This IP address has been reported a total of
46
times from
41 distinct
sources.
54.153.106.101 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 17
reports;
Germany
with 7
reports;
France
with 6
reports.
The most common categories in these recent reports were:
SSH
44
times;
Brute-Force
40
times;
Port Scan
8
times;
Hacking
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 32 port scanning attempts on 01-10-2026. For more information or to repo ...
show moreThis IP address carried out 32 port scanning attempts on 01-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
Repeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeyp ...
show moreRepeated SSH connections that never attempted authentication (pre-auth probing) recorded by a honeypot sensor network.
Threat score: 19/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 0 (0 bad password, 0 invalid user) | 0 success | 16 total SSH log events | seen on 2 sensor(s)
Origin: United States (US) | AS16509 Amazon.com, Inc. | datacenter | 54.153.106.0/24
First seen: 2026-10-01 16:36:42 UTC | Last seen: 2026-10-01 16:41:10 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-10-01T18:38:56.879387+02:00 kira.futunk.net sshd-session[35522]: Connection closed by 54.153.10 ...
show more2026-10-01T18:38:56.879387+02:00 kira.futunk.net sshd-session[35522]: Connection closed by 54.153.106.101 port 60190 [preauth]
2026-10-01T18:38:57.951417+02:00 kira.futunk.net sshd-session[35524]: Connection closed by 54.153.106.101 port 60200 [preauth]
2026-10-01T18:38:58.559164+02:00 kira.futunk.net sshd-session[35526]: Unable to negotiate with 54.153.106.101 port 60214: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-10-01T18:38:59.654170+02:00 kira.futunk.net sshd-session[35528]: Unable to negotiate with 54.153.106.101 port 60230: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-10-01T18:39:01.307342+02:00 kira.futunk.net sshd-session[35530]: Connection closed by 54.153.106.101 port 60232 [preauth]
...
show less
SSH Brute Force (3 attempts). Evidence: sshd-session[638424]: Unable to negotiate with 54.153.106.10 ...
show moreSSH Brute Force (3 attempts). Evidence: sshd-session[638424]: Unable to negotiate with 54.153.106.101 port 54180: no matching host key type found. Their offer: ssh-ed25519,[email protected] [preauth];sshd-session[638426]: Unable to negotiate with 54.153.106.101 port 54190: no matching host key type found. Their offer: ecdsa-sha2-nistp256,[email protected] [preauth]
show less
