This IP address has been reported a total of
39
times from
31 distinct
sources.
54.37.38.113 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 1 14:32:59 plsk sshd[592741]: Failed password for root from 54.37.38.113 port 60372 ssh2
Jun 1 ...
show moreJun 1 14:32:59 plsk sshd[592741]: Failed password for root from 54.37.38.113 port 60372 ssh2
Jun 1 14:34:13 plsk sshd[592856]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.38.113 user=root
Jun 1 14:34:14 plsk sshd[592856]: Failed password for root from 54.37.38.113 port 44292 ssh2
Jun 1 14:35:29 plsk sshd[592938]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.38.113 user=root
Jun 1 14:35:31 plsk sshd[592938]: Failed password for root from 54.37.38.113 port 38066 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T12:24:30Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T12:24:30Z and 2026-06-01T12:29:58Z
show less
2026-06-01T13:50:41.035889+02:00 gw-de20-01.guestgw.net sshd[392091]: Invalid user abdullah from 54. ...
show more2026-06-01T13:50:41.035889+02:00 gw-de20-01.guestgw.net sshd[392091]: Invalid user abdullah from 54.37.38.113 port 60622
2026-06-01T13:50:41.091940+02:00 gw-de20-01.guestgw.net sshd[392091]: Disconnected from invalid user abdullah 54.37.38.113 port 60622 [preauth]
2026-06-01T13:56:58.971605+02:00 gw-de20-01.guestgw.net sshd[393991]: Invalid user victor from 54.37.38.113 port 58058
2026-06-01T13:56:59.019890+02:00 gw-de20-01.guestgw.net sshd[393991]: Disconnected from invalid user victor 54.37.38.113 port 58058 [preauth]
2026-06-01T13:58:45.392773+02:00 gw-de20-01.guestgw.net sshd[394601]: Disconnected from authenticating user root 54.37.38.113 port 60354 [preauth]
show less
Jun 1 13:47:45 NODE-1 sshd[435591]: Invalid user abdullah from 54.37.38.113 port 40664
Jun 1 13:47 ...
show moreJun 1 13:47:45 NODE-1 sshd[435591]: Invalid user abdullah from 54.37.38.113 port 40664
Jun 1 13:47:45 NODE-1 sshd[435591]: Disconnected from invalid user abdullah 54.37.38.113 port 40664 [preauth]
Jun 1 13:56:31 NODE-1 sshd[601601]: Invalid user victor from 54.37.38.113 port 34736
Jun 1 13:56:31 NODE-1 sshd[601601]: Disconnected from invalid user victor 54.37.38.113 port 34736 [preauth]
Jun 1 13:58:16 NODE-1 sshd[634380]: Disconnected from authenticating user root 54.37.38.113 port 38522 [preauth]
...
show less
2026-06-01T11:03:59.163801+00:00 tor.updn.io sshd[916554]: Failed password for root from 54.37.38.11 ...
show more2026-06-01T11:03:59.163801+00:00 tor.updn.io sshd[916554]: Failed password for root from 54.37.38.113 port 51658 ssh2
2026-06-01T11:05:12.478516+00:00 tor.updn.io sshd[916581]: Invalid user fred from 54.37.38.113 port 46042
2026-06-01T11:05:12.481986+00:00 tor.updn.io sshd[916581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.38.113
2026-06-01T11:05:14.224170+00:00 tor.updn.io sshd[916581]: Failed password for invalid user fred from 54.37.38.113 port 46042 ssh2
2026-06-01T11:06:28.445839+00:00 tor.updn.io sshd[916607]: Invalid user master from 54.37.38.113 port 50774
...
show less
Jun 1 13:54:46 server3 sshd[108501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 1 13:54:46 server3 sshd[108501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.38.113 user=root
Jun 1 13:54:48 server3 sshd[108501]: Failed password for invalid user root from 54.37.38.113 port 44044 ssh2
Jun 1 14:04:11 server3 sshd[111187]: User root from 54.37.38.113 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 39 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩