Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 154.53.48.170:
This IP address has been reported a total of
37
times from
29 distinct
sources.
154.53.48.170 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 8
reports;
United Kingdom of Great Britain and Northern Ireland
with 5
reports;
France
with 4
reports.
The most common categories in these recent reports were:
SSH
36
times;
Brute-Force
36
times;
Port Scan
3
times;
Hacking
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-04T09:39:50.485962-06:00 roadrunner sshd[815958]: pam_sss(sshd:auth): authentication failure ...
show more2026-09-04T09:39:50.485962-06:00 roadrunner sshd[815958]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.48.170 user=postmaster
2026-09-04T09:39:51.812645-06:00 roadrunner sshd[815958]: Failed password for invalid user postmaster from 154.53.48.170 port 57654 ssh2
2026-09-04T20:06:47.661930-06:00 roadrunner sshd[830836]: Invalid user aa from 154.53.48.170 port 50978
...
show less
2026-09-05T02:04:48.703490+00:00 helium sshd-session[1304463]: pam_unix(sshd:auth): authentication f ...
show more2026-09-05T02:04:48.703490+00:00 helium sshd-session[1304463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.48.170
2026-09-05T02:04:51.201969+00:00 helium sshd-session[1304463]: Failed password for invalid user aa from 154.53.48.170 port 60272 ssh2
2026-09-05T02:04:52.471602+00:00 helium sshd-session[1304463]: Connection closed by invalid user aa 154.53.48.170 port 60272 [preauth]
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: aa, Pass: [REDACTED]
[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted m ...
show more[Honeypot Report] Unauthorised shell access and command execution via SSH
A remote host attempted multiple logins against our emulated SSH service, then obtained shell access and executed commands.
Observed: 2026-09-04 16:54 to 2026-09-04 23:41 UTC | 2 sessions | 10 events | SSH (port 2200)
Attack chain:
1. 2 credential attempts: registration/registration, aa/123
2. Shell access obtained; 1 distinct command executed: uname -a 2>/dev/null
Signatures: Host Reconnaissance Commands
Full evidence: https://github.com/1Birdo/sundew-threat-intel/blob/main/incidents/2026/09/154.53.48.170.md
Reported by birdo.uk (Sundew honeypot sundew-01). Emulated service - no host was compromised.
show less
(sshd) Failed SSH login from 154.53.48.170 (US/United States/mail.indata.ec)
Brute-Force
SSH
Anonymous
2026-09-05T00:21:24.289412+02:00 nlvm.rayarcher.online sshd-session[454107]: pam_unix(sshd:auth): au ...
show more2026-09-05T00:21:24.289412+02:00 nlvm.rayarcher.online sshd-session[454107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.48.170
2026-09-05T00:21:26.181330+02:00 nlvm.rayarcher.online sshd-session[454107]: Failed password for invalid user aa from 154.53.48.170 port 57476 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH honeypot on port 22: 1 failed password attempt. Automated report from an SSH deception service.
Sep 04 20:11:04 master sshd[911888]: Failed password for invalid user muriel from 154.53.48.170 port ...
show moreSep 04 20:11:04 master sshd[911888]: Failed password for invalid user muriel from 154.53.48.170 port 42584 ssh2
Sep 04 20:51:14 master sshd[912694]: Failed password for invalid user aa from 154.53.48.170 port 37798 ssh2
show less
