AbuseIPDB » 38.54.122.5

38.54.122.5 was found in our database!

This IP was reported 190 times. Confidence of Abuse is 100%: ?

100%

ISP	LightNode FR
Usage Type	Data Center/Web Hosting/Transit
Domain Name	kaopuyun.com
Country	France
City	Marseille, Provence-Alpes-Cote-d'Azur

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 38.54.122.5

Whois 38.54.122.5

IP Abuse Reports for 38.54.122.5:

This IP address has been reported a total of 190 times from 88 distinct sources. 38.54.122.5 was first reported on February 6th 2023, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
ipcop.net	23 Mar 2023	Feb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 4111 ... show moreFeb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 41116 Feb 6 21:09:21 router01.properson.de sshd[3013188]: Disconnected from invalid user gateway 38.54.122.5 port 41116 [preauth] Feb 6 21:11:29 router01.properson.de sshd[3013453]: Disconnected from authenticating user root 38.54.122.5 port 49412 [preauth] Feb 6 21:12:52 router01.properson.de sshd[3013598]: Disconnected from authenticating user root 38.54.122.5 port 52954 [preauth] Feb 6 21:14:16 router01.properson.de sshd[3013925]: Disconnected from authenticating user root 38.54.122.5 port 56500 [preauth] show less	Brute-Force
ipcop.net	23 Mar 2023	Feb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 4111 ... show moreFeb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 41116 Feb 6 21:09:21 router01.properson.de sshd[3013188]: Disconnected from invalid user gateway 38.54.122.5 port 41116 [preauth] Feb 6 21:11:29 router01.properson.de sshd[3013453]: Disconnected from authenticating user root 38.54.122.5 port 49412 [preauth] Feb 6 21:12:52 router01.properson.de sshd[3013598]: Disconnected from authenticating user root 38.54.122.5 port 52954 [preauth] Feb 6 21:14:16 router01.properson.de sshd[3013925]: Disconnected from authenticating user root 38.54.122.5 port 56500 [preauth] show less	Brute-Force
ipcop.net	23 Mar 2023	Feb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 4111 ... show moreFeb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 41116 Feb 6 21:09:21 router01.properson.de sshd[3013188]: Disconnected from invalid user gateway 38.54.122.5 port 41116 [preauth] Feb 6 21:11:29 router01.properson.de sshd[3013453]: Disconnected from authenticating user root 38.54.122.5 port 49412 [preauth] Feb 6 21:12:52 router01.properson.de sshd[3013598]: Disconnected from authenticating user root 38.54.122.5 port 52954 [preauth] Feb 6 21:14:16 router01.properson.de sshd[3013925]: Disconnected from authenticating user root 38.54.122.5 port 56500 [preauth] show less	Brute-Force
ipcop.net	23 Mar 2023	Feb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 4111 ... show moreFeb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 41116 Feb 6 21:09:21 router01.properson.de sshd[3013188]: Disconnected from invalid user gateway 38.54.122.5 port 41116 [preauth] Feb 6 21:11:29 router01.properson.de sshd[3013453]: Disconnected from authenticating user root 38.54.122.5 port 49412 [preauth] Feb 6 21:12:52 router01.properson.de sshd[3013598]: Disconnected from authenticating user root 38.54.122.5 port 52954 [preauth] Feb 6 21:14:16 router01.properson.de sshd[3013925]: Disconnected from authenticating user root 38.54.122.5 port 56500 [preauth] show less	Brute-Force
ipcop.net	23 Mar 2023	Feb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 4111 ... show moreFeb 6 21:09:21 router01.properson.de sshd[3013188]: Invalid user gateway from 38.54.122.5 port 41116 Feb 6 21:09:21 router01.properson.de sshd[3013188]: Disconnected from invalid user gateway 38.54.122.5 port 41116 [preauth] Feb 6 21:11:29 router01.properson.de sshd[3013453]: Disconnected from authenticating user root 38.54.122.5 port 49412 [preauth] Feb 6 21:12:52 router01.properson.de sshd[3013598]: Disconnected from authenticating user root 38.54.122.5 port 52954 [preauth] Feb 6 21:14:16 router01.properson.de sshd[3013925]: Disconnected from authenticating user root 38.54.122.5 port 56500 [preauth] show less	Brute-Force
AdrianT	18 Feb 2023	SSH brute force	Brute-Force SSH
Justin Catello	09 Feb 2023	38.54.122.5 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs ... show more38.54.122.5 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Feb 9 04:03:16 16789 sshd[12023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.83.56.204 user=root Feb 9 04:02:58 16789 sshd[11983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=root Feb 9 04:03:00 16789 sshd[11983]: Failed password for root from 38.54.122.5 port 56750 ssh2 Feb 9 04:01:35 16789 sshd[11934]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=root Feb 9 04:01:36 16789 sshd[11934]: Failed password for root from 38.54.122.5 port 57770 ssh2 IP Addresses Blocked: 140.83.56.204 (JP/Japan/-) show less	Brute-Force SSH
ICT KnTl	09 Feb 2023	Feb 9 10:56:43 secure sshd[55283]: User root from 38.54.122.5 not allowed because not listed in All ... show moreFeb 9 10:56:43 secure sshd[55283]: User root from 38.54.122.5 not allowed because not listed in AllowUsers Feb 9 11:02:03 secure sshd[55306]: User root from 38.54.122.5 not allowed because not listed in AllowUsers Feb 9 11:03:17 secure sshd[55325]: User root from 38.54.122.5 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	09 Feb 2023	2023-02-09T10:01:11.858407vfs-server-01 sshd\[17596\]: Invalid user user from 38.54.122.5 port 46616 ... show more2023-02-09T10:01:11.858407vfs-server-01 sshd\[17596\]: Invalid user user from 38.54.122.5 port 46616 2023-02-09T10:03:55.536536vfs-server-01 sshd\[17784\]: Invalid user system from 38.54.122.5 port 59014 2023-02-09T10:05:17.288315vfs-server-01 sshd\[17875\]: Invalid user git from 38.54.122.5 port 33976 show less	Brute-Force SSH
VHosting	09 Feb 2023	Attempt from 38.54.122.5	Brute-Force SSH
Justin Catello	09 Feb 2023	(sshd) Failed SSH login from 38.54.122.5 (US/United States/-): 5 in the last 3600 secs; Ports: *; Di ... show more(sshd) Failed SSH login from 38.54.122.5 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Feb 9 02:58:05 20309 sshd[16447]: Invalid user user from 38.54.122.5 port 47924 Feb 9 02:58:07 20309 sshd[16447]: Failed password for invalid user user from 38.54.122.5 port 47924 ssh2 Feb 9 03:03:09 20309 sshd[16779]: Invalid user system from 38.54.122.5 port 50010 Feb 9 03:03:11 20309 sshd[16779]: Failed password for invalid user system from 38.54.122.5 port 50010 ssh2 Feb 9 03:04:32 20309 sshd[16843]: Invalid user git from 38.54.122.5 port 53200 show less	Brute-Force SSH
www.blocklist.de	09 Feb 2023	Feb 6 21:10:11 www sshd[30990]: AD user gateway from 38.54.122.5 Feb 6 21:10:11 www sshd[309 ... show moreFeb 6 21:10:11 www sshd[30990]: AD user gateway from 38.54.122.5 Feb 6 21:10:11 www sshd[30990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 Feb 6 21:10:13 www sshd[30990]: Failed password for AD user gateway from 38.54.122.5 port 53812 ssh2 Feb 6 21:11:41 www sshd[31313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=r.r Feb 6 21:11:44 www sshd[31313]: Failed password for r.r from 38.54.122.5 port 57564 ssh2 Feb 6 21:13:04 www sshd[31628]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=r.r Feb 6 21:13:06 www sshd[31628]: Failed password for r.r from 38.54.122.5 port 32874 ssh2 Feb 6 21:14:29 www sshd[32075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=r.r Feb 6 21:14:31 www sshd[32075]: Failed password for r.r from 38.54.122.5........ ------------------------------- show less	FTP Brute-Force Hacking
Pornomens	09 Feb 2023	Feb 9 08:15:10 pornomens sshd[3866379]: Failed password for root from 38.54.122.5 port 36590 ssh2<b ... show moreFeb 9 08:15:10 pornomens sshd[3866379]: Failed password for root from 38.54.122.5 port 36590 ssh2 Feb 9 08:18:31 pornomens sshd[3866407]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=root Feb 9 08:18:33 pornomens sshd[3866407]: Failed password for root from 38.54.122.5 port 54648 ssh2 Feb 9 08:19:54 pornomens sshd[3866443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=root Feb 9 08:19:56 pornomens sshd[3866443]: Failed password for root from 38.54.122.5 port 58072 ssh2 ... show less	Brute-Force SSH
sasbau	09 Feb 2023	Feb 9 08:16:30 * sshd[17452]: Failed password for root from 38.54.122.5 port 37148 ssh2	Brute-Force SSH
Josimar Loch	09 Feb 2023	Feb 9 04:18:10 fisher sshd[30697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show moreFeb 9 04:18:10 fisher sshd[30697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.122.5 user=root Feb 9 04:18:12 fisher sshd[30697]: Failed password for root from 38.54.122.5 port 53518 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩