This IP address has been reported a total of
937
times from
149 distinct
sources.
38.96.178.216 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-05-08T03:26:05.317050+02:00 wels sshd[1340178]: Disconnected from authenticating user root 38.9 ...
show more2026-05-08T03:26:05.317050+02:00 wels sshd[1340178]: Disconnected from authenticating user root 38.96.178.216 port 48486 [preauth]
2026-05-08T10:59:10.932442+02:00 wels sshd[1340843]: Disconnected from authenticating user root 38.96.178.216 port 53338 [preauth]
2026-05-08T14:28:39.984354+02:00 wels sshd[1341111]: Disconnected from authenticating user root 38.96.178.216 port 54874 [preauth]
...
show less
2026-05-08T20:09:40.351240+09:00 no2 sshd[781610]: Disconnected from authenticating user root 38.96. ...
show more2026-05-08T20:09:40.351240+09:00 no2 sshd[781610]: Disconnected from authenticating user root 38.96.178.216 port 63250 [preauth]
...
show less
May 8 11:00:45 Ubuntu-2204-jammy-amd64-base sshd[2278044]: User root from 38.96.178.216 not allowed ...
show moreMay 8 11:00:45 Ubuntu-2204-jammy-amd64-base sshd[2278044]: User root from 38.96.178.216 not allowed because not listed in AllowUsers
...
show less
2026-05-08T10:03:24.890106+00:00 thecount sshd[51364]: Disconnected from authenticating user root 38 ...
show more2026-05-08T10:03:24.890106+00:00 thecount sshd[51364]: Disconnected from authenticating user root 38.96.178.216 port 10454 [preauth]
...
show less
May 8 09:58:59 instance1 sshd[1501589]: Disconnected from authenticating user root 38.96.178.216 po ...
show moreMay 8 09:58:59 instance1 sshd[1501589]: Disconnected from authenticating user root 38.96.178.216 port 51590 [preauth]
...
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: root:undefi ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: ac:8d:c6:63:74:c1:c5:f9:16:25:5d:57:93:93:b4:bd
show less
SSH
Anonymous
2026-05-07T17:21:05.047591+01:00 vps sshd[1271932]: User root from 38.96.178.216 not allowed because ...
show more2026-05-07T17:21:05.047591+01:00 vps sshd[1271932]: User root from 38.96.178.216 not allowed because not listed in AllowUsers
2026-05-07T17:21:05.328743+01:00 vps sshd[1271932]: error: maximum authentication attempts exceeded for invalid user root from 38.96.178.216 port 28276 ssh2 [preauth]
2026-05-08T09:31:31.268578+01:00 vps sshd[2546674]: User root from 38.96.178.216 not allowed because not listed in AllowUsers
...
show less