Apr 3 00:33:18 kore sshd[649494]: Failed password for root from 154.241.48.11 port 40128 ssh2
Apr ...
show moreApr 3 00:33:18 kore sshd[649494]: Failed password for root from 154.241.48.11 port 40128 ssh2
Apr 3 00:54:18 kore sshd[649779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.11 user=root
Apr 3 00:54:19 kore sshd[649779]: Failed password for root from 154.241.48.11 port 46700 ssh2
...
show less
2026-04-03T08:32:46.816191+02:00 nfs-server sshd-session[69890]: Disconnected from authenticating us ...
show more2026-04-03T08:32:46.816191+02:00 nfs-server sshd-session[69890]: Disconnected from authenticating user root 154.241.48.11 port 58958 [preauth]
2026-04-03T08:36:03.390061+02:00 nfs-server sshd-session[69905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.11 user=root
2026-04-03T08:36:05.509546+02:00 nfs-server sshd-session[69905]: Failed password for root from 154.241.48.11 port 57760 ssh2
...
show less
Apr 2 23:14:37 diamondreo sshd[692667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreApr 2 23:14:37 diamondreo sshd[692667]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.11 user=root
Apr 2 23:14:39 diamondreo sshd[692667]: Failed password for invalid user root from 154.241.48.11 port 50638 ssh2
Apr 2 23:24:36 diamondreo sshd[692798]: User root from 154.241.48.11 not allowed because none of user's groups are listed in AllowGroups
...
show less
Apr 2 19:54:46 sycorax sshd[235783]: Failed password for root from 154.241.48.11 port 36822 ssh2
Ap ...
show moreApr 2 19:54:46 sycorax sshd[235783]: Failed password for root from 154.241.48.11 port 36822 ssh2
Apr 2 19:58:06 sycorax sshd[235831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.11 user=root
Apr 2 19:58:08 sycorax sshd[235831]: Failed password for root from 154.241.48.11 port 45422 ssh2
...
show less
Report 2233240 with IP 3280802 for SSH brute-force attack by source 3275465 via ssh-honeypot/0.2.0+h ...
show moreReport 2233240 with IP 3280802 for SSH brute-force attack by source 3275465 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 1 to
15
of 52 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ