This IP address has been reported a total of
71
times from
57 distinct
sources.
154.241.48.239 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-02T13:31:08.493963+02:00 proxy-nl1 sshd[469590]: Invalid user haproxy from 154.241.48.239 po ...
show more2026-06-02T13:31:08.493963+02:00 proxy-nl1 sshd[469590]: Invalid user haproxy from 154.241.48.239 port 60692
2026-06-02T13:31:08.498440+02:00 proxy-nl1 sshd[469590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239
2026-06-02T13:31:11.065756+02:00 proxy-nl1 sshd[469590]: Failed password for invalid user haproxy from 154.241.48.239 port 60692 ssh2
2026-06-02T13:38:24.352161+02:00 proxy-nl1 sshd[469784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239 user=root
2026-06-02T13:38:26.446294+02:00 proxy-nl1 sshd[469784]: Failed password for root from 154.241.48.239 port 40474 ssh2
show less
2026-06-02T11:24:23.157865+00:00 trilhos-prod sshd[2616994]: Invalid user hossein from 154.241.48.23 ...
show more2026-06-02T11:24:23.157865+00:00 trilhos-prod sshd[2616994]: Invalid user hossein from 154.241.48.239 port 51132
2026-06-02T11:28:02.249634+00:00 trilhos-prod sshd[2617086]: Invalid user joao from 154.241.48.239 port 53556
2026-06-02T11:29:50.025480+00:00 trilhos-prod sshd[2617108]: Invalid user haproxy from 154.241.48.239 port 46816
2026-06-02T11:31:39.766414+00:00 trilhos-prod sshd[2617158]: Invalid user user from 154.241.48.239 port 43700
2026-06-02T11:35:18.571106+00:00 trilhos-prod sshd[2617223]: Invalid user deployer from 154.241.48.239 port 46626
...
show less
2026-06-02T13:30:39.459560+02:00 gigacity.eu sshd[995955]: Failed password for invalid user haproxy ...
show more2026-06-02T13:30:39.459560+02:00 gigacity.eu sshd[995955]: Failed password for invalid user haproxy from 154.241.48.239 port 57326 ssh2
2026-06-02T13:34:18.509167+02:00 gigacity.eu sshd[996639]: Invalid user ivan from 154.241.48.239 port 47464
2026-06-02T13:34:18.513180+02:00 gigacity.eu sshd[996639]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239
2026-06-02T13:34:20.500348+02:00 gigacity.eu sshd[996639]: Failed password for invalid user ivan from 154.241.48.239 port 47464 ssh2
...
show less
2026-06-02T13:01:10.028179+02:00 axisverse sshd-session[373043]: Invalid user debian from 154.241.48 ...
show more2026-06-02T13:01:10.028179+02:00 axisverse sshd-session[373043]: Invalid user debian from 154.241.48.239 port 43800
2026-06-02T13:08:20.388092+02:00 axisverse sshd-session[385647]: Invalid user ftp_client from 154.241.48.239 port 49074
2026-06-02T13:12:07.423530+02:00 axisverse sshd-session[391887]: Invalid user john from 154.241.48.239 port 36992
...
show less
2026-06-02T12:47:47.798489+02:00 gigacity.eu sshd[991110]: Failed password for invalid user zomboid ...
show more2026-06-02T12:47:47.798489+02:00 gigacity.eu sshd[991110]: Failed password for invalid user zomboid from 154.241.48.239 port 44022 ssh2
2026-06-02T12:53:56.863265+02:00 gigacity.eu sshd[991753]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239 user=root
2026-06-02T12:53:59.352546+02:00 gigacity.eu sshd[991753]: Failed password for root from 154.241.48.239 port 35756 ssh2
2026-06-02T12:55:49.566585+02:00 gigacity.eu sshd[991954]: Invalid user cds from 154.241.48.239 port 33084
...
show less
154.241.48.239 (DZ/Algeria/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more154.241.48.239 (DZ/Algeria/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 2 04:52:19 14352 sshd[4553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239 user=root
Jun 2 04:52:21 14352 sshd[4553]: Failed password for root from 154.241.48.239 port 39966 ssh2
Jun 2 04:12:29 14352 sshd[17289]: Failed password for root from 190.2.135.111 port 60666 ssh2
Jun 2 04:12:27 14352 sshd[17289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.2.135.111 user=root
Jun 2 04:46:33 14352 sshd[1733]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.238.22.214 user=root
IP Addresses Blocked:
show less
Jun 2 10:37:59 dalia sshd[3179323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreJun 2 10:37:59 dalia sshd[3179323]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239
Jun 2 10:38:01 dalia sshd[3179323]: Failed password for invalid user ops from 154.241.48.239 port 39636 ssh2
...
show less
Jun 2 05:10:51 game-05 sshd[296339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 2 05:10:51 game-05 sshd[296339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239
Jun 2 05:10:53 game-05 sshd[296339]: Failed password for invalid user qa from 154.241.48.239 port 52830 ssh2
Jun 2 05:10:51 game-05 sshd[296339]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.48.239
Jun 2 05:10:53 game-05 sshd[296339]: Failed password for invalid user qa from 154.241.48.239 port 52830 ssh2
Jun 2 05:12:48 game-05 sshd[297507]: Invalid user public from 154.241.48.239 port 38276
...
show less
2026-06-02T09:52:11.954718+02:00 axisverse sshd-session[23553]: Invalid user kevin from 154.241.48.2 ...
show more2026-06-02T09:52:11.954718+02:00 axisverse sshd-session[23553]: Invalid user kevin from 154.241.48.239 port 50520
2026-06-02T09:58:02.423516+02:00 axisverse sshd-session[34155]: Invalid user tester from 154.241.48.239 port 43192
2026-06-02T10:03:49.998229+02:00 axisverse sshd-session[44158]: Invalid user git from 154.241.48.239 port 53774
...
show less
Brute-Force
SSH
Showing 1 to
15
of 71 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩