JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 149.154.159.178

149.154.159.178 was found in our database!

This IP was reported 116 times. Confidence of Abuse is 33%: ?

33%

ISP	EDIS Infrastructure in Germany
Usage Type	Data Center/Web Hosting/Transit
ASN	AS9009
Hostname(s)	178.159.154.149.in-addr.arpa
Domain Name	edis.at
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 149.154.159.178

Whois 149.154.159.178

IP Abuse Reports for 149.154.159.178:

This IP address has been reported a total of 116 times from 71 distinct sources. 149.154.159.178 was first reported on May 1st 2026, and the most recent report was 1 month ago.

Old Reports: The most recent abuse report for this IP address is from 1 month ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 Project_Gifted1	2026-05-20 01:24:34 (1 month ago)	Gifted1 Active Recon Scanner Footprint - Protocol: http://206.189.21.23/agent-protocol.json	Port Scan Brute-Force
🇮🇳 Parth Maniar	2026-05-14 11:46:56 (1 month ago)	This IP address carried out 20 port scanning attempts on 13-05-2026. For more information or to repo ... show more This IP address carried out 20 port scanning attempts on 13-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter. show less	Port Scan SSH
🇰🇷 2048	2026-05-14 01:19:51 (1 month ago)	2026-05-14T10:19:50.067713+09:00 no2 sshd[1141294]: Disconnected from authenticating user root 149.1 ... show more 2026-05-14T10:19:50.067713+09:00 no2 sshd[1141294]: Disconnected from authenticating user root 149.154.159.178 port 45068 [preauth] ... show less	Brute-Force SSH
🇬🇧 andypiper	2026-05-14 01:02:54 (1 month ago)	CrowdSec ban for AbuseIPDB Top List	Brute-Force Web App Attack
🇦🇹 Pingger Shikkoken	2026-05-14 00:56:12 (1 month ago)	2026-05-14T00:56:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-05-14T00:56:12+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=149.154.159.178 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=13682 DF PROTO=TCP SPT=35894 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-14T00:56:13+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=149.154.159.178 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=13683 DF PROTO=TCP SPT=35894 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 2026-05-14T00:56:15+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:84:03:28:62:88:32:08:00 SRC=149.154.159.178 DST=152.53.50.28 LEN=60 TOS=0x00 PREC=0x00 TTL=58 ID=13684 DF PROTO=TCP SPT=35894 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0 show less	Hacking Brute-Force SSH
🇩🇪 EarlyOwl	2026-05-14 00:10:17 (1 month ago)	2026-05-14T00:10:17.303943+00:00 mail sshd[235023]: User root from 149.154.159.178 not allowed becau ... show more 2026-05-14T00:10:17.303943+00:00 mail sshd[235023]: User root from 149.154.159.178 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇦🇺 aglenday	2026-05-14 00:06:25 (1 month ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh2_1.11.0 • ... show more Honeypot hit: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh2_1.11.0 • SSH key fingerprints: 48:3c:eb:5c:76:73:09:a8:7f:6a:a7:c6:2c:a5:de:65 show less	SSH Port Scan
Anonymous	2026-05-13 23:26:23 (1 month ago)	SSH login attempts with user root	Brute-Force
🇺🇸 PP-VTNK	2026-05-13 22:55:37 (1 month ago)	2026-05-14T01:55:37.316110+03:00 vatnik sshd[47965]: User root from 149.154.159.178 not allowed beca ... show more 2026-05-14T01:55:37.316110+03:00 vatnik sshd[47965]: User root from 149.154.159.178 not allowed because listed in DenyUsers ... show less	Hacking Brute-Force SSH
🇬🇧 Deveroonie	2026-05-13 22:05:02 (1 month ago)	2026-05-13T22:05:01.710296+00:00 instance-20241019-1127 sshd[2550345]: Disconnected from authenticat ... show more 2026-05-13T22:05:01.710296+00:00 instance-20241019-1127 sshd[2550345]: Disconnected from authenticating user root 149.154.159.178 port 42318 [preauth] ... show less	Hacking Brute-Force SSH
🇨🇦 ImMarvolo	2026-05-13 21:35:12 (1 month ago)	2026-05-13T21:35:11.828975+00:00 neo-ca-bhs-01 sshd-session[1142355]: error: maximum authentication ... show more 2026-05-13T21:35:11.828975+00:00 neo-ca-bhs-01 sshd-session[1142355]: error: maximum authentication attempts exceeded for root from 149.154.159.178 port 46420 ssh2 [preauth] ... show less	Brute-Force SSH
🇬🇧 gbzret4d	2026-05-13 18:33:10 (1 month ago)	Honeypot [uk-production01]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-lib ... show more Honeypot [uk-production01]: Unauthorized connection attempt detected on 22/SSH • Client: SSH-2.0-libssh2_1.11.0 • SSH key fingerprints: 67:85:d9:b0:ab:0f:c9:23:9f:0d:41:f0:d6:e7:08:0e show less	SSH Port Scan
🇦🇺 neilwal	2026-05-13 16:08:24 (1 month ago)	Honeypot (Port 22) caught 149.154.159.178 trying: root:null; root:3245gs5662d34; 345gs5662d34:345gs5 ... show more Honeypot (Port 22) caught 149.154.159.178 trying: root:null; root:3245gs5662d34; 345gs5662d34:345gs5662d34; root:ABcd@1234; admin:admin; ts3:ts3; root:mima1234; root:gifts123 show less	Brute-Force
🇩🇪 EarlyOwl	2026-05-13 15:24:22 (1 month ago)	2026-05-13T15:24:22.297421+00:00 mail sshd[231688]: User root from 149.154.159.178 not allowed becau ... show more 2026-05-13T15:24:22.297421+00:00 mail sshd[231688]: User root from 149.154.159.178 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
🇳🇱 MaasSec	2026-05-13 15:00:13 (1 month ago)	SSH honeypot activity (Germany): 5 failed SSH login(s). Reported by Maassec Honeynet (maassec.nl).	Brute-Force SSH

Showing 1 to 15 of 116 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 223.73.18.33

🇧🇷 200.218.237.219

🇧🇷 200.199.32.174

🇺🇸 174.80.198.151

🇵🇰 103.121.25.101

🇲🇺 102.117.39.73

🇹🇷 94.154.43.177

🇺🇸 81.30.98.193

🇧🇬 78.128.114.102

🇳🇱 45.148.10.147

🇨🇳 39.154.11.195

🇨🇳 223.84.239.151

🇺🇸 205.210.31.60

🇿🇦 165.165.119.254

🇮🇳 117.211.15.93

🇨🇳 106.113.16.36

🇺🇸 104.243.37.196

🇺🇸 98.80.119.99

🇺🇸 34.193.119.44

🇨🇳 223.90.115.182