This IP address has been reported a total of
25
times from
24 distinct
sources.
106.53.209.180 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 7
reports;
United States of America
with 7
reports;
Italy
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
19
times;
SSH
18
times;
Port Scan
8
times;
Hacking
2
times;
Exploited Host
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-07T04:27:01.364Z, an unauthorized SSH access attempt was detected from source IP address 106 ...
show more2026-10-07T04:27:01.364Z, an unauthorized SSH access attempt was detected from source IP address 106.53.209.180 by our NetFlow-based intrusion detection.
show less
Attempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsol ...
show moreAttempt on port 22 (SSH) - potential remote access / brute-force attempt. Blocked by firewall (unsolicited inbound, no prior outbound connection).
show less
Oct 6 03:26:09 webhosting01 sshd[1020285]: pam_unix(sshd:auth): authentication failure; logname= ui ...
show moreOct 6 03:26:09 webhosting01 sshd[1020285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.209.180
Oct 6 03:26:09 webhosting01 sshd[1020285]: Invalid user ec2-user from 106.53.209.180 port 43978
Oct 6 03:26:11 webhosting01 sshd[1020285]: Failed password for invalid user ec2-user from 106.53.209.180 port 43978 ssh2
Oct 6 03:26:13 webhosting01 sshd[1020289]: Invalid user ansadmin from 106.53.209.180 port 45116
...
show less
2026-10-05T16:55:20.181192-04:00 wyy-melu-01.evoxt.com sshd[59158]: pam_unix(sshd:auth): authenticat ...
show more2026-10-05T16:55:20.181192-04:00 wyy-melu-01.evoxt.com sshd[59158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.209.180
2026-10-05T16:55:22.607107-04:00 wyy-melu-01.evoxt.com sshd[59158]: Failed password for invalid user ansadmin from 106.53.209.180 port 39562 ssh2
2026-10-05T16:58:17.382405-04:00 wyy-melu-01.evoxt.com sshd[59179]: Invalid user ubnt from 106.53.209.180 port 47960
...
show less
Blocked by nftables on AmneziaWG gateway (Ports: 22)
Port Scan
Brute-Force
Exploited Host
Anonymous
2026-10-05T19:52:22.307712+00:00 lg sshd[1417935]: Invalid user ansadmin from 106.53.209.180 port 52 ...
show more2026-10-05T19:52:22.307712+00:00 lg sshd[1417935]: Invalid user ansadmin from 106.53.209.180 port 52464
2026-10-05T19:52:25.515269+00:00 lg sshd[1417939]: Invalid user ubnt from 106.53.209.180 port 53608
2026-10-05T19:52:27.030875+00:00 lg sshd[1417941]: Invalid user deployer from 106.53.209.180 port 54218
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
2026-10-05T18:44:54+02:00 exit-2 sshd[12245]: Failed password for invalid user test from 106.53.209. ...
show more2026-10-05T18:44:54+02:00 exit-2 sshd[12245]: Failed password for invalid user test from 106.53.209.180 port 55674 ssh2
2026-10-05T18:44:54+02:00 exit-2 sshd[12254]: Invalid user postgres from 106.53.209.180 port 50704
2026-10-05T18:44:54+02:00 exit-2 sshd[12254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.209.180
2026-10-05T18:44:57+02:00 exit-2 sshd[12254]: Failed password for invalid user postgres from 106.53.209.180 port 50704 ssh2
...
show less
