JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.54.40.178

38.54.40.178 was found in our database!

This IP was reported 18 times. Confidence of Abuse is 0%: ?

ISP	LIGHT NODE LIMITED
Usage Type	Data Center/Web Hosting/Transit
ASN	AS154177
Domain Name	lightnode.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.54.40.178

Whois 38.54.40.178

IP Abuse Reports for 38.54.40.178:

This IP address has been reported a total of 18 times from 15 distinct sources. 38.54.40.178 was first reported on November 10th 2022, and the most recent report was 8 months ago.

Old Reports: The most recent abuse report for this IP address is from 8 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇲🇹 UndergroundExplorer	2025-10-24 06:39:00 (8 months ago)	IOC ID: 1586554 IOC: 38.54.40.178:443 IOC Type : ip:port Threat Type : botnet_cc Malware: Coba ... show more IOC ID: 1586554 IOC: 38.54.40.178:443 IOC Type : ip:port Threat Type : botnet_cc Malware: Cobalt Strike Malware alias: Agentemis, BEACON, CobaltStrike, cobeacon Confidence Level : Confidence level is moderate (50%) ASN: AS138915 KAOPU-HK Country: - CN First seen: 2025-09-10 09:42:55 UTC Last seen: 2025-09-11 13:36:37 UTC show less	Port Scan Hacking Web App Attack
🇺🇸 Mendy	2025-10-23 15:07:00 (8 months ago)	uri: /cgi-bin/php uri: /LetsEncrypt/Index	Hacking
🇸🇦 MeduzaCTI	2025-09-08 20:26:01 (9 months ago)	Indicator Report Indicator: 38.54.40.178 Reporter: Abodovic Description: Cobaltstrike Found Tags: C ... show more Indicator Report Indicator: 38.54.40.178 Reporter: Abodovic Description: Cobaltstrike Found Tags: Censys,Cobaltstrike,C2 Source: Meduza CTI Platform Reference: https://meduzacti.com show less	Hacking
🇳🇱 big-cloud.nl	2022-12-29 02:10:45 (3 years ago)	Unauthorized SSH connection attempt	Brute-Force SSH
🇬🇧 aorth	2022-12-28 23:21:19 (3 years ago)	Dec 28 23:20:19 Invalid user PlcmSpIp from 38.54.40.178 port 59656	Brute-Force SSH
🇺🇸 bigscoots.com	2022-12-28 22:50:41 (3 years ago)	38.54.40.178 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 38.54.40.178 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 28 21:50:37 13683 sshd[10440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.134.100.109 user=root Dec 28 21:47:43 13683 sshd[10135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.40.178 user=root Dec 28 21:47:45 13683 sshd[10135]: Failed password for root from 38.54.40.178 port 33206 ssh2 Dec 28 21:48:33 13683 sshd[10228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.166.88 user=root Dec 28 21:48:35 13683 sshd[10228]: Failed password for root from 94.70.166.88 port 35622 ssh2 IP Addresses Blocked: 193.134.100.109 (IR/Iran/-) show less	Brute-Force SSH
🇨🇿 antihack.anarchista.xyz	2022-12-28 22:48:03 (3 years ago)	Dec 29 04:48:03 53pluk sshd[20958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ... show more Dec 29 04:48:03 53pluk sshd[20958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.40.178 user=root ... show less	Brute-Force Web App Attack SSH
🇩🇪 Filli Group	2022-12-28 22:41:50 (3 years ago)	2022-12-29T04:32:12.049268agent03.k3s.crazycraftland.net sshd[3860775]: Invalid user service from 38 ... show more 2022-12-29T04:32:12.049268agent03.k3s.crazycraftland.net sshd[3860775]: Invalid user service from 38.54.40.178 port 35346 2022-12-29T04:38:35.973402agent03.k3s.crazycraftland.net sshd[3873454]: Invalid user panel from 38.54.40.178 port 60594 2022-12-29T04:41:49.799354agent03.k3s.crazycraftland.net sshd[3879842]: Invalid user zimbra from 38.54.40.178 port 59102 ... show less	Brute-Force SSH
🇩🇪 Filli Group	2022-12-28 21:30:25 (3 years ago)	2022-12-29T03:07:51.729393agent03.k3s.crazycraftland.net sshd[3693446]: Invalid user hello from 38.5 ... show more 2022-12-29T03:07:51.729393agent03.k3s.crazycraftland.net sshd[3693446]: Invalid user hello from 38.54.40.178 port 44352 2022-12-29T03:27:05.040119agent03.k3s.crazycraftland.net sshd[3731967]: Invalid user cloudera from 38.54.40.178 port 36902 2022-12-29T03:30:24.778191agent03.k3s.crazycraftland.net sshd[3738323]: Invalid user dog from 38.54.40.178 port 35414 ... show less	Brute-Force SSH
🇺🇸 amit177	2022-12-28 21:09:32 (3 years ago)		Brute-Force SSH
🇺🇸 bigscoots.com	2022-12-28 21:06:42 (3 years ago)	38.54.40.178 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ... show more 38.54.40.178 (KR/South Korea/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 28 20:05:00 15583 sshd[1776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.150.20.20 user=root Dec 28 20:05:02 15583 sshd[1776]: Failed password for root from 34.150.20.20 port 49468 ssh2 Dec 28 20:05:07 15583 sshd[1832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.78.53.233 user=root Dec 28 20:05:08 15583 sshd[1832]: Failed password for root from 5.78.53.233 port 43794 ssh2 Dec 28 20:06:31 15583 sshd[1912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.40.178 user=root IP Addresses Blocked: 34.150.20.20 (HK/Hong Kong/20.20.150.34.bc.googleusercontent.com) 5.78.53.233 (DE/Germany/static.233.53.78.5.clients.your-server.de) show less	Brute-Force SSH
🇨🇿 lp	2022-12-28 19:41:22 (3 years ago)	SSH Brute force: 11 attempts were recorded from 38.54.40.178 2022-12-29T01:21:03+01:00 Invalid user ... show more SSH Brute force: 11 attempts were recorded from 38.54.40.178 2022-12-29T01:21:03+01:00 Invalid user 1 from 38.54.40.178 port 47476 2022-12-29T01:21:03+01:00 Disconnected from invalid user 1 38.54.40.178 port 47476 [preauth] 2022-12-29T01:28:13+01:00 Invalid user valerie from 38.54.40.178 port 47620 2022-12-29T01:28:16+01:00 Disconnected from invalid user valerie 38.54.40.178 port 47620 [preauth] 2022-12-29T01:31:35+01:00 Invalid user u from 38.54.40.178 port 41712 2022-12-29T01:31:35+01:00 Disconnected from invalid user u 38.54.40.178 port 41712 [preauth] 2022-12-29T01:34:57+01:00 Disconnected from 38.54.40.178 port 35804 [preauth] 2022-12-29T01:37:59+01:00 Invalid user ghost from 38.54.40.178 port 58132 2022-12-29T01:38:01+01:00 Disconnected from invalid user ghost 38.54.40.178 port 58132 [preauth] 2022-12-29T01:41:05+01:00 Invalid user ntps from 38.54.40.178 port 52224 2022-12-29T01:41 show less	Brute-Force SSH
🇭🇰 xTom	2022-12-28 19:34:54 (3 years ago)	Dec 29 00:21:10 server sshd[1438043]: Invalid user 1 from 38.54.40.178 port 45134 Dec 29 00:31:37 se ... show more Dec 29 00:21:10 server sshd[1438043]: Invalid user 1 from 38.54.40.178 port 45134 Dec 29 00:31:37 server sshd[1438110]: Invalid user u from 38.54.40.178 port 38548 Dec 29 00:34:54 server sshd[1438139]: Invalid user echo from 38.54.40.178 port 60872 ... show less	Brute-Force SSH
🇧🇷 atiweb	2022-12-28 19:26:45 (3 years ago)	Dec 28 21:26:40 vps46666688 sshd[22224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more Dec 28 21:26:40 vps46666688 sshd[22224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.40.178 Dec 28 21:26:41 vps46666688 sshd[22224]: Failed password for invalid user 1 from 38.54.40.178 port 59578 ssh2 ... show less	Brute-Force SSH
🇺🇸 tradenet	2022-12-28 18:26:17 (3 years ago)	2022-12-28T17:17:25.712570server2.ebullit.com sshd[38777]: Failed password for invalid user PlcmSpIp ... show more 2022-12-28T17:17:25.712570server2.ebullit.com sshd[38777]: Failed password for invalid user PlcmSpIp from 38.54.40.178 port 45210 ssh2 2022-12-28T17:21:12.303603server2.ebullit.com sshd[1339]: Invalid user david from 38.54.40.178 port 50580 2022-12-28T17:21:12.307972server2.ebullit.com sshd[1339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.40.178 2022-12-28T17:21:14.234591server2.ebullit.com sshd[1339]: Failed password for invalid user david from 38.54.40.178 port 50580 ssh2 2022-12-28T17:26:17.334948server2.ebullit.com sshd[5600]: Invalid user raza from 38.54.40.178 port 56516 ... show less	Brute-Force SSH

Showing 1 to 15 of 18 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 205.210.31.234

🇨🇳 182.244.5.153

🇨🇳 175.6.36.228

🇺🇸 147.185.132.238

🇨🇳 110.166.87.119

🇨🇳 106.75.174.120

🇩🇪 91.92.240.157

🇧🇷 45.164.251.106

🇺🇸 20.84.152.142

🇺🇸 195.184.76.179

🇲🇽 189.195.222.122

🇹🇼 140.130.98.240

🇹🇭 117.121.212.189

🇿🇦 102.213.6.54

🇨🇭 45.143.200.246

🇧🇪 35.210.61.208

🇬🇧 5.252.83.210

🇳🇱 5.187.35.26

🇸🇬 2400:8901::2000:4bff:feda:623d

🇹🇼 198.235.24.36