IP address

Passive DNS

Tags: Login attempts

IP blacklists

DataPlane SSH login

54.37.19.134 is listed on the DataPlane SSH login blacklist.

Description: DataPlane.org is a community-powered Internet data, feeds, and measurement resource for operators, by operators. IPs trying an unsolicited login to a host using SSH password authentication.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-21 14:10:06.442000
Was present on blacklist at: 2025-04-08 14:10, 2025-04-08 18:10, 2025-04-08 22:10, 2025-04-09 02:10, 2025-04-09 06:10, 2025-04-09 10:10, 2025-04-09 14:10, 2025-04-09 18:10, 2025-04-09 22:10, 2025-04-10 02:10, 2025-04-10 06:10, 2025-04-10 10:10, 2025-04-10 14:10, 2025-04-10 18:10, 2025-04-10 22:10, 2025-04-11 02:10, 2025-04-11 06:10, 2025-04-11 10:10, 2025-04-11 14:10, 2025-04-11 18:10, 2025-04-11 22:10, 2025-04-12 02:10, 2025-04-12 06:10, 2025-04-12 10:10, 2025-04-12 14:10, 2025-04-12 18:10, 2025-04-12 22:10, 2025-04-13 02:10, 2025-04-13 06:10, 2025-04-13 14:10, 2025-04-13 18:10, 2025-04-13 22:10, 2025-04-14 02:10, 2025-04-14 06:10, 2025-04-14 10:10, 2025-04-14 14:10, 2025-04-14 18:10, 2025-04-14 22:10, 2025-04-15 02:10, 2025-04-15 06:10, 2025-04-15 10:10, 2025-04-15 14:10, 2025-04-15 18:10, 2025-04-15 22:10, 2025-04-16 02:10, 2025-04-16 06:10, 2025-04-16 10:10, 2025-04-16 14:10, 2025-04-16 18:10, 2025-04-16 22:10, 2025-04-17 02:10, 2025-04-17 06:10, 2025-04-17 10:10, 2025-04-17 14:10, 2025-04-17 18:10, 2025-04-17 22:10, 2025-04-18 02:10, 2025-04-18 06:10, 2025-04-18 10:10, 2025-04-18 14:10, 2025-04-18 18:10, 2025-04-18 22:10, 2025-04-19 02:10, 2025-04-19 06:10, 2025-04-19 10:10, 2025-04-19 14:10, 2025-04-19 18:10, 2025-04-19 22:10, 2025-04-20 02:10, 2025-04-20 06:10, 2025-04-20 10:10, 2025-04-20 14:10, 2025-04-20 18:10, 2025-04-20 22:10, 2025-04-21 02:10, 2025-04-21 06:10, 2025-04-21 10:10, 2025-04-21 14:10

Spamhaus SBL CSS

54.37.19.134 was recently listed on the Spamhaus SBL CSS blacklist, but currently it is not.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2025-04-22 14:16:50.907000
Was present on blacklist at: 2025-04-08 14:16, 2025-04-15 14:16

blocklist.de SSH

54.37.19.134 is listed on the blocklist.de SSH blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IPs performing SSH attacks.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-16 10:05:05.360000
Was present on blacklist at: 2025-04-08 16:05, 2025-04-08 22:05, 2025-04-09 04:05, 2025-04-09 16:05, 2025-04-09 22:05, 2025-04-10 04:05, 2025-04-10 10:05, 2025-04-10 16:05, 2025-04-10 22:05, 2025-04-11 04:05, 2025-04-11 10:05, 2025-04-11 16:05, 2025-04-11 22:05, 2025-04-12 04:05, 2025-04-12 10:05, 2025-04-12 16:05, 2025-04-12 22:05, 2025-04-13 04:05, 2025-04-13 10:05, 2025-04-13 16:05, 2025-04-13 22:05, 2025-04-14 04:05, 2025-04-14 10:05, 2025-04-14 16:05, 2025-04-14 22:05, 2025-04-15 04:05, 2025-04-15 10:05, 2025-04-15 16:05, 2025-04-15 22:05, 2025-04-16 04:05, 2025-04-16 10:05

blocklist.de SIP

54.37.19.134 is listed on the blocklist.de SIP blacklist.

Description: Blocklist.de feed is a free and voluntary service provided by a Fraud/Abuse-specialist. IP addresses that tried to login in a SIP, VOIP or Asterisk Server.
Type of feed: primary (feed detail page)

Last checked at: 2025-04-09 10:05:05.339000
Was present on blacklist at: 2025-04-09 10:05

AbuseIPDB

54.37.19.134 is listed on the AbuseIPDB blacklist.

Description: AbuseIPDB is a project managed by Marathon Studios Inc. Lists IPs performing a malicious activity (DDoS, spam, phishing...)
Type of feed: primary (feed detail page)

Last checked at: 2025-04-14 04:00:00.698000
Was present on blacklist at: 2025-04-13 04:00, 2025-04-14 04:00

Warden events (30)

2025-04-14: AttemptLogin (node.9c160c): 15
2025-04-13: AttemptLogin (node.9c160c): 15

DShield reports (IP summary, reports)

2025-04-08: Number of reports: 326; Distinct targets: 7
2025-04-09: Number of reports: 85; Distinct targets: 3
2025-04-10: Number of reports: 279; Distinct targets: 7
2025-04-11: Number of reports: 448; Distinct targets: 8
2025-04-12: Number of reports: 328; Distinct targets: 7
2025-04-13: Number of reports: 196; Distinct targets: 6

Origin AS: AS16276 - OVH
BGP Prefix: 54.37.0.0/16
geo: France; 🕑 Europe/Paris
hostname: admplus9075.help-online-product.org
Address block ('inetnum' or 'NetRange' in whois database): 54.36.0.0 - 54.38.255.255
last_activity: 2025-04-14 01:19:30.199000
last_warden_event: 2025-04-14 01:19:30.199000
rep: 0.004761759440104167
reserved_range: 0
Shodan's InternetDB: Open ports: 11, 13, 15, 17, 19, 21, 22, 23, 24, 26, 37, 43, 49, 53, 66, 70, 79, 80, 81, 82, 83, 84, 88, 91, 93, 96, 99, 100, 102, 104, 110, 111, 113, 119, 121, 122, 131, 135, 143, 154, 175, 179, 195, 199, 211, 221, 225, 264, 311, 347, 389, 427, 440, 441, 443, 444, 445, 446, 447, 449, 465, 485, 503, 513, 515, 541, 548, 554, 587, 593, 631, 632, 636, 666, 771, 777, 789, 800, 801, 805, 808, 830, 831, 832, 843, 873, 902, 943, 992, 993, 994, 995, 1000, 1023, 1024, 1025, 1028, 1063, 1080, 1081, 1099, 1111, 1153, 1177, 1188, 1193, 1200, 1224, 1234, 1244, 1245, 1283, 1311, 1337, 1387, 1400, 1414, 1433, 1443, 1444, 1447, 1452, 1471, 1521, 1588, 1599, 1604, 1650, 1723, 1741, 1800, 1801, 1820, 1833, 1883, 1911, 1922, 1925, 1926, 1935, 1950, 1952, 1953, 1954, 1957, 1962, 1964, 1965, 1966, 1969, 1970, 1971, 1974, 1975, 1977, 1985, 2000, 2001, 2002, 2003, 2006, 2008, 2010, 2016, 2020, 2030, 2048, 2052, 2053, 2056, 2064, 2067, 2069, 2078, 2081, 2082, 2083, 2086, 2087, 2091, 2095, 2101, 2107, 2108, 2109, 2121, 2150, 2154, 2181, 2200, 2222, 2223, 2250, 2323, 2332, 2345, 2362, 2363, 2375, 2376, 2379, 2382, 2404, 2433, 2444, 2455, 2480, 2525, 2550, 2551, 2554, 2555, 2558, 2560, 2598, 2602, 2626, 2628, 2650, 2701, 2709, 2761, 2762, 2806, 3000, 3001, 3009, 3015, 3017, 3018, 3022, 3047, 3050, 3056, 3058, 3061, 3062, 3065, 3066, 3068, 3069, 3073, 3075, 3076, 3080, 3082, 3086, 3087, 3090, 3091, 3095, 3096, 3099, 3100, 3105, 3107, 3109, 3111, 3114, 3117, 3119, 3120, 3128, 3130, 3139, 3142, 3143, 3146, 3148, 3150, 3156, 3157, 3159, 3161, 3165, 3179, 3195, 3199, 3200, 3260, 3268, 3269, 3299, 3301, 3306, 3310, 3333, 3341, 3352, 3388, 3389, 3390, 3400, 3402, 3403, 3407, 3412, 3460, 3500, 3541, 3542, 3550, 3551, 3555, 3559, 3562, 3566, 3689, 3749, 3780, 3790, 3792, 3842, 3922, 3954, 4000, 4001, 4010, 4022, 4040, 4043, 4063, 4064, 4085, 4120, 4150, 4200, 4242, 4243, 4244, 4282, 4321, 4369, 4400, 4401, 4402, 4430, 4433, 4434, 4437, 4443, 4444, 4445, 4451, 4457, 4461, 4466, 4499, 4500, 4506, 4510, 4530, 4550, 4567, 4572, 4620, 4664, 4747, 4782, 4786, 4840, 4848, 4899, 4911, 4949, 4993, 5000, 5001, 5002, 5005, 5006, 5007, 5009, 5010, 5025, 5051, 5083, 5089, 5119, 5120, 5140, 5201, 5222, 5237, 5244, 5245, 5246, 5248, 5249, 5252, 5258, 5261, 5264, 5265, 5269, 5280, 5351, 5357, 5400, 5432, 5435, 5523, 5544, 5555, 5560, 5567, 5569, 5591, 5593, 5600, 5601, 5603, 5604, 5605, 5607, 5608, 5660, 5672, 5673, 5698, 5800, 5801, 5858, 5900, 5901, 5902, 5903, 5905, 5910, 5914, 5918, 5919, 5920, 5938, 5984, 5985, 5986, 5993, 5994, 5995, 5996, 5998, 5999, 6000, 6001, 6002, 6005, 6008, 6021, 6061, 6080, 6102, 6134, 6161, 6262, 6264, 6308, 6331, 6379, 6405, 6433, 6440, 6443, 6464, 6512, 6513, 6514, 6544, 6565, 6581, 6590, 6601, 6605, 6633, 6653, 6661, 6664, 6666, 6667, 6668, 6686, 6688, 6697, 6699, 6748, 6779, 6789, 6887, 6998, 7000, 7001, 7016, 7018, 7020, 7025, 7070, 7071, 7078, 7081, 7085, 7102, 7105, 7171, 7218, 7283, 7401, 7403, 7415, 7434, 7443, 7444, 7474, 7480, 7500, 7547, 7548, 7603, 7634, 7657, 7700, 7774, 7777, 7779, 7887, 7989, 7998, 8000, 8001, 8004, 8005, 8007, 8008, 8009, 8010, 8011, 8013, 8014, 8016, 8017, 8020, 8021, 8024, 8026, 8027, 8028, 8030, 8031, 8035, 8038, 8041, 8043, 8045, 8048, 8054, 8059, 8060, 8064, 8066, 8069, 8080, 8081, 8083, 8085, 8086, 8087, 8089, 8090, 8093, 8094, 8098, 8099, 8100, 8102, 8103, 8106, 8107, 8108, 8109, 8110, 8111, 8112, 8114, 8122, 8123, 8126, 8132, 8135, 8137, 8138, 8139, 8140, 8142, 8144, 8156, 8163, 8164, 8165, 8173, 8174, 8177, 8178, 8180, 8181, 8182, 8186, 8187, 8188, 8190, 8194, 8200, 8203, 8236, 8239, 8249, 8250, 8252, 8282, 8284, 8285, 8291, 8300, 8319, 8333, 8334, 8340, 8350, 8388, 8401, 8402, 8405, 8409, 8410, 8411, 8414, 8417, 8419, 8420, 8421, 8425, 8426, 8429, 8432, 8436, 8442, 8443, 8447, 8450, 8459, 8460, 8461, 8463, 8465, 8466, 8473, 8480, 8488, 8494, 8502, 8515, 8520, 8525, 8526, 8529, 8532, 8536, 8540, 8543, 8545, 8548, 8551, 8554, 8561, 8562, 8571, 8575, 8580, 8586, 8590, 8593, 8594, 8595, 8597, 8630, 8649, 8680, 8686, 8688, 8701, 8702, 8703, 8707, 8728, 8745, 8764, 8767, 8779, 8787, 8788, 8791, 8800, 8801, 8806, 8814, 8815, 8817, 8827, 8834, 8840, 8841, 8846, 8851, 8853, 8855, 8857, 8858, 8863, 8865, 8867, 8869, 8875, 8880, 8885, 8887, 8888, 8889, 8890, 8899, 8905, 8910, 8913, 8990, 8993, 9000, 9001, 9002, 9004, 9005, 9007, 9009, 9010, 9012, 9014, 9017, 9018, 9021, 9024, 9028, 9031, 9033, 9036, 9040, 9041, 9042, 9043, 9044, 9051, 9061, 9064, 9066, 9068, 9075, 9079, 9080, 9087, 9089, 9090, 9091, 9092, 9093, 9094, 9095, 9096, 9097, 9099, 9100, 9102, 9105, 9106, 9109, 9114, 9118, 9123, 9130, 9133, 9138, 9139, 9140, 9142, 9143, 9151, 9152, 9153, 9160, 9164, 9166, 9168, 9172, 9175, 9178, 9186, 9191, 9196, 9197, 9199, 9200, 9204, 9206, 9210, 9211, 9212, 9214, 9219, 9222, 9226, 9230, 9241, 9242, 9243, 9244, 9250, 9256, 9289, 9295, 9299, 9306, 9307, 9315, 9333, 9350, 9353, 9376, 9389, 9398, 9399, 9418, 9443, 9446, 9447, 9458, 9527, 9553, 9595, 9600, 9674, 9682, 9700, 9743, 9761, 9779, 9800, 9861, 9869, 9876, 9885, 9898, 9899, 9901, 9916, 9919, 9922, 9943, 9944, 9977, 9981, 9990, 9992, 9998, 9999, 10000; Tags: eol-product; CPEs: cpe:/a:f5:nginx:1.20.1, cpe:/a:openbsd:openssh:7.4
ts_added: 2025-04-08 14:16:42.355000
ts_last_update: 2025-04-27 14:16:51.834000

Warden event timeline

DShield event timeline

Presence on blacklists