This IP address has been reported a total of
468
times from
252 distinct
sources.
38.54.57.130 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-05-25T07:49:48.579088+02:00 hades sshd[743087]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-05-25T07:49:48.579088+02:00 hades sshd[743087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.57.130 user=root
2026-05-25T07:49:50.212693+02:00 hades sshd[743087]: Failed password for root from 38.54.57.130 port 42506 ssh2
2026-05-25T07:56:20.780533+02:00 hades sshd[743885]: Invalid user curl from 38.54.57.130 port 46332
...
show less
SSH
Anonymous
May 25 05:49:28 sftp-cognizant-san-jose-1 sshd[687822]: pam_unix(sshd:auth): authentication failure; ...
show moreMay 25 05:49:28 sftp-cognizant-san-jose-1 sshd[687822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.57.130 user=root
May 25 05:49:30 sftp-cognizant-san-jose-1 sshd[687822]: Failed password for root from 38.54.57.130 port 60364 ssh2
May 25 05:55:59 sftp-cognizant-san-jose-1 sshd[687993]: Invalid user curl from 38.54.57.130 port 52196
...
show less
38.54.57.130 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ...
show more38.54.57.130 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 25 00:26:34 18019 sshd[13486]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.87.201 user=root
May 25 00:26:36 18019 sshd[13486]: Failed password for root from 201.249.87.201 port 53314 ssh2
May 25 00:35:54 18019 sshd[15495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.249.87.201 user=root
May 25 00:42:36 18019 sshd[17031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.57.130 user=root
May 25 00:42:38 18019 sshd[17031]: Failed password for root from 38.54.57.130 port 58352 ssh2
IP Addresses Blocked:
201.249.87.201 (VE/Venezuela/201.249.87-201.bto-00.rai.cantv.net)
show less
This IP address carried out 232 port scanning attempts on 24-05-2026. For more information or to rep ...
show moreThis IP address carried out 232 port scanning attempts on 24-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-05-25T05:33:16.529674+00:00 xenon sshd-session[2134528]: Disconnected from authenticating user ...
show more2026-05-25T05:33:16.529674+00:00 xenon sshd-session[2134528]: Disconnected from authenticating user root 38.54.57.130 port 33822 [preauth]
2026-05-25T05:37:27.352122+00:00 xenon sshd-session[2138358]: Invalid user dss from 38.54.57.130 port 59780
2026-05-25T05:37:27.565331+00:00 xenon sshd-session[2138358]: Disconnected from invalid user dss 38.54.57.130 port 59780 [preauth]
...
show less
May 25 07:20:45 mail010 sshd[673800]: Invalid user cloud from 38.54.57.130 port 54530
May 25 07:28:2 ...
show moreMay 25 07:20:45 mail010 sshd[673800]: Invalid user cloud from 38.54.57.130 port 54530
May 25 07:28:22 mail010 sshd[673918]: Invalid user backupuser from 38.54.57.130 port 32924
...
show less
This IP address carried out 38 SSH credential attack (attempts) on 24-05-2026. For more information ...
show moreThis IP address carried out 38 SSH credential attack (attempts) on 24-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Brute-Force
SSH
Showing 1 to
15
of 468 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩