Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Nov 15 18:59:10 portainer-be sshd[2467759]: Failed password for root from 154.241.9.23 port 40920 ssh2
Nov 15 18:59:11 portainer-be sshd[2467911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.9.23 u ...
show moreNov 15 18:59:10 portainer-be sshd[2467759]: Failed password for root from 154.241.9.23 port 40920 ssh2
Nov 15 18:59:11 portainer-be sshd[2467911]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.9.23 user=root
Nov 15 18:59:14 portainer-be sshd[2467911]: Failed password for root from 154.241.9.23 port 20688 ssh2
Nov 15 18:59:16 portainer-be sshd[2468169]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.9.23 user=root
Nov 15 18:59:18 portainer-be sshd[2468169]: Failed password for root from 154.241.9.23 port 46853 ssh2
...
show less
2026-11-15T18:55:52.645977+00:00 ubuntu sshd-session[1622991]: Invalid user user from 154.241.9.23 port 48280
2026-11-15T18:55:52.977233+00:00 ubuntu sshd-session[1622993]: Invalid user user from 154.241.9.23 port 32226
2026-11-15T18:55:53.313178+00: ...
show more2026-11-15T18:55:52.645977+00:00 ubuntu sshd-session[1622991]: Invalid user user from 154.241.9.23 port 48280
2026-11-15T18:55:52.977233+00:00 ubuntu sshd-session[1622993]: Invalid user user from 154.241.9.23 port 32226
2026-11-15T18:55:53.313178+00:00 ubuntu sshd-session[1622995]: Invalid user user from 154.241.9.23 port 14470
2026-11-15T18:55:53.644320+00:00 ubuntu sshd-session[1622997]: Invalid user user from 154.241.9.23 port 49212
2026-11-15T18:55:53.990048+00:00 ubuntu sshd-session[1622999]: Invalid user user from 154.241.9.23 port 49478
...
show less
Nov 15 18:37:05 vps-07b0f6cf sshd[1790338]: User root from 154.241.9.23 not allowed because not listed in AllowUsers
Nov 15 18:37:06 vps-07b0f6cf sshd[1790340]: User root from 154.241.9.23 not allowed because not listed in AllowUsers
...
Brute-Force
SSH
Anonymous
denied traffic to a honeypot network. destination port 22.
2026-11-16T04:44:01.775987+13:00 dara sshd-session[1923641]: Connection closed by authenticating user root 154.241.9.23 port 54753 [preauth]
2026-11-16T04:44:01.873290+13:00 dara sshd-session[1923644]: Connection from 154.241.9.23 port 55196 on 135.1 ...
show more2026-11-16T04:44:01.775987+13:00 dara sshd-session[1923641]: Connection closed by authenticating user root 154.241.9.23 port 54753 [preauth]
2026-11-16T04:44:01.873290+13:00 dara sshd-session[1923644]: Connection from 154.241.9.23 port 55196 on 135.181.182.173 port 22 rdomain ""
2026-11-16T04:44:02.215050+13:00 dara sshd-session[1923644]: Connection closed by authenticating user root 154.241.9.23 port 55196 [preauth]
2026-11-16T04:44:02.305311+13:00 dara sshd-session[1923646]: Connection from 154.241.9.23 port 55564 on 135.181.182.173 port 22 rdomain ""
2026-11-16T04:44:02.643069+13:00 dara sshd-session[1923646]: Connection closed by authenticating user root 154.241.9.23 port 55564 [preauth]
...
show less
2026-11-15T15:33:17.269862+00:00 s2b5305fd.fastvps-server.com sshd-session[2499661]: Failed password for root from 154.241.9.23 port 53335 ssh2
2026-11-15T15:33:18.348374+00:00 s2b5305fd.fastvps-server.com sshd-session[2499699]: pam_unix(sshd:auth): ...
show more2026-11-15T15:33:17.269862+00:00 s2b5305fd.fastvps-server.com sshd-session[2499661]: Failed password for root from 154.241.9.23 port 53335 ssh2
2026-11-15T15:33:18.348374+00:00 s2b5305fd.fastvps-server.com sshd-session[2499699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.241.9.23 user=root
2026-11-15T15:33:20.207046+00:00 s2b5305fd.fastvps-server.com sshd-session[2499699]: Failed password for root from 154.241.9.23 port 49158 ssh2
...
show less
