This IP address has been reported a total of
39
times from
31 distinct
sources.
54.37.38.113 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-01T22:31:47.191675+12:00 localhost sshd[3041894]: Invalid user user3 from 54.37.38.113 port ...
show more2026-06-01T22:31:47.191675+12:00 localhost sshd[3041894]: Invalid user user3 from 54.37.38.113 port 51450
2026-06-01T22:39:22.651855+12:00 localhost sshd[3048663]: Invalid user test01 from 54.37.38.113 port 59080
2026-06-01T22:47:10.024902+12:00 localhost sshd[3056893]: Invalid user ts3 from 54.37.38.113 port 46548
2026-06-01T22:49:07.611921+12:00 localhost sshd[3058690]: Invalid user ubuntu from 54.37.38.113 port 53544
2026-06-01T22:51:06.957963+12:00 localhost sshd[3060621]: Invalid user chris from 54.37.38.113 port 58298
show less
2026-05-27T18:43:31.147452+03:00 kotia sshd[963964]: Invalid user pun from 54.37.38.113 port 40970
. ...
show more2026-05-27T18:43:31.147452+03:00 kotia sshd[963964]: Invalid user pun from 54.37.38.113 port 40970
...
show less
May 27 15:23:53 host sshd[3669013]: Failed password for root from 54.37.38.113 port 37212 ssh2
May 2 ...
show moreMay 27 15:23:53 host sshd[3669013]: Failed password for root from 54.37.38.113 port 37212 ssh2
May 27 15:25:15 host sshd[3669553]: Invalid user cam from 54.37.38.113 port 38760
May 27 15:25:15 host sshd[3669553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.38.113
May 27 15:25:17 host sshd[3669553]: Failed password for invalid user cam from 54.37.38.113 port 38760 ssh2
May 27 15:26:36 host sshd[3669905]: Invalid user stp from 54.37.38.113 port 42956
...
show less
2026-05-27T15:19:18.548275+00:00 kocer-main-webserver sshd[2088216]: Disconnected from authenticatin ...
show more2026-05-27T15:19:18.548275+00:00 kocer-main-webserver sshd[2088216]: Disconnected from authenticating user root 54.37.38.113 port 59852 [preauth]
2026-05-27T15:24:37.779416+00:00 kocer-main-webserver sshd[2088669]: Disconnected from authenticating user root 54.37.38.113 port 38964 [preauth]
2026-05-27T15:26:01.774864+00:00 kocer-main-webserver sshd[2088771]: Invalid user cam from 54.37.38.113 port 59354
...
show less
2026-05-27T15:07:42.261763+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1230442]: Disconnected from authent ...
show more2026-05-27T15:07:42.261763+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1230442]: Disconnected from authenticating user root 54.37.38.113 port 56304 [preauth]
2026-05-27T15:09:03.014541+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1230772]: Disconnected from authenticating user root 54.37.38.113 port 58452 [preauth]
...
show less
2026-05-27T16:53:02.655273+02:00 router01.dtm.de.mersrv.de sshd[3996783]: Invalid user ec2-user from ...
show more2026-05-27T16:53:02.655273+02:00 router01.dtm.de.mersrv.de sshd[3996783]: Invalid user ec2-user from 54.37.38.113 port 49160
2026-05-27T16:53:02.684695+02:00 router01.dtm.de.mersrv.de sshd[3996783]: Disconnected from invalid user ec2-user 54.37.38.113 port 49160 [preauth]
2026-05-27T16:54:49.612587+02:00 router01.dtm.de.mersrv.de sshd[3997196]: Invalid user oracle from 54.37.38.113 port 39864
2026-05-27T16:54:49.646022+02:00 router01.dtm.de.mersrv.de sshd[3997196]: Disconnected from invalid user oracle 54.37.38.113 port 39864 [preauth]
2026-05-27T16:56:08.762696+02:00 router01.dtm.de.mersrv.de sshd[3997661]: Invalid user pc from 54.37.38.113 port 42124
show less
2026-05-27T14:52:02.466740+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1226681]: Invalid user ec2-user fro ...
show more2026-05-27T14:52:02.466740+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1226681]: Invalid user ec2-user from 54.37.38.113 port 53038
2026-05-27T14:52:02.478550+00:00 ubuntu-s-1vcpu-1gb-lon1-01 sshd[1226681]: Disconnected from invalid user ec2-user 54.37.38.113 port 53038 [preauth]
...
show less
SSH Brute force: 11 attempts were recorded from 54.37.38.113
2026-05-27T14:24:00+02:00 Disconnected ...
show moreSSH Brute force: 11 attempts were recorded from 54.37.38.113
2026-05-27T14:24:00+02:00 Disconnected from authenticating user root 54.37.38.113 port 46540 [preauth]
2026-05-27T14:30:30+02:00 Connection from 54.37.38.113 port 52714 on <redacted> port 22 rdomain ""
2026-05-27T14:30:31+02:00 Invalid user ftp1 from 54.37.38.113 port 52714
2026-05-27T14:30:31+02:00 Disconnected from invalid user ftp1 54.37.38.113 port 52714 [preauth]
2026-05-27T14:32:06+02:00 Disconnected from authenticating user root 54.37.38.113 port 60656 [preauth]
2026-05-27T14:34:00+02:00 Connection from 54.37.38.113 port 43800 on <redacted> port 22 rdomain ""
2026-05-27T14:34:01+02:00 Invalid user nicolas from 54.37.38.113 port 43800
2026-05-27T14:34:01+02:00 Disconnected from invalid user nicolas 54.37.38.113 port 43800 [preauth]
2026-05-27T14:35:55+02:00 Connection from 54.37.38.113 port 44570 on <redacted> port 22 rdo
show less
Brute-Force
SSH
Showing 16 to
30
of 39 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩