This IP address has been reported a total of
31
times from
28 distinct
sources.
154.241.0.211 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 8
reports;
United States of America
with 8
reports;
France
with 4
reports.
The most common categories in these recent reports were:
SSH
24
times;
Brute-Force
23
times;
Port Scan
5
times;
Hacking
4
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-11 00:31:03.228053-0500 localhost sshd-session[39970]: Failed password for root from 154.24 ...
show more2026-10-11 00:31:03.228053-0500 localhost sshd-session[39970]: Failed password for root from 154.241.0.211 port 13421 ssh2
show less
2026-10-10T21:15:11.895064-06:00 westernstar sshd[2163778]: pam_unix(sshd:auth): authentication fail ...
show more2026-10-10T21:15:11.895064-06:00 westernstar sshd[2163778]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.0.211 user=root
2026-10-10T21:15:13.537705-06:00 westernstar sshd[2163778]: Failed password for invalid user root from 154.241.0.211 port 42353 ssh2
2026-10-10T21:15:15.215776-06:00 westernstar sshd[2163780]: User root from 154.241.0.211 not allowed because none of user's groups are listed in AllowGroups
...
show less
Blocked by UFW on hk [22/tcp]
Source port: 60338
TTL: 51
Packet length: 60
TOS: 0x00
This report wa ...
show moreBlocked by UFW on hk [22/tcp]
Source port: 60338
TTL: 51
Packet length: 60
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
SSH
Anonymous
2026-10-11T02:34:18.477250+00:00 front2 sshd[645726]: Invalid user user from 154.241.0.211 port 3734 ...
show more2026-10-11T02:34:18.477250+00:00 front2 sshd[645726]: Invalid user user from 154.241.0.211 port 37348
2026-10-11T02:44:30.408367+00:00 front2 sshd[648321]: Invalid user user from 154.241.0.211 port 37143
2026-10-11T02:44:30.672942+00:00 front2 sshd[648324]: Invalid user user from 154.241.0.211 port 37261
2026-10-11T02:44:30.936802+00:00 front2 sshd[648326]: Invalid user user from 154.241.0.211 port 37393
2026-10-11T02:44:31.214600+00:00 front2 sshd[648330]: Invalid user user from 154.241.0.211 port 37520
...
show less
Brute-Force
SSH
Anonymous
2026-10-11T02:24:04.648730+00:00 front2 sshd[643116]: Invalid user user from 154.241.0.211 port 5774 ...
show more2026-10-11T02:24:04.648730+00:00 front2 sshd[643116]: Invalid user user from 154.241.0.211 port 57748
2026-10-11T02:24:04.922249+00:00 front2 sshd[643119]: Invalid user user from 154.241.0.211 port 43657
2026-10-11T02:24:05.198462+00:00 front2 sshd[643123]: Invalid user user from 154.241.0.211 port 58081
2026-10-11T02:24:05.471793+00:00 front2 sshd[643125]: Invalid user user from 154.241.0.211 port 58213
2026-10-11T02:24:05.729741+00:00 front2 sshd[643128]: Invalid user user from 154.241.0.211 port 58373
...
show less
Oct 10 15:45:24 tilismtown sshd[3597724]: Failed password for root from 154.241.0.211 port 4955 ssh2 ...
show moreOct 10 15:45:24 tilismtown sshd[3597724]: Failed password for root from 154.241.0.211 port 4955 ssh2
Oct 10 15:45:27 tilismtown sshd[3597993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.0.211 user=root
Oct 10 15:45:29 tilismtown sshd[3597993]: Failed password for root from 154.241.0.211 port 6253 ssh2
...
show less
Oct 10 17:17:15 obsidian sshd[1478892]: Failed password for root from 154.241.0.211 port 51274 ssh2
...
show moreOct 10 17:17:15 obsidian sshd[1478892]: Failed password for root from 154.241.0.211 port 51274 ssh2
Oct 10 17:17:17 obsidian sshd[1478979]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.0.211 user=root
Oct 10 17:17:19 obsidian sshd[1478979]: Failed password for root from 154.241.0.211 port 54717 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
