JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 154.90.70.149

154.90.70.149 was found in our database!

This IP was reported 13 times. Confidence of Abuse is 61%: ?

61%

ISP	VPSVAULT.HOST LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS215925
Domain Name	vpsvault.host
Country	🇷🇺 Russian Federation
City	Moscow, Moscow

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 154.90.70.149

Whois 154.90.70.149

IP Abuse Reports for 154.90.70.149:

This IP address has been reported a total of 13 times from 13 distinct sources. 154.90.70.149 was first reported on July 12th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇦🇺 updown.io	2026-07-13 01:26:02 (1 week ago)	2026-07-13T01:25:42.316430+00:00 syd.updn.io sshd[2760198]: Failed none for invalid user from 154.9 ... show more 2026-07-13T01:25:42.316430+00:00 syd.updn.io sshd[2760198]: Failed none for invalid user from 154.90.70.149 port 40685 ssh2 2026-07-13T01:25:50.268676+00:00 syd.updn.io sshd[2760555]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.149 user=root 2026-07-13T01:25:51.831459+00:00 syd.updn.io sshd[2760555]: Failed password for root from 154.90.70.149 port 47169 ssh2 2026-07-13T01:25:59.322187+00:00 syd.updn.io sshd[2760978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.149 user=root 2026-07-13T01:26:01.454765+00:00 syd.updn.io sshd[2760978]: Failed password for root from 154.90.70.149 port 53895 ssh2 ... show less	Brute-Force SSH
Anonymous	2026-07-13 01:10:06 (1 week ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 ghostwarriors	2026-07-13 00:50:28 (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
Anonymous	2026-07-13 00:31:47 (1 week ago)	Honeypot hit: Unauthorized connection attempt detected on 22/SSH Reported by: https://github.com/sef ... show more Honeypot hit: Unauthorized connection attempt detected on 22/SSH Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	SSH Port Scan
🇫🇮 vereinshosting	2026-07-12 18:10:11 (1 week ago)	Invalid user user from 154.90.70.149 port 36131	Brute-Force SSH
🇵🇱 Nevex	2026-07-12 17:12:34 (1 week ago)	Failed 9 attempts using usernames: user, admin and default	Brute-Force SSH
🇺🇸 Jon Rhine	2026-07-12 17:12:04 (1 week ago)	2026-07-12T12:11:22.406562-05:00 instance-20240522-152753 sshd[3855310]: Invalid user from 154.90.7 ... show more 2026-07-12T12:11:22.406562-05:00 instance-20240522-152753 sshd[3855310]: Invalid user from 154.90.70.149 port 37065 2026-07-12T12:11:52.764172-05:00 instance-20240522-152753 sshd[3855326]: Invalid user admin from 154.90.70.149 port 42853 2026-07-12T12:12:00.228701-05:00 instance-20240522-152753 sshd[3855330]: Invalid user default from 154.90.70.149 port 35769 2026-07-12T12:12:03.762445-05:00 instance-20240522-152753 sshd[3855332]: Invalid user admin from 154.90.70.149 port 53383 ... show less	Brute-Force SSH
🇺🇸 Cobalt IT Inc	2026-07-12 16:43:41 (1 week ago)	Jul 12 09:43:20 server01 sshd[15421]: Failed password for root from 154.90.70.149 port 45337 ssh2 Ju ... show more Jul 12 09:43:20 server01 sshd[15421]: Failed password for root from 154.90.70.149 port 45337 ssh2 Jul 12 09:43:29 server01 sshd[15429]: Failed none for invalid user from 154.90.70.149 port 53573 ssh2 ... show less	Brute-Force SSH
🇫🇮 Epic29	2026-07-12 16:20:03 (1 week ago)	2026-07-12T16:19:48.364588+00:00 ubuntu-4gb-hel1-1 sshd[1887637]: Connection closed by authenticatin ... show more 2026-07-12T16:19:48.364588+00:00 ubuntu-4gb-hel1-1 sshd[1887637]: Connection closed by authenticating user root 154.90.70.149 port 53173 [preauth] 2026-07-12T16:19:50.221609+00:00 ubuntu-4gb-hel1-1 sshd[1887639]: error: kex_exchange_identification: read: Connection reset by peer 2026-07-12T16:19:50.221737+00:00 ubuntu-4gb-hel1-1 sshd[1887639]: Connection reset by 154.90.70.149 port 60183 2026-07-12T16:19:55.974284+00:00 ubuntu-4gb-hel1-1 sshd[1887640]: Connection closed by authenticating user root 154.90.70.149 port 38735 [preauth] 2026-07-12T16:20:02.123030+00:00 ubuntu-4gb-hel1-1 sshd[1887642]: Connection closed by authenticating user root 154.90.70.149 port 60751 [preauth] ... show less	Brute-Force SSH
🇸🇪 sverre26	2026-07-12 16:10:15 (1 week ago)	Bruteforce detected by fail2ban	Brute-Force SSH
Anonymous	2026-07-12 15:18:49 (1 week ago)	Jul 12 15:18:40 f2b auth.info sshd[3353]: Failed password for root from 154.90.70.149 port 36219 ssh ... show more Jul 12 15:18:40 f2b auth.info sshd[3353]: Failed password for root from 154.90.70.149 port 36219 ssh2 Jul 12 15:18:47 f2b auth.info sshd[3355]: Invalid user from 154.90.70.149 port 36491 Jul 12 15:18:48 f2b auth.info sshd[3355]: Failed none for invalid user from 154.90.70.149 port 36491 ssh2 ... show less	Brute-Force SSH
🇺🇸 Babu Chang	2026-07-12 15:08:03 (1 week ago)	sshguard	SSH
🇫🇷 Richie	2026-07-12 15:00:44 (1 week ago)	2026-07-12T17:00:23.755140+02:00 host2 sshd[1606672]: Failed password for root from 154.90.70.149 po ... show more 2026-07-12T17:00:23.755140+02:00 host2 sshd[1606672]: Failed password for root from 154.90.70.149 port 52315 ssh2 2026-07-12T17:00:32.356219+02:00 host2 sshd[1606707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.149 user=root 2026-07-12T17:00:34.350553+02:00 host2 sshd[1606707]: Failed password for root from 154.90.70.149 port 60925 ssh2 2026-07-12T17:00:41.363631+02:00 host2 sshd[1606742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.90.70.149 user=root 2026-07-12T17:00:42.594715+02:00 host2 sshd[1606742]: Failed password for root from 154.90.70.149 port 35699 ssh2 ... show less	Brute-Force SSH

Showing 1 to 13 of 13 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 69.5.169.21

🇺🇸 68.207.224.247

🇺🇸 54.144.214.30

🇺🇸 45.33.102.61

🇩🇪 5.231.242.31

🇺🇸 4.154.22.4

🇷🇴 2.57.122.238

🇭🇰 156.225.1.60

🇨🇳 121.196.192.191

🇨🇳 116.179.32.157

🇮🇳 103.168.33.93

🇹🇷 94.154.43.50

🇮🇳 35.207.202.141

🇺🇸 20.118.32.39

🇵🇱 194.180.49.219

🇰🇷 140.238.16.177

🇨🇳 111.174.86.98

🇵🇰 103.120.70.153

🇮🇹 79.11.39.204

🇧🇬 78.128.112.6