This IP address has been reported a total of
29
times from
27 distinct
sources.
154.241.17.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-20T13:35:14.505476+02:00 router01.dtm.de.mersrv.de sshd[2413628]: Connection closed by authe ...
show more2026-07-20T13:35:14.505476+02:00 router01.dtm.de.mersrv.de sshd[2413628]: Connection closed by authenticating user root 154.241.17.157 port 42096 [preauth]
2026-07-20T13:35:15.087267+02:00 router01.dtm.de.mersrv.de sshd[2413630]: Connection closed by authenticating user root 154.241.17.157 port 43041 [preauth]
2026-07-20T13:35:15.557342+02:00 router01.dtm.de.mersrv.de sshd[2413634]: Connection closed by authenticating user root 154.241.17.157 port 43324 [preauth]
2026-07-20T13:35:16.107685+02:00 router01.dtm.de.mersrv.de sshd[2413636]: Connection closed by authenticating user root 154.241.17.157 port 43544 [preauth]
2026-07-20T13:35:16.634064+02:00 router01.dtm.de.mersrv.de sshd[2413641]: Connection closed by authenticating user root 154.241.17.157 port 43776 [preauth]
show less
Brute-Force
Anonymous
Jul 20 18:09:51 kepegawaian-2022 sshd[2406722]: refused connect from 154.241.17.157 (154.241.17.157) ...
show moreJul 20 18:09:51 kepegawaian-2022 sshd[2406722]: refused connect from 154.241.17.157 (154.241.17.157)
Jul 20 18:09:57 kepegawaian-2022 sshd[2407242]: refused connect from 154.241.17.157 (154.241.17.157)
Jul 20 18:10:02 kepegawaian-2022 sshd[2407743]: refused connect from 154.241.17.157 (154.241.17.157)
Jul 20 18:10:08 kepegawaian-2022 sshd[2408284]: refused connect from 154.241.17.157 (154.241.17.157)
Jul 20 18:10:13 kepegawaian-2022 sshd[2408787]: refused connect from 154.241.17.157 (154.241.17.157)
Jul 20 18:10:19 kepegawaian-2022 sshd[2409305]: refused connect from 154.241.17.157 (154.241.17.157)
...
show less
2026-07-19T23:20:28.416292-07:00 RoblOracle sshd-session[727369]: Invalid user user from 154.241.17. ...
show more2026-07-19T23:20:28.416292-07:00 RoblOracle sshd-session[727369]: Invalid user user from 154.241.17.157 port 59115
2026-07-19T23:20:29.477146-07:00 RoblOracle sshd-session[727371]: Invalid user user from 154.241.17.157 port 31903
2026-07-19T23:20:30.521196-07:00 RoblOracle sshd-session[727373]: Invalid user user from 154.241.17.157 port 60123
2026-07-19T23:20:31.507161-07:00 RoblOracle sshd-session[727375]: Invalid user user from 154.241.17.157 port 60627
2026-07-19T23:20:49.839971-07:00 RoblOracle sshd-session[727450]: Invalid user user from 154.241.17.157 port 49760
...
show less
Jul 19 23:52:22 jeeves sshd[744312]: Failed password for root from 154.241.17.157 port 12784 ssh2
Ju ...
show moreJul 19 23:52:22 jeeves sshd[744312]: Failed password for root from 154.241.17.157 port 12784 ssh2
Jul 19 23:52:24 jeeves sshd[744316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.17.157 user=root
Jul 19 23:52:26 jeeves sshd[744316]: Failed password for root from 154.241.17.157 port 50306 ssh2
...
show less
2026-07-20T04:06:27.229562+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[1321227]: Invalid user u ...
show more2026-07-20T04:06:27.229562+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[1321227]: Invalid user user from 154.241.17.157 port 28682
2026-07-20T04:06:27.588716+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[1321229]: Invalid user user from 154.241.17.157 port 43400
2026-07-20T04:06:27.977746+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[1321231]: Invalid user user from 154.241.17.157 port 25394
...
show less
Jul 20 02:26:40 v4bgp sshd[2299965]: Failed password for root from 154.241.17.157 port 49779 ssh2
Ju ...
show moreJul 20 02:26:40 v4bgp sshd[2299965]: Failed password for root from 154.241.17.157 port 49779 ssh2
Jul 20 02:26:43 v4bgp sshd[2299967]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.17.157 user=root
Jul 20 02:26:45 v4bgp sshd[2299967]: Failed password for root from 154.241.17.157 port 52160 ssh2
...
show less
2026-07-20T04:16:31.388666+02:00 gw2.wira-gmbh.de sshd[677015]: Connection closed by authenticating ...
show more2026-07-20T04:16:31.388666+02:00 gw2.wira-gmbh.de sshd[677015]: Connection closed by authenticating user root 154.241.17.157 port 21179 [preauth]
2026-07-20T04:16:32.079366+02:00 gw2.wira-gmbh.de sshd[677021]: Connection closed by authenticating user root 154.241.17.157 port 61594 [preauth]
2026-07-20T04:16:32.778753+02:00 gw2.wira-gmbh.de sshd[677023]: Connection closed by authenticating user root 154.241.17.157 port 58131 [preauth]
2026-07-20T04:16:33.563807+02:00 gw2.wira-gmbh.de sshd[677030]: Connection closed by authenticating user root 154.241.17.157 port 58528 [preauth]
2026-07-20T04:16:34.270370+02:00 gw2.wira-gmbh.de sshd[677033]: Connection closed by authenticating user root 154.241.17.157 port 58994 [preauth]
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-07-20 04:04:13 | LAST=2026-07-20 04:04:14. Last seen 2026-07-20 04:04:14.
show less