09-10T07:45:18.581815+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[2166604]: Invalid user dream from 38.25.84.20 port 4682
2026-09-10T07:46:32.954268+00:00 edge-hiv-nyc01.int.pdx.net.uk sshd[2166736]: Invalid user sasha from 38.25.84.20 port 14568
...
show less
