This IP address has been reported a total of
83
times from
55 distinct
sources.
5.253.38.54 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-17T10:11:49.862466+02:00 gaia sshd[1743419]: Failed password for invalid user jp from 5.253. ...
show more2026-07-17T10:11:49.862466+02:00 gaia sshd[1743419]: Failed password for invalid user jp from 5.253.38.54 port 36542 ssh2
2026-07-17T10:15:02.769306+02:00 gaia sshd[1744749]: Connection from 5.253.38.54 port 54252 on 23.88.28.109 port 22 rdomain ""
2026-07-17T10:15:03.633152+02:00 gaia sshd[1744749]: User root from 5.253.38.54 not allowed because not listed in AllowUsers
...
show less
Jul 17 08:11:41 v4bgp sshd[2180824]: Failed password for invalid user jp from 5.253.38.54 port 55146 ...
show moreJul 17 08:11:41 v4bgp sshd[2180824]: Failed password for invalid user jp from 5.253.38.54 port 55146 ssh2
Jul 17 08:15:00 v4bgp sshd[2180923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54 user=root
Jul 17 08:15:02 v4bgp sshd[2180923]: Failed password for root from 5.253.38.54 port 34194 ssh2
...
show less
2026-07-17T10:08:16.640862+02:00 ubuntu-iqw sshd[2287345]: Invalid user jp from 5.253.38.54 port 472 ...
show more2026-07-17T10:08:16.640862+02:00 ubuntu-iqw sshd[2287345]: Invalid user jp from 5.253.38.54 port 47266
2026-07-17T10:08:16.801469+02:00 ubuntu-iqw sshd[2287345]: Disconnected from invalid user jp 5.253.38.54 port 47266 [preauth]
2026-07-17T10:13:42.169675+02:00 ubuntu-iqw sshd[2296177]: Disconnected from authenticating user root 5.253.38.54 port 51978 [preauth]
...
show less
Jul 17 02:10:39 web sshd[8792]: Invalid user jp from 5.253.38.54 port 58422
Jul 17 02:10:39 web sshd ...
show moreJul 17 02:10:39 web sshd[8792]: Invalid user jp from 5.253.38.54 port 58422
Jul 17 02:10:39 web sshd[8792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 02:10:41 web sshd[8792]: Failed password for invalid user jp from 5.253.38.54 port 58422 ssh2
...
show less
Jul 17 09:23:44 box sshd[3205640]: Failed password for invalid user minecraft from 5.253.38.54 port ...
show moreJul 17 09:23:44 box sshd[3205640]: Failed password for invalid user minecraft from 5.253.38.54 port 41982 ssh2
Jul 17 09:26:09 box sshd[3207871]: Invalid user jay from 5.253.38.54 port 55238
Jul 17 09:26:09 box sshd[3207871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 09:26:11 box sshd[3207871]: Failed password for invalid user jay from 5.253.38.54 port 55238 ssh2
Jul 17 09:28:25 box sshd[3209153]: Invalid user ftpuser from 5.253.38.54 port 38392
Jul 17 09:28:25 box sshd[3209153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 09:28:27 box sshd[3209153]: Failed password for invalid user ftpuser from 5.253.38.54 port 38392 ssh2
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
Jul 17 08:15:08 box sshd[3160665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreJul 17 08:15:08 box sshd[3160665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 08:15:10 box sshd[3160665]: Failed password for invalid user library from 5.253.38.54 port 32964 ssh2
Jul 17 08:17:28 box sshd[3161982]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54 user=root
Jul 17 08:17:31 box sshd[3161982]: Failed password for root from 5.253.38.54 port 36186 ssh2
Jul 17 08:19:41 box sshd[3163108]: Invalid user nurul from 5.253.38.54 port 49586
Jul 17 08:19:41 box sshd[3163108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 08:19:43 box sshd[3163108]: Failed password for invalid user nurul from 5.253.38.54 port 49586 ssh2
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
Anonymous
2026-07-17T01:13:41.084914 DDMZLXSFV01 sshd[481882]: Invalid user demo from 5.253.38.54 port 37888
2 ...
show more2026-07-17T01:13:41.084914 DDMZLXSFV01 sshd[481882]: Invalid user demo from 5.253.38.54 port 37888
2026-07-17T01:13:41.096534 DDMZLXSFV01 sshd[481882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
2026-07-17T01:13:42.861805 DDMZLXSFV01 sshd[481882]: Failed password for invalid user demo from 5.253.38.54 port 37888 ssh2
...
show less
Jul 17 00:11:37 b146-46 sshd[460722]: Invalid user demo from 5.253.38.54 port 41372
Jul 17 00:11:37 ...
show moreJul 17 00:11:37 b146-46 sshd[460722]: Invalid user demo from 5.253.38.54 port 41372
Jul 17 00:11:37 b146-46 sshd[460722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
Jul 17 00:11:39 b146-46 sshd[460722]: Failed password for invalid user demo from 5.253.38.54 port 41372 ssh2
...
show less
2026-07-17T03:11:31.287778-03:00 racknerd-e206e60 sshd[48894]: Invalid user demo from 5.253.38.54 po ...
show more2026-07-17T03:11:31.287778-03:00 racknerd-e206e60 sshd[48894]: Invalid user demo from 5.253.38.54 port 39700
2026-07-17T03:11:31.297673-03:00 racknerd-e206e60 sshd[48894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
2026-07-17T03:11:32.881691-03:00 racknerd-e206e60 sshd[48894]: Failed password for invalid user demo from 5.253.38.54 port 39700 ssh2
...
show less
2026-07-17T06:07:26.916068+00:00 thelemmy.club sshd-session[2080580]: Received disconnect from 5.253 ...
show more2026-07-17T06:07:26.916068+00:00 thelemmy.club sshd-session[2080580]: Received disconnect from 5.253.38.54 port 42308:11: Bye Bye [preauth]
2026-07-17T06:07:26.916099+00:00 thelemmy.club sshd-session[2080580]: Disconnected from invalid user root 5.253.38.54 port 42308 [preauth]
...
show less
2026-07-17T08:21:36.854162+03:00 fastdl sshd[2230212]: Invalid user hdoop from 5.253.38.54 port 3495 ...
show more2026-07-17T08:21:36.854162+03:00 fastdl sshd[2230212]: Invalid user hdoop from 5.253.38.54 port 34954
2026-07-17T08:21:36.860876+03:00 fastdl sshd[2230212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
2026-07-17T08:21:38.616388+03:00 fastdl sshd[2230212]: Failed password for invalid user hdoop from 5.253.38.54 port 34954 ssh2
2026-07-17T08:24:02.249123+03:00 fastdl sshd[2230434]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54 user=root
2026-07-17T08:24:04.717299+03:00 fastdl sshd[2230434]: Failed password for root from 5.253.38.54 port 34244 ssh2
...
show less
2026-07-17T07:15:22.383311+03:00 fastdl sshd[2223430]: pam_unix(sshd:auth): authentication failure; ...
show more2026-07-17T07:15:22.383311+03:00 fastdl sshd[2223430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
2026-07-17T07:15:24.581924+03:00 fastdl sshd[2223430]: Failed password for invalid user nav from 5.253.38.54 port 52898 ssh2
2026-07-17T07:17:41.755648+03:00 fastdl sshd[2223654]: Invalid user wan from 5.253.38.54 port 57450
2026-07-17T07:17:41.762077+03:00 fastdl sshd[2223654]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.253.38.54
2026-07-17T07:17:44.044273+03:00 fastdl sshd[2223654]: Failed password for invalid user wan from 5.253.38.54 port 57450 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 83 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩