JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.90.70.138

154.90.70.138 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 66%: ?

66%

ISP	VPSVAULT.HOST LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215925
Domain Name	vpsvault.host
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.90.70.138

Whois 154.90.70.138

IP Abuse Reports for 154.90.70.138:

This IP address has been reported a total of 13 times from 13 distinct sources. 154.90.70.138 was first reported on July 12th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 NetWatch	2026-07-13 00:45:26 (1 week ago)	The IP 154.90.70.138 tried multiple SSH_BRUTE_FORCE logins	Brute-Force
🇺🇸 kemonos.net	2026-07-13 00:44:20 (1 week ago)	2026-07-12T20:43:26.144676-04:00 raspberrypi sshd[4143101]: Invalid user from 154.90.70.138 port 48 ... show more 2026-07-12T20:43:26.144676-04:00 raspberrypi sshd[4143101]: Invalid user from 154.90.70.138 port 48497 2026-07-12T20:43:57.783784-04:00 raspberrypi sshd[4143324]: Invalid user user from 154.90.70.138 port 56305 2026-07-12T20:44:19.178926-04:00 raspberrypi sshd[4143419]: Invalid user admin from 154.90.70.138 port 53199 ... show less	Brute-Force SSH
🇩🇪 TGCFabian	2026-07-13 00:33:33 (1 week ago)	Jul 13 00:33:10 VPS sshd[3709116]: Invalid user from 154.90.70.138 port 33359 Jul 13 00:33:16 VPS s ... show more Jul 13 00:33:10 VPS sshd[3709116]: Invalid user from 154.90.70.138 port 33359 Jul 13 00:33:16 VPS sshd[3709118]: User root from 154.90.70.138 not allowed because not listed in AllowUsers Jul 13 00:33:23 VPS sshd[3709126]: User root from 154.90.70.138 not allowed because not listed in AllowUsers Jul 13 00:33:28 VPS sshd[3709144]: User root from 154.90.70.138 not allowed because not listed in AllowUsers Jul 13 00:33:33 VPS sshd[3709146]: User root from 154.90.70.138 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
Anonymous	2026-07-13 00:27:32 (1 week ago)	$f2bV_matches	Brute-Force SSH
🇺🇸 WestonReed	2026-07-12 23:59:41 (1 week ago)	2026-07-12T16:58:33.999933-07:00 onion sshd-session[369430]: Invalid user from 154.90.70.138 port 4 ... show more 2026-07-12T16:58:33.999933-07:00 onion sshd-session[369430]: Invalid user from 154.90.70.138 port 42907 2026-07-12T16:59:03.828072-07:00 onion sshd-session[369440]: Invalid user user from 154.90.70.138 port 35313 2026-07-12T16:59:19.542856-07:00 onion sshd-session[369447]: Invalid user admin from 154.90.70.138 port 50679 2026-07-12T16:59:33.035706-07:00 onion sshd-session[369451]: Invalid user default from 154.90.70.138 port 44717 2026-07-12T16:59:41.194496-07:00 onion sshd-session[369454]: Invalid user admin from 154.90.70.138 port 40625 ... show less	Brute-Force SSH
🇺🇸 jennij	2026-07-12 23:54:22 (1 week ago)	Fail2Ban sshd ban on mailserver ...	Brute-Force SSH
🇫🇮 vereinshosting	2026-07-12 17:06:59 (1 week ago)	Invalid user user from 154.90.70.138 port 55801	Brute-Force SSH
🇵🇱 itsvic.dev	2026-07-12 17:03:44 (1 week ago)	2026-07-12T17:03:30.188288+00:00 pl-waw01 sshd-session[869332]: Invalid user user from 154.90.70.138 ... show more 2026-07-12T17:03:30.188288+00:00 pl-waw01 sshd-session[869332]: Invalid user user from 154.90.70.138 port 43293 2026-07-12T17:03:39.965092+00:00 pl-waw01 sshd-session[869354]: Connection from 154.90.70.138 port 59121 on 109.122.28.203 port 22 rdomain "" 2026-07-12T17:03:44.256198+00:00 pl-waw01 sshd-session[869354]: Invalid user admin from 154.90.70.138 port 59121 ... show less	Brute-Force SSH
Anonymous	2026-07-12 16:23:00 (1 week ago)	2026-07-12T16:22:20.331009 EUR sshd[20939]: Invalid user from 154.90.70.138 port 36691 2026-07-12T1 ... show more 2026-07-12T16:22:20.331009 EUR sshd[20939]: Invalid user from 154.90.70.138 port 36691 2026-07-12T16:22:44.352150 EUR sshd[21074]: Invalid user user from 154.90.70.138 port 58325 2026-07-12T16:22:59.996641 EUR sshd[21175]: Invalid user admin from 154.90.70.138 port 54571 ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-12 15:20:29 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 markawes	2026-07-12 15:03:24 (1 week ago)	[markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence ... show more [markis] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence: 2026-07-12T15:03:00.991880+00:00 sshd-session[76017]: Failed password for root from 154.90.70.138 port 54399 ssh2 2026-07-12T15:03:10.338297+00:00 sshd-session[76020]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.138 user=root 2026-07-12T15:03:12.557396+00:00 sshd-session[76020]: Failed password for root from 154.90.70.138 port 46571 ssh2 2026-07-12T15:03:21.800754+00:00 sshd-session[76023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.138 user=root 2026-07-12T15:03:23.130971+00:00 sshd-session[76023]: Failed password for root from 154.90.70.138 port 45675 ssh2 show less	Brute-Force SSH
🇩🇪 LoNET	2026-07-12 14:45:41 (1 week ago)	Report 2550374 with IP 3597941 for SSH brute-force attack by source 3592599 via ssh-honeypot/0.2.0+h ... show more Report 2550374 with IP 3597941 for SSH brute-force attack by source 3592599 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
🇺🇸 SecondBanana	2026-07-12 14:22:18 (1 week ago)	2026-07-12T14:22:17.453899+00:00 thecount sshd[170320]: error: kex_exchange_identification: read: Co ... show more 2026-07-12T14:22:17.453899+00:00 thecount sshd[170320]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-12T14:22:17.453926+00:00 thecount sshd[170320]: Connection reset by 154.90.70.138 port 48941 ... show less	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 195.178.110.211

🇨🇳 182.88.166.212

🇺🇸 172.253.91.152

🇫🇮 147.185.133.210

🇮🇩 103.143.12.43

🇺🇸 70.118.29.34

🇺🇸 66.132.186.248

🇺🇸 20.168.95.16

🇰🇷 1.214.214.114

🇧🇷 201.58.69.51

🇨🇳 120.48.8.4

🇧🇷 45.232.75.125

🇷🇺 5.129.189.181

🇺🇬 196.0.122.22

🇷🇺 80.234.120.70

🇷🇴 80.94.95.211

🇳🇱 45.148.10.152

🇺🇸 216.25.89.77

🇮🇩 103.178.175.124

🇷🇺 95.105.52.153