This IP address has been reported a total of
3,297
times from
1,026 distinct
sources.
54.38.157.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Fail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines in ...
show moreFail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines included.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Fail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines in ...
show moreFail2Ban SSH brute-force ban on MainVps.aurorix.net. jail=sshd; source=fail2ban; no raw log lines included.
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
May 28 19:54:57 bigpie sshd[1691540]: Invalid user miguel from 54.38.157.20 port 37372
May 28 19:57: ...
show moreMay 28 19:54:57 bigpie sshd[1691540]: Invalid user miguel from 54.38.157.20 port 37372
May 28 19:57:30 bigpie sshd[1726243]: Invalid user user from 54.38.157.20 port 49844
May 28 19:58:47 bigpie sshd[1743080]: Invalid user sshuser from 54.38.157.20 port 57730
May 28 20:00:05 bigpie sshd[1761069]: Invalid user roman from 54.38.157.20 port 45838
May 28 20:02:49 bigpie sshd[1798795]: Invalid user ociisprd from 54.38.157.20 port 52690
...
show less
2026-05-28T18:51:52.096069+01:00 uptime.mrtalon.eu sshd[4100774]: Invalid user lars from 54.38.157.2 ...
show more2026-05-28T18:51:52.096069+01:00 uptime.mrtalon.eu sshd[4100774]: Invalid user lars from 54.38.157.20 port 38910
2026-05-28T18:54:21.915280+01:00 uptime.mrtalon.eu sshd[4129756]: Invalid user miguel from 54.38.157.20 port 51900
2026-05-28T18:56:54.937019+01:00 uptime.mrtalon.eu sshd[4158702]: Invalid user user from 54.38.157.20 port 57734
2026-05-28T18:58:11.398675+01:00 uptime.mrtalon.eu sshd[4173528]: Invalid user sshuser from 54.38.157.20 port 56612
2026-05-28T18:59:28.292243+01:00 uptime.mrtalon.eu sshd[4188290]: Invalid user roman from 54.38.157.20 port 37630
...
show less
2026-05-28T19:42:44.270931+02:00 care.dolphin-it.de sshd-session[3220059]: Invalid user usr1cv8 from ...
show more2026-05-28T19:42:44.270931+02:00 care.dolphin-it.de sshd-session[3220059]: Invalid user usr1cv8 from 54.38.157.20 port 35074
2026-05-28T19:42:44.294194+02:00 care.dolphin-it.de sshd-session[3220059]: Disconnected from invalid user usr1cv8 54.38.157.20 port 35074 [preauth]
2026-05-28T19:47:01.440619+02:00 care.dolphin-it.de sshd-session[3220843]: Disconnected from authenticating user root 54.38.157.20 port 50906 [preauth]
2026-05-28T19:48:23.470883+02:00 care.dolphin-it.de sshd-session[3221185]: Disconnected from authenticating user admin 54.38.157.20 port 36574 [preauth]
2026-05-28T19:49:45.302902+02:00 care.dolphin-it.de sshd-session[3221401]: Disconnected from authenticating user root 54.38.157.20 port 38116 [preauth]
show less
Brute-Force
Anonymous
2026-05-28T19:44:59.870289+02:00 webtest sshd[277636]: Failed password for invalid user usr1cv8 from ...
show more2026-05-28T19:44:59.870289+02:00 webtest sshd[277636]: Failed password for invalid user usr1cv8 from 54.38.157.20 port 44610 ssh2
2026-05-28T19:47:17.201823+02:00 webtest sshd[277695]: User root from 54.38.157.20 not allowed because not listed in AllowUsers
2026-05-28T19:47:17.203198+02:00 webtest sshd[277695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.157.20 user=root
2026-05-28T19:47:19.025401+02:00 webtest sshd[277695]: Failed password for invalid user root from 54.38.157.20 port 57694 ssh2
2026-05-28T19:48:39.558335+02:00 webtest sshd[277727]: User admin from 54.38.157.20 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 3297 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩