This IP address has been reported a total of
10
times from
10 distinct
sources.
154.241.13.42 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Czechia
with 2
reports;
Germany
with 2
reports;
Poland
with 2
reports.
The most common categories in these recent reports were:
SSH
8
times;
Brute-Force
7
times;
Port Scan
2
times;
Web App Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T18:14:10.050383vm15530.akenai.wtf sshd[36218]: Failed password for root from 154.241.13.4 ...
show more2026-10-26T18:14:10.050383vm15530.akenai.wtf sshd[36218]: Failed password for root from 154.241.13.42 port 40977 ssh2
2026-10-26T18:14:13.153568vm15530.akenai.wtf sshd[36220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.13.42 user=root
2026-10-26T18:14:14.656788vm15530.akenai.wtf sshd[36220]: Failed password for root from 154.241.13.42 port 44706 ssh2
...
show less
SSH Brute force: 29 attempts were recorded from 154.241.13.42
2026-10-26T17:48:20+0100 Connection cl ...
show moreSSH Brute force: 29 attempts were recorded from 154.241.13.42
2026-10-26T17:48:20+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:21+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:21+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:21+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:22+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:22+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:23+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:23+0100 Connection closed by authenticating user root 154.241.13.42 [preauth]
2026-10-26T17:48:24+0100 Connection closed by authenticating user root 154.241
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-10-26 16:21:42 | LAST=2026-10-26 16:21:43. Last seen 2026-10-26 16:21:43.
show less
Failed password for root from 154.241.13.42 port 54495 ssh2
Connection closed by authenticating user ...
show moreFailed password for root from 154.241.13.42 port 54495 ssh2
Connection closed by authenticating user root 154.241.13.42 port 54495 [preauth]
Failed password for root from 154.241.13.42 port 59054 ssh2
show less
2026-10-26T15:26:19.654027DED-654966.op-net.com sshd[2713076]: Failed password for root from 154.241 ...
show more2026-10-26T15:26:19.654027DED-654966.op-net.com sshd[2713076]: Failed password for root from 154.241.13.42 port 15743 ssh2
2026-10-26T15:26:34.619519DED-654966.op-net.com sshd[2713078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.13.42 user=root
2026-10-26T15:26:37.310848DED-654966.op-net.com sshd[2713078]: Failed password for root from 154.241.13.42 port 48549 ssh2
...
show less
2026-10-26T15:19:40.648020+01:00 phishsim sshd[367079]: Invalid user user from 154.241.13.42 port 52 ...
show more2026-10-26T15:19:40.648020+01:00 phishsim sshd[367079]: Invalid user user from 154.241.13.42 port 52508
2026-10-26T15:19:41.088016+01:00 phishsim sshd[367081]: Invalid user user from 154.241.13.42 port 1217
...
show less
Oct 26 13:32:41 mail sshd[2960072]: Invalid user user from 154.241.13.42 port 43108
Oct 26 13:32:41 ...
show moreOct 26 13:32:41 mail sshd[2960072]: Invalid user user from 154.241.13.42 port 43108
Oct 26 13:32:41 mail sshd[2960074]: Invalid user user from 154.241.13.42 port 21517
...
show less
Brute-Force
SSH
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.
2026-10-26T12:20:28.844273+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2285890]: Invalid user u ...
show more2026-10-26T12:20:28.844273+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2285890]: Invalid user user from 154.241.13.42 port 54931
2026-10-26T12:20:30.439894+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2285896]: Invalid user user from 154.241.13.42 port 56030
2026-10-26T12:20:32.035874+00:00 edge-eqx-syd03.int.pdx.net.uk sshd-session[2285899]: Invalid user user from 154.241.13.42 port 14550
...
show less
Brute-Force
SSH
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
