JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 209.54.107.103

209.54.107.103 was found in our database!

This IP was reported 327 times. Confidence of Abuse is 7%: ?

ISP	HostPapa
Usage Type	Data Center/Web Hosting/Transit
ASN	AS36352
Hostname(s)	209-54-107-103-host.colocrossing.com
Domain Name	hostpapa.com
Country	🇺🇸 United States of America
City	Los Angeles, California

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 209.54.107.103

Whois 209.54.107.103

IP Abuse Reports for 209.54.107.103:

This IP address has been reported a total of 327 times from 194 distinct sources. 209.54.107.103 was first reported on September 3rd 2025, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇨🇦 QSC-Sentinel	2026-05-20 22:00:19 (1 month ago)	Banned by fail2ban jail sshd on etlab-research	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-05-05 23:08:06 (1 month ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx02]	Brute-Force SSH
🇩🇪 qli.de	2025-10-04 10:23:07 (8 months ago)	Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40: ... show more Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40:21 email sshd[292923]: Invalid user geou2 from 209.54.107.103 port 42044 Sep 4 11:44:26 email sshd[293408]: Invalid user testguest from 209.54.107.103 port 57072 ... show less	Brute-Force SSH
🇩🇪 sf-noh.de	2025-10-04 10:23:07 (8 months ago)	Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40: ... show more Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40:21 email sshd[292923]: Invalid user geou2 from 209.54.107.103 port 42044 Sep 4 11:44:26 email sshd[293408]: Invalid user testguest from 209.54.107.103 port 57072 ... show less	Brute-Force SSH
🇩🇪 qli.de	2025-09-11 06:06:23 (9 months ago)	Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40: ... show more Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40:21 email sshd[292923]: Invalid user geou2 from 209.54.107.103 port 42044 Sep 4 11:44:26 email sshd[293408]: Invalid user testguest from 209.54.107.103 port 57072 ... show less	Brute-Force SSH
🇩🇪 sf-noh.de	2025-09-11 06:06:23 (9 months ago)	Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40: ... show more Sep 4 11:39:18 email sshd[292818]: Invalid user wangxx from 209.54.107.103 port 59544 Sep 4 11:40:21 email sshd[292923]: Invalid user geou2 from 209.54.107.103 port 42044 Sep 4 11:44:26 email sshd[293408]: Invalid user testguest from 209.54.107.103 port 57072 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-07 20:08:40 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-06 20:08:39 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇮🇳 Parth Maniar	2025-09-06 04:33:02 (9 months ago)	This IP address carried out 126 SSH credential attack (attempts) on 05-09-2025. For more information ... show more This IP address carried out 126 SSH credential attack (attempts) on 05-09-2025. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-05 20:08:38 (9 months ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇺🇸 whitehat AbuseIPDB Official	2025-09-05 07:37:23 (9 months ago)	2025-09-05T07:36:20.430460shield sshd\[18171\]: Invalid user xieyu from 209.54.107.103 port 35366 20 ... show more 2025-09-05T07:36:20.430460shield sshd\[18171\]: Invalid user xieyu from 209.54.107.103 port 35366 2025-09-05T07:36:20.438233shield sshd\[18171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 2025-09-05T07:36:22.200109shield sshd\[18171\]: Failed password for invalid user xieyu from 209.54.107.103 port 35366 ssh2 2025-09-05T07:37:22.259587shield sshd\[18221\]: Invalid user wen from 209.54.107.103 port 56628 2025-09-05T07:37:22.268330shield sshd\[18221\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 show less	Brute-Force SSH
🇺🇸 whitehat AbuseIPDB Official	2025-09-05 07:25:51 (9 months ago)	2025-09-05T07:24:43.587094shield sshd\[16797\]: pam_unix\(sshd:auth\): authentication failure\; logn ... show more 2025-09-05T07:24:43.587094shield sshd\[16797\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 user=root 2025-09-05T07:24:45.994367shield sshd\[16797\]: Failed password for root from 209.54.107.103 port 60310 ssh2 2025-09-05T07:25:48.185308shield sshd\[16857\]: Invalid user kafka from 209.54.107.103 port 59358 2025-09-05T07:25:48.191250shield sshd\[16857\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 2025-09-05T07:25:50.524155shield sshd\[16857\]: Failed password for invalid user kafka from 209.54.107.103 port 59358 ssh2 show less	Brute-Force SSH
🇫🇮 linuxgemini	2025-09-05 07:17:05 (9 months ago)	fail2banned (ssh brute)	Brute-Force SSH
🇺🇸 whitehat AbuseIPDB Official	2025-09-05 07:14:18 (9 months ago)	2025-09-05T07:09:20.549745shield sshd\[15163\]: pam_unix\(sshd:auth\): authentication failure\; logn ... show more 2025-09-05T07:09:20.549745shield sshd\[15163\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 user=root 2025-09-05T07:09:22.246346shield sshd\[15163\]: Failed password for root from 209.54.107.103 port 59596 ssh2 2025-09-05T07:13:08.204398shield sshd\[15504\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 user=root 2025-09-05T07:13:10.201501shield sshd\[15504\]: Failed password for root from 209.54.107.103 port 42600 ssh2 2025-09-05T07:14:17.529497shield sshd\[15599\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-09-05 07:09:55 (9 months ago)	209.54.107.103 (US/United States/209-54-107-103-host.colocrossing.com), 5 distributed sshd attacks o ... show more 209.54.107.103 (US/United States/209-54-107-103-host.colocrossing.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Sep 5 07:09:50 24015 sshd[30946]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.54.107.103 user=root Sep 5 06:47:57 24015 sshd[25879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.199.41 user=root Sep 5 06:48:00 24015 sshd[25879]: Failed password for root from 117.50.199.41 port 42890 ssh2 Sep 5 06:47:33 24015 sshd[25815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.81.85.49 user=root Sep 5 06:47:36 24015 sshd[25815]: Failed password for root from 103.81.85.49 port 60202 ssh2 IP Addresses Blocked: show less	Brute-Force SSH

Showing 1 to 15 of 327 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.26.224.132

🇸🇪 185.246.130.20

🇮🇳 168.144.81.184

🇫🇮 147.185.133.168

🇪🇬 105.196.114.58

🇺🇸 103.143.10.140

🇺🇸 91.209.228.51

🇫🇮 65.108.94.141

🇫🇮 65.21.54.154

🇺🇸 45.3.38.27

🇬🇧 35.203.210.224

🇺🇸 155.2.215.83

🇧🇷 138.122.155.161

🇬🇧 118.193.64.186

🇨🇳 116.179.37.122

🇩🇪 65.111.31.4

🇩🇪 51.38.110.163

🇺🇸 45.56.111.60

🇺🇸 216.152.243.134

🇳🇱 204.76.203.36