JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 38.85.247.104

38.85.247.104 was found in our database!

This IP was reported 443 times. Confidence of Abuse is 0%: ?

ISP	KURUN CLOUD INC
Usage Type	Fixed Line ISP
ASN	AS174
Domain Name	kurun.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 38.85.247.104

Whois 38.85.247.104

IP Abuse Reports for 38.85.247.104:

This IP address has been reported a total of 443 times from 228 distinct sources. 38.85.247.104 was first reported on October 26th 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 01:08:11 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇳🇴 sh97	2025-11-10 07:07:54 (7 months ago)	185: SSH Brute Force from 38.85.247.104 at 2025-11-10 12:37:53 IST	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-11-04 20:09:44 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-03 20:09:43 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-11-02 20:09:42 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇩🇪 ghostwarriors	2025-11-01 23:20:14 (7 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-10-30 20:09:39 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-10-29 20:09:38 (7 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-10-29 04:30:49 (7 months ago)	This IP address carried out 274 port scanning attempts on 28-10-2025. For more information or to rep ... show more This IP address carried out 274 port scanning attempts on 28-10-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇺🇸 octageeks.com	2025-10-29 04:07:39 (7 months ago)	Wordpress malicious attack:[sshd]	Web App Attack
🇺🇸 bigscoots.com	2025-10-29 03:43:49 (7 months ago)	38.85.247.104 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 se ... show more 38.85.247.104 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Oct 28 22:43:33 14444 sshd[11292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.180.20.109 user=root Oct 28 22:42:08 14444 sshd[11208]: Failed password for root from 36.111.149.52 port 56102 ssh2 Oct 28 22:40:36 14444 sshd[11078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.85.247.104 user=root Oct 28 22:40:38 14444 sshd[11078]: Failed password for root from 38.85.247.104 port 41770 ssh2 Oct 28 22:42:05 14444 sshd[11208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.111.149.52 user=root IP Addresses Blocked: 103.180.20.109 (TW/Taiwan/103-180-20-109.dynamic-ip.pni.tw) 36.111.149.52 (CN/China/-) show less	Brute-Force SSH
🇩🇪 ipcop.net	2025-10-29 03:18:44 (7 months ago)	Malicious activity detected from 38.85.247.104.	Brute-Force
🇩🇪 ipcop.net	2025-10-29 03:18:44 (7 months ago)	Malicious activity detected from 38.85.247.104.	Brute-Force
🇺🇸 bigscoots.com	2025-10-29 03:02:24 (7 months ago)	(sshd) Failed SSH login from 38.85.247.104 (US/United States/-): 5 in the last 3600 secs; Ports: ; ... show more (sshd) Failed SSH login from 38.85.247.104 (US/United States/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Oct 28 21:57:53 16097 sshd[23910]: Invalid user shiva from 38.85.247.104 port 48724 Oct 28 21:57:55 16097 sshd[23910]: Failed password for invalid user shiva from 38.85.247.104 port 48724 ssh2 Oct 28 22:01:04 16097 sshd[24313]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.85.247.104 user=root Oct 28 22:01:06 16097 sshd[24313]: Failed password for root from 38.85.247.104 port 60910 ssh2 Oct 28 22:02:21 16097 sshd[24396]: Invalid user ftpuser from 38.85.247.104 port 58786 show less	Brute-Force SSH
🇳🇱 trivox.sh	2025-10-29 03:02:19 (7 months ago)	Oct 29 03:00:59 TV-DB1-R630-13 sshd[133129]: pam_unix(sshd:auth): authentication failure; logname= u ... show more Oct 29 03:00:59 TV-DB1-R630-13 sshd[133129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.85.247.104 user=root Oct 29 03:01:01 TV-DB1-R630-13 sshd[133129]: Failed password for root from 38.85.247.104 port 49134 ssh2 Oct 29 03:02:16 TV-DB1-R630-13 sshd[133136]: Invalid user ftpuser from 38.85.247.104 port 48550 Oct 29 03:02:16 TV-DB1-R630-13 sshd[133136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.85.247.104 Oct 29 03:02:18 TV-DB1-R630-13 sshd[133136]: Failed password for invalid user ftpuser from 38.85.247.104 port 48550 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 443 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇷 210.222.226.182

🇮🇪 46.137.12.50

🇳🇱 45.148.10.121

🇰🇷 211.249.46.76

🇸🇬 172.188.89.41

🇩🇪 167.94.146.38

🇮🇳 115.246.52.219

🇰🇷 114.111.32.144

🇮🇳 103.158.40.65

🇺🇸 66.132.172.128

🇳🇱 45.148.10.152

🇩🇪 37.120.172.171

🇧🇷 205.210.31.162

🇸🇨 196.251.121.149

🇳🇱 192.178.116.23

🇧🇷 192.141.106.198

🇦🇷 190.221.50.123

🇨🇿 147.229.8.240

🇰🇷 112.184.37.182

🇮🇹 88.147.30.59