This IP address has been reported a total of
47
times from
38 distinct
sources.
123.54.216.38 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot detection: port scan / service probe. 2 events observed. Reported automatically from a hone ...
show moreHoneypot detection: port scan / service probe. 2 events observed. Reported automatically from a honeypot sensor.
show less
2026-09-19T03:30:54.993610 ns2.open-bs.ru sshd-session[181987]: Failed password for root from 123.54 ...
show more2026-09-19T03:30:54.993610 ns2.open-bs.ru sshd-session[181987]: Failed password for root from 123.54.216.38 port 56812 ssh2
2026-09-19T03:30:58.351698 ns2.open-bs.ru sshd-session[181990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.54.216.38 user=root
2026-09-19T03:31:00.946374 ns2.open-bs.ru sshd-session[181990]: Failed password for root from 123.54.216.38 port 56828 ssh2
...
show less
2026-09-18T07:35:56.429523+02:00 mail sshd-session[459976]: Failed password for root from 123.54.216 ...
show more2026-09-18T07:35:56.429523+02:00 mail sshd-session[459976]: Failed password for root from 123.54.216.38 port 51832 ssh2
2026-09-18T07:36:02.447546+02:00 mail sshd-session[459980]: Failed password for root from 123.54.216.38 port 52624 ssh2
2026-09-18T07:36:07.955864+02:00 mail sshd-session[459982]: Failed password for root from 123.54.216.38 port 32778 ssh2
2026-09-18T07:36:13.253548+02:00 mail sshd-session[459984]: Failed password for root from 123.54.216.38 port 32792 ssh2
2026-09-18T07:36:47.950467+02:00 mail sshd-session[459987]: Failed password for root from 123.54.216.38 port 34656 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
Automated sensor: 29 SSH brute-force attempts over the last 24h (latest 2026-09-17T08:44Z). Username ...
show moreAutomated sensor: 29 SSH brute-force attempts over the last 24h (latest 2026-09-17T08:44Z). Usernames tried: root.
show less
[Thu Sep 17 06:33:59 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via S ...
show more[Thu Sep 17 06:33:59 AM CEST 2026] [Automated Fail2Ban Report] Unauthorized attempt to connect via SSH
show less
Sep 17 05:57:34 NL04-VM-AMS sshd[3849357]: Failed password for root from 123.54.216.38 port 38932 ss ...
show moreSep 17 05:57:34 NL04-VM-AMS sshd[3849357]: Failed password for root from 123.54.216.38 port 38932 ssh2
Sep 17 05:57:35 NL04-VM-AMS sshd[3849359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.54.216.38 user=root
Sep 17 05:57:37 NL04-VM-AMS sshd[3849359]: Failed password for root from 123.54.216.38 port 38934 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 47 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩