This IP address has been reported a total of
77
times from
61 distinct
sources.
54.37.252.60 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 24
reports;
United States of America
with 11
reports;
France
with 8
reports.
The most common categories in these recent reports were:
Brute-Force
72
times;
SSH
68
times;
Hacking
3
times;
Web App Attack
2
times;
Port Scan
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: ken, Pass: [REDACTED]
2026-10-24T04:17:45.843805+02:00 cliff sshd-session[27524]: Disconnected from authenticating user ro ...
show more2026-10-24T04:17:45.843805+02:00 cliff sshd-session[27524]: Disconnected from authenticating user root 54.37.252.60 port 33420 [preauth]
2026-10-24T04:24:49.569384+02:00 cliff sshd-session[36865]: Disconnected from authenticating user root 54.37.252.60 port 40136 [preauth]
2026-10-24T04:27:55.555150+02:00 cliff sshd-session[41254]: Disconnected from authenticating user root 54.37.252.60 port 39206 [preauth]
...
show less
2026-10-24T01:59:10.120713odzbbgcram sshd[58512]: Failed password for root from 54.37.252.60 port 50 ...
show more2026-10-24T01:59:10.120713odzbbgcram sshd[58512]: Failed password for root from 54.37.252.60 port 50334 ssh2
2026-10-24T02:03:09.587287odzbbgcram sshd[58548]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.252.60 user=root
2026-10-24T02:03:11.358209odzbbgcram sshd[58548]: Failed password for root from 54.37.252.60 port 60512 ssh2
...
show less
2026-10-23T19:52:51.955049-06:00 b146-42 sshd[39110]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-23T19:52:51.955049-06:00 b146-42 sshd[39110]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.252.60 user=root
2026-10-23T19:52:54.218689-06:00 b146-42 sshd[39110]: Failed password for invalid user root from 54.37.252.60 port 36876 ssh2
2026-10-23T19:59:03.784367-06:00 b146-42 sshd[39522]: User root from 54.37.252.60 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-10-24T02:27:46.064237maoyue-lax1 sshd[2335194]: Disconnected from authenticating user root 54.3 ...
show more2026-10-24T02:27:46.064237maoyue-lax1 sshd[2335194]: Disconnected from authenticating user root 54.37.252.60 port 48150 [preauth]
2026-10-24T02:33:54.554562maoyue-lax1 sshd[2342164]: Disconnected from authenticating user root 54.37.252.60 port 42836 [preauth]
2026-10-24T02:36:58.303440maoyue-lax1 sshd[2344439]: Disconnected from authenticating user root 54.37.252.60 port 58654 [preauth]
2026-10-24T02:40:07.596634maoyue-lax1 sshd[2344564]: Disconnected from authenticating user root 54.37.252.60 port 36318 [preauth]
show less
2026-10-24T01:32:40.328935+00:00 rc01 sshd-session[417792]: Failed password for root from 54.37.252. ...
show more2026-10-24T01:32:40.328935+00:00 rc01 sshd-session[417792]: Failed password for root from 54.37.252.60 port 45180 ssh2
2026-10-24T01:35:40.515393+00:00 rc01 sshd-session[417900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.252.60 user=root
2026-10-24T01:35:42.383094+00:00 rc01 sshd-session[417900]: Failed password for root from 54.37.252.60 port 60892 ssh2
...
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
UFW BLOCK Report:
Total attempts: 5
Top ports and details:
- Port 22 (5x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 5
Top ports and details:
- Port 22 (5x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 54.37.252.60
| this report is autogenerated by ZIME Cloud
show less
