This IP address has been reported a total of
61
times from
47 distinct
sources.
154.241.50.111 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-17T23:58:54.107060+00:00 xproot sshd[2275867]: Invalid user arcgis from 154.241.50.111 port ...
show more2026-09-17T23:58:54.107060+00:00 xproot sshd[2275867]: Invalid user arcgis from 154.241.50.111 port 47900
2026-09-17T23:58:54.111163+00:00 xproot sshd[2275867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111
2026-09-17T23:58:56.360037+00:00 xproot sshd[2275867]: Failed password for invalid user arcgis from 154.241.50.111 port 47900 ssh2
2026-09-18T00:00:10.920141+00:00 xproot sshd[2276429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111 user=root
2026-09-18T00:00:13.269420+00:00 xproot sshd[2276429]: Failed password for root from 154.241.50.111 port 37022 ssh2
...
show less
2026-09-17T23:20:41.444519+00:00 xproot sshd[2263314]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-17T23:20:41.444519+00:00 xproot sshd[2263314]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111
2026-09-17T23:20:43.904430+00:00 xproot sshd[2263314]: Failed password for invalid user family from 154.241.50.111 port 51496 ssh2
2026-09-17T23:21:59.187267+00:00 xproot sshd[2263770]: Invalid user pula from 154.241.50.111 port 56720
2026-09-17T23:21:59.191039+00:00 xproot sshd[2263770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111
2026-09-17T23:22:01.359788+00:00 xproot sshd[2263770]: Failed password for invalid user pula from 154.241.50.111 port 56720 ssh2
...
show less
2026-09-17T17:13:40.142709-06:00 b146-InstructorA sshd[1938078]: pam_unix(sshd:auth): authentication ...
show more2026-09-17T17:13:40.142709-06:00 b146-InstructorA sshd[1938078]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111 user=root
2026-09-17T17:13:42.140926-06:00 b146-InstructorA sshd[1938078]: Failed password for invalid user root from 154.241.50.111 port 39706 ssh2
2026-09-17T17:17:42.841035-06:00 b146-InstructorA sshd[1938362]: User root from 154.241.50.111 not allowed because none of user's groups are listed in AllowGroups
...
show less
Sep 18 00:08:23 apo sshd[1337]: Invalid user odoo15 from 154.241.50.111 port 51782
Sep 18 00:08:23 a ...
show moreSep 18 00:08:23 apo sshd[1337]: Invalid user odoo15 from 154.241.50.111 port 51782
Sep 18 00:08:23 apo sshd[1337]: Failed password for invalid user odoo15 from 154.241.50.111 port 51782 ssh2
Sep 18 00:09:38 apo sshd[3765]: Failed password for root from 154.241.50.111 port 60686 ssh2
Sep 18 00:10:56 apo sshd[6447]: Invalid user admin from 154.241.50.111 port 58936
...
show less
2026-09-18T06:08:07.053034+08:00 VM-8-9-debian sshd[3679750]: Invalid user odoo15 from 154.241.50.11 ...
show more2026-09-18T06:08:07.053034+08:00 VM-8-9-debian sshd[3679750]: Invalid user odoo15 from 154.241.50.111 port 45850
2026-09-18T06:08:07.058094+08:00 VM-8-9-debian sshd[3679750]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.50.111
2026-09-18T06:08:08.790732+08:00 VM-8-9-debian sshd[3679750]: Failed password for invalid user odoo15 from 154.241.50.111 port 45850 ssh2
...
show less
Unsolicited SSH brute-force against port 22 on my small self-hosted server. 6 failed authentication ...
show moreUnsolicited SSH brute-force against port 22 on my small self-hosted server. 6 failed authentication attempts inside the fail2ban detection window triggered an automatic ban (jail sshd). Publickey-only auth means no attempt here could have succeeded -- this is untargeted scanning. Repeat offenses from this address get exponentially longer bans. Reported automatically by fail2ban; no manual review.
show less
Brute-Force
SSH
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ