This IP address has been reported a total of
563
times from
250 distinct
sources.
122.154.235.21 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
122.154.235.21 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more122.154.235.21 (TH/Thailand/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 28 03:29:20 14418 sshd[21870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.235.21 user=root
Jun 28 03:25:19 14418 sshd[19493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.56.175.84 user=root
Jun 28 03:25:22 14418 sshd[19493]: Failed password for root from 79.56.175.84 port 53934 ssh2
Jun 28 03:26:56 14418 sshd[20356]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=83.118.107.37 user=root
Jun 28 03:26:58 14418 sshd[20356]: Failed password for root from 83.118.107.37 port 43022 ssh2
IP Addresses Blocked:
show less
Jun 27 17:40:46 phoenix sshd[298723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 27 17:40:46 phoenix sshd[298723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.235.21 user=root
Jun 27 17:40:48 phoenix sshd[298723]: Failed password for root from 122.154.235.21 port 53178 ssh2
...
show less
(sshd) Failed SSH login from 122.154.235.21 (TH/Thailand/-): 1 in the last 3600 secs; Ports: *; Dire ...
show more(sshd) Failed SSH login from 122.154.235.21 (TH/Thailand/-): 1 in the last 3600 secs; Ports: *; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-06-27T20:23:55.818029+00:00 francesko sshd[375359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.235.21 user=root
show less
{"event":{"DateTime":"2026-06-27T04:43:30Z","RemoteAddr":"122.154.235.21:58992","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-06-27T04:43:30Z","RemoteAddr":"122.154.235.21:58992","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"2417b13d-1116-4d82-a49a-1764a61e5be7","Environ":"","User":"root","Password":"sitexl2025@1","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"122.154.235.21","SourcePort":"58992","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-06-27T15:28:07Z","RemoteAddr":"122.154.235.21:56024","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"2182312e-33f7-40ed-8aa7-ae8eaf9b0b36","Environ":"","User":"root","Password":"sitexl2024!@#","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description
show less
2026-06-27T13:43:56.295798-03:00 salada-de-fruta sshd[2248944]: Connection closed by authenticating ...
show more2026-06-27T13:43:56.295798-03:00 salada-de-fruta sshd[2248944]: Connection closed by authenticating user root 122.154.235.21 port 45312 [preauth]
...
show less
Automated sensor: 3 SSH brute-force attempts on port(s) 22 over the last 24h (latest 2026-06-27T15:5 ...
show moreAutomated sensor: 3 SSH brute-force attempts on port(s) 22 over the last 24h (latest 2026-06-27T15:52Z). Usernames tried: root.
show less
Brute-Force
SSH
Showing 1 to
15
of 563 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩