Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 154.241.34.163:
This IP address has been reported a total of
48
times from
40 distinct
sources.
154.241.34.163 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 14
reports;
United States of America
with 7
reports;
Netherlands
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
43
times;
SSH
42
times;
Port Scan
3
times;
Hacking
2
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-13T02:17:14.746070+02:00 vps-14ca24d5 sshd[131912]: Invalid user developer from 154.241.34.1 ...
show more2026-09-13T02:17:14.746070+02:00 vps-14ca24d5 sshd[131912]: Invalid user developer from 154.241.34.163 port 54812
2026-09-13T02:19:36.981217+02:00 vps-14ca24d5 sshd[132497]: Connection from 154.241.34.163 port 46840 on 135.125.200.16 port 22 rdomain ""
2026-09-13T02:19:37.328939+02:00 vps-14ca24d5 sshd[132497]: Invalid user icp from 154.241.34.163 port 46840
2026-09-13T02:27:09.236244+02:00 vps-14ca24d5 sshd[133629]: Connection from 154.241.34.163 port 59574 on 135.125.200.16 port 22 rdomain ""
2026-09-13T02:27:09.582313+02:00 vps-14ca24d5 sshd[133629]: Invalid user omar from 154.241.34.163 port 59574
...
show less
[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted m ...
show more[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted multiple logins against our emulated SSH service, then obtained shell access and executed commands.
Observed: 2026-09-12 23:54 to 2026-09-12 23:55 UTC | 3 sessions | 7 events | SSH (port 22)
Attack chain:
1. 3 credential attempts: root/12312345, 345gs5662d34/345gs5662d34, root/3245gs5662d34
2. Shell access obtained; 1 distinct command executed: cd ~; chattr -ia .ssh; lockr -ia .ssh
Full evidence: https://github.com/1Birdo/lyrebird-intel/blob/main/incidents/2026/09/154.241.34.163.md
Reported by birdo.uk (Lyrebird honeypot lyrebird-01). Emulated service - no host was compromised.
show less
2026-09-13T00:43:48.304949+02:00 epyc01 sshd-session[2116602]: Connection from 154.241.34.163 port 4 ...
show more2026-09-13T00:43:48.304949+02:00 epyc01 sshd-session[2116602]: Connection from 154.241.34.163 port 43776 on 5.231.248.234 port 22 rdomain ""
2026-09-13T00:43:48.644322+02:00 epyc01 sshd-session[2116602]: Invalid user denis from 154.241.34.163 port 43776
2026-09-13T00:51:15.311651+02:00 epyc01 sshd-session[2120630]: Connection from 154.241.34.163 port 55960 on 5.231.248.234 port 22 rdomain ""
2026-09-13T00:51:15.666580+02:00 epyc01 sshd-session[2120630]: Invalid user lx from 154.241.34.163 port 55960
...
show less
[13/Sep/2026:01:45:02 +0300] sshd: User root from 154.241.34.163 not allowed because not listed in A ...
show more[13/Sep/2026:01:45:02 +0300] sshd: User root from 154.241.34.163 not allowed because not listed in AllowUsers
[13/Sep/2026:01:45:02 +0300] sshd: User root from 154.241.34.163 not allowed because not listed in AllowUsers
[13/Sep/2026:01:45:02 +0300] sshd: Invalid user lx from 154.241.34.163 port 52792
...
show less
2026-09-12T23:41:27.292845+01:00 miku.zit.at sshd[299954]: Invalid user michelle from 154.241.34.163 ...
show more2026-09-12T23:41:27.292845+01:00 miku.zit.at sshd[299954]: Invalid user michelle from 154.241.34.163 port 47550
2026-09-12T23:41:27.300120+01:00 miku.zit.at sshd[299954]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.34.163
2026-09-12T23:41:29.853691+01:00 miku.zit.at sshd[299954]: Failed password for invalid user michelle from 154.241.34.163 port 47550 ssh2
2026-09-12T23:42:43.717532+01:00 miku.zit.at sshd[300411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.34.163 user=root
2026-09-12T23:42:45.703896+01:00 miku.zit.at sshd[300411]: Failed password for root from 154.241.34.163 port 47690 ssh2
...
show less
UFW BLOCK Report:
Total attempts: 4
Top ports and details:
- Port 22 (4x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 4
Top ports and details:
- Port 22 (4x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 154.241.34.163
| this report is autogenerated by ZIME Cloud
show less
UFW BLOCK Report:
Total attempts: 9
Top ports and details:
- Port 22 (9x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 9
Top ports and details:
- Port 22 (9x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 154.241.34.163
| this report is autogenerated by ZIME Cloud
show less
UFW BLOCK Report:
Total attempts: 10
Top ports and details:
- Port 22 (10x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 10
Top ports and details:
- Port 22 (10x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 154.241.34.163
| this report is autogenerated by ZIME Cloud
show less
2026-09-12T22:04:39.004586+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1210806]: Invalid user systemd from ...
show more2026-09-12T22:04:39.004586+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1210806]: Invalid user systemd from 154.241.34.163 port 51916
2026-09-12T22:06:08.693082+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1210809]: Invalid user ty from 154.241.34.163 port 58030
2026-09-12T22:07:43.370099+02:00 gigahost-vm-cm21-2c2g-sfj sshd[1210813]: Invalid user lucas from 154.241.34.163 port 33036
...
show less
Brute-Force
SSH
Anonymous
2026-09-12T18:54:38.073816+00:00 de-fra2-nc2 sshd[3011435]: Invalid user alvaro from 154.241.34.163 ...
show more2026-09-12T18:54:38.073816+00:00 de-fra2-nc2 sshd[3011435]: Invalid user alvaro from 154.241.34.163 port 48856
2026-09-12T19:13:49.709938+00:00 de-fra2-nc2 sshd[3012047]: Invalid user sam from 154.241.34.163 port 57850
2026-09-12T19:30:14.400538+00:00 de-fra2-nc2 sshd[3012576]: Invalid user afzal from 154.241.34.163 port 55554
...
show less
