This IP address has been reported a total of
105
times from
85 distinct
sources.
106.54.43.221 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-03-08T10:46:20.475809+00:00 NYC-MC-2 sshd-session[3139573]: Invalid user admin from 106.54.43.2 ...
show more2026-03-08T10:46:20.475809+00:00 NYC-MC-2 sshd-session[3139573]: Invalid user admin from 106.54.43.221 port 33658
2026-03-08T10:48:07.760393+00:00 NYC-MC-2 sshd-session[3167495]: Invalid user test from 106.54.43.221 port 40306
2026-03-08T10:50:55.696920+00:00 NYC-MC-2 sshd-session[3207405]: Invalid user sftp-user from 106.54.43.221 port 50724
...
show less
2026-03-08T10:52:59.001309+01:00 www sshd-session[489880]: Disconnected from authenticating user roo ...
show more2026-03-08T10:52:59.001309+01:00 www sshd-session[489880]: Disconnected from authenticating user root 106.54.43.221 port 56640 [preauth]
2026-03-08T11:05:19.342380+01:00 www sshd-session[491207]: Invalid user mirror from 106.54.43.221 port 55022
2026-03-08T11:05:19.342626+01:00 www sshd-session[491207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.43.221
2026-03-08T11:05:21.664434+01:00 www sshd-session[491207]: Failed password for invalid user mirror from 106.54.43.221 port 55022 ssh2
2026-03-08T11:05:23.931947+01:00 www sshd-session[491207]: Disconnected from invalid user mirror 106.54.43.221 port 55022 [preauth]
...
show less
2026-03-08T17:56:54.338292+09:00 lw-vm-v1-nrt sshd[4162606]: Invalid user downloader from 106.54.43. ...
show more2026-03-08T17:56:54.338292+09:00 lw-vm-v1-nrt sshd[4162606]: Invalid user downloader from 106.54.43.221 port 47424
2026-03-08T17:56:54.340737+09:00 lw-vm-v1-nrt sshd[4162606]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.43.221
2026-03-08T17:56:55.990531+09:00 lw-vm-v1-nrt sshd[4162606]: Failed password for invalid user downloader from 106.54.43.221 port 47424 ssh2
...
show less
Mar 8 08:30:09 phonebook-lb01.phonebook.srvfarm.net sshd[145174]: Invalid user tst from 106.54.43.2 ...
show moreMar 8 08:30:09 phonebook-lb01.phonebook.srvfarm.net sshd[145174]: Invalid user tst from 106.54.43.221 port 54108
Mar 8 08:30:09 phonebook-lb01.phonebook.srvfarm.net sshd[145174]: Disconnected from invalid user tst 106.54.43.221 port 54108 [preauth]
Mar 8 08:42:28 phonebook-lb01.phonebook.srvfarm.net sshd[147436]: Connection closed by 106.54.43.221 port 33166 [preauth]
Mar 8 08:43:11 phonebook-lb01.phonebook.srvfarm.net sshd[147632]: Connection closed by 106.54.43.221 port 53496 [preauth]
Mar 8 08:44:01 phonebook-lb01.phonebook.srvfarm.net sshd[147747]: Invalid user itadmin from 106.54.43.221 port 44016
show less
Brute-Force
Showing 1 to
15
of 105 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩