This IP address has been reported a total of
45
times from
42 distinct
sources.
54.177.2.21 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 18 10:36:48 phonebook-lb01.phonebook.srvfarm.net sshd[2264192]: Connection closed by 54.177.2.21 ...
show moreJul 18 10:36:48 phonebook-lb01.phonebook.srvfarm.net sshd[2264192]: Connection closed by 54.177.2.21 port 40078 [preauth]
Jul 18 10:36:50 phonebook-lb01.phonebook.srvfarm.net sshd[2264200]: Connection closed by 54.177.2.21 port 58380 [preauth]
Jul 18 10:36:50 phonebook-lb01.phonebook.srvfarm.net sshd[2264206]: Unable to negotiate with 54.177.2.21 port 58384: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
Jul 18 10:36:51 phonebook-lb01.phonebook.srvfarm.net sshd[2264214]: Unable to negotiate with 54.177.2.21 port 58386: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
Jul 18 10:36:52 phonebook-lb01.phonebook.srvfarm.net sshd[2264216]: Connection closed by 54.177.2.21 port 58402 [preauth]
show less
2026-07-18T20:30:41.038480+12:00 dara sshd-session[44285]: Unable to negotiate with 54.177.2.21 port ...
show more2026-07-18T20:30:41.038480+12:00 dara sshd-session[44285]: Unable to negotiate with 54.177.2.21 port 57398: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-07-18T20:30:41.307618+12:00 dara sshd-session[44287]: Connection from 54.177.2.21 port 57406 on 135.181.182.173 port 22 rdomain ""
2026-07-18T20:30:41.688881+12:00 dara sshd-session[44287]: Unable to negotiate with 54.177.2.21 port 57406: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-07-18T20:30:41.957984+12:00 dara sshd-session[44289]: Connection from 54.177.2.21 port 57422 on 135.181.182.173 port 22 rdomain ""
2026-07-18T20:30:43.574368+12:00 dara sshd-session[44289]: Connection closed by 54.177.2.21 port 57422 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-07-18T03:59:24.505113-04:00 sshd-session: Connection closed by 54.177.2.21 port 50148 [preauth] ...
show more2026-07-18T03:59:24.505113-04:00 sshd-session: Connection closed by 54.177.2.21 port 50148 [preauth]
2026-07-18T03:59:25.321369-04:00 sshd-session: Connection closed by 54.177.2.21 port 50160 [preauth]
show less
2026-07-18T09:28:36.651085+02:00 eclipse sshd-session[1637979]: Connection closed by 54.177.2.21 por ...
show more2026-07-18T09:28:36.651085+02:00 eclipse sshd-session[1637979]: Connection closed by 54.177.2.21 port 59460 [preauth]
2026-07-18T09:28:37.655365+02:00 eclipse sshd-session[1637981]: Connection closed by 54.177.2.21 port 59462 [preauth]
2026-07-18T09:28:38.136714+02:00 eclipse sshd-session[1637983]: Unable to negotiate with 54.177.2.21 port 59474: no matching host key type found. Their offer: ecdsa-sha2-nistp384,[email protected] [preauth]
2026-07-18T09:28:38.969891+02:00 eclipse sshd-session[1637986]: Unable to negotiate with 54.177.2.21 port 34870: no matching host key type found. Their offer: ecdsa-sha2-nistp521,[email protected] [preauth]
2026-07-18T09:28:40.906328+02:00 eclipse sshd-session[1637999]: Connection closed by 54.177.2.21 port 34886 [preauth]
...
show less
Fail2Ban host=kvm518290 jail=sshd failures=5. Login abuse observed. sample=2026-07-18T09:24:11.09230 ...
show moreFail2Ban host=kvm518290 jail=sshd failures=5. Login abuse observed. sample=2026-07-18T09:24:11.092300+02:00 kvm518290 sshd-session[1563062]: Connection from 54.177.2.21 port 35374 on 78.108.216.80 port 22 rdomain "" 2026-07-18T09:24:12.141676+02:00 kvm518290 sshd-session[1563062]: Connection closed by 54.177.2.21 port 35374 [preauth] 2026-07-18T09:24:12.343465+02:00 kvm518290 sshd-session[1563077]: Connection from 54.177.2.21 port 35388 on 78.108.216.80 port 22 rdomain "" 2026-07-18T09:24:13.126610+02:00 kvm518290 sshd-session[1563077]: Connection closed by 54.177.2.21
show less
Brute-Force
SSH
Showing 1 to
15
of 45 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ