This IP address has been reported a total of
109
times from
76 distinct
sources.
38.54.61.136 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 245 port scanning attempts on 26-07-2026. For more information or to rep ...
show moreThis IP address carried out 245 port scanning attempts on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 51 SSH credential attack (attempts) on 26-07-2026. For more information ...
show moreThis IP address carried out 51 SSH credential attack (attempts) on 26-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-07-26T07:31:28.430254+00:00 ubuntu sshd[3278710]: Invalid user are from 38.54.61.136 port 39356 ...
show more2026-07-26T07:31:28.430254+00:00 ubuntu sshd[3278710]: Invalid user are from 38.54.61.136 port 39356
2026-07-26T07:31:28.456923+00:00 ubuntu sshd[3278710]: Failed password for invalid user are from 38.54.61.136 port 39356 ssh2
2026-07-26T07:35:01.049120+00:00 ubuntu sshd[3280055]: Invalid user wgy from 38.54.61.136 port 58376
2026-07-26T07:35:01.074377+00:00 ubuntu sshd[3280055]: Failed password for invalid user wgy from 38.54.61.136 port 58376 ssh2
2026-07-26T07:37:33.688300+00:00 ubuntu sshd[3281026]: Invalid user student from 38.54.61.136 port 36696
...
show less
Jul 26 01:29:08 b146-60 sshd[202998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 26 01:29:08 b146-60 sshd[202998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.54.61.136
Jul 26 01:29:10 b146-60 sshd[202998]: Failed password for invalid user are from 38.54.61.136 port 56294 ssh2
Jul 26 01:34:11 b146-60 sshd[203135]: Invalid user wgy from 38.54.61.136 port 52160
...
show less
(sshd) Failed SSH login from 38.54.61.136 (SA/Saudi Arabia/-)
Brute-Force
SSH
Anonymous
2026-07-26T02:39:50.382146-04:00 seraldrockwest sshd[373880]: Invalid user user22 from 38.54.61.136 ...
show more2026-07-26T02:39:50.382146-04:00 seraldrockwest sshd[373880]: Invalid user user22 from 38.54.61.136 port 43854
2026-07-26T02:42:18.892777-04:00 seraldrockwest sshd[374002]: Invalid user user10 from 38.54.61.136 port 39078
2026-07-26T02:49:37.630024-04:00 seraldrockwest sshd[374307]: Invalid user zyc from 38.54.61.136 port 46002
...
show less
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-07-26T01:30:14.594502-04:00 seraldrockwest sshd[371322]: Invalid user chao from 38.54.61.136 po ...
show more2026-07-26T01:30:14.594502-04:00 seraldrockwest sshd[371322]: Invalid user chao from 38.54.61.136 port 57876
2026-07-26T01:32:46.094404-04:00 seraldrockwest sshd[371423]: Invalid user inspector from 38.54.61.136 port 58826
2026-07-26T01:37:34.136968-04:00 seraldrockwest sshd[371649]: Invalid user mosquitto from 38.54.61.136 port 49134
...
show less
2026-07-26T07:20:49.717482+02:00 gw-de38-01.guestgw.net sshd[173568]: Disconnected from authenticati ...
show more2026-07-26T07:20:49.717482+02:00 gw-de38-01.guestgw.net sshd[173568]: Disconnected from authenticating user root 38.54.61.136 port 54136 [preauth]
2026-07-26T07:24:17.450827+02:00 gw-de38-01.guestgw.net sshd[174645]: Disconnected from authenticating user root 38.54.61.136 port 33436 [preauth]
2026-07-26T07:26:49.502328+02:00 gw-de38-01.guestgw.net sshd[175361]: Disconnected from authenticating user root 38.54.61.136 port 38234 [preauth]
2026-07-26T07:29:25.436408+02:00 gw-de38-01.guestgw.net sshd[176193]: Disconnected from authenticating user root 38.54.61.136 port 41538 [preauth]
2026-07-26T07:31:56.995106+02:00 gw-de38-01.guestgw.net sshd[176919]: Invalid user chao from 38.54.61.136 port 38928
show less