This IP address has been reported a total of
216
times from
82 distinct
sources.
154.72.198.44 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Jun 18 04:03:45 rand sshd[3116349]: Failed password for [redacted] from 154.72.198.44 port 53848 ssh ...
show moreJun 18 04:03:45 rand sshd[3116349]: Failed password for [redacted] from 154.72.198.44 port 53848 ssh2
Jun 18 04:03:46 rand sshd[3116351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.198.44 user=[redacted]
Jun 18 04:03:49 rand sshd[3116351]: Failed password for [redacted] from 154.72.198.44 port 53850 ssh2
Jun 18 04:03:52 rand sshd[3116357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.198.44 user=[redacted]
Jun 18 04:03:54 rand sshd[3116357]: Failed password for [redacted] from 154.72.198.44 port 49452 ssh2
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 154.72.198.44, Reason:[(sshd) Failed SSH lo ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 154.72.198.44, Reason:[(sshd) Failed SSH login from 154.72.198.44 (UG/Uganda/-): 3 in the last 3600 secs]
show less
Brute-Force
SSH
Anonymous
(sshd) Failed SSH login from 154.72.198.44 (UG/Uganda/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 154.72.198.44 (UG/Uganda/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 10 02:22:12 server5 sshd[22056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.198.44 user=root
Jun 10 02:22:14 server5 sshd[22056]: Failed password for root from 154.72.198.44 port 35942 ssh2
Jun 10 02:22:16 server5 sshd[22125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.198.44 user=root
Jun 10 02:22:18 server5 sshd[22125]: Failed password for root from 154.72.198.44 port 35990 ssh2
Jun 10 02:22:20 server5 sshd[22131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.72.198.44 user=root
show less
2026-05-27T03:47:54.023632+02:00 87hcet sshd[3332411]: banner exchange: Connection from 154.72.198.4 ...
show more2026-05-27T03:47:54.023632+02:00 87hcet sshd[3332411]: banner exchange: Connection from 154.72.198.44 port 33312: invalid format
2026-05-27T03:47:55.045289+02:00 87hcet sshd[3332419]: User root from 154.72.198.44 not allowed because not listed in AllowUsers
2026-05-27T03:47:55.211063+02:00 87hcet sshd[3332419]: Connection closed by invalid user root 154.72.198.44 port 33314 [preauth]
...
show less
Suricata Detected 102 attacks from 154.72.198.44.; ET CINS Active Threat Intelligence Poor Reputatio ...
show moreSuricata Detected 102 attacks from 154.72.198.44.; ET CINS Active Threat Intelligence Poor Reputation IP group 209; IP: 154.72.198.44; Ports: 17834; Direction: to_server; Trigger: CINS; Category: Misc Attack; Severity: 2
show less
Firewall - Suricata IDS [Priority 2 - High]: ET CINS Active Threat Intelligence Poor Reputation IP g ...
show moreFirewall - Suricata IDS [Priority 2 - High]: ET CINS Active Threat Intelligence Poor Reputation IP group 209
show less