This IP address has been reported a total of
103
times from
88 distinct
sources.
157.20.159.54 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-04T00:40:54.254159shield sshd\[1100\]: pam_unix\(sshd:auth\): authentication failure\; logna ...
show more2026-06-04T00:40:54.254159shield sshd\[1100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.159.54 user=root
2026-06-04T00:40:56.310135shield sshd\[1100\]: Failed password for root from 157.20.159.54 port 59716 ssh2
2026-06-04T00:40:58.902702shield sshd\[1100\]: Failed password for root from 157.20.159.54 port 59716 ssh2
2026-06-04T00:41:00.907437shield sshd\[1100\]: Failed password for root from 157.20.159.54 port 59716 ssh2
2026-06-04T00:41:02.852917shield sshd\[1100\]: Failed password for root from 157.20.159.54 port 59716 ssh2
show less
Jun 3 19:00:00 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
Jun ...
show moreJun 3 19:00:00 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
Jun 3 19:00:04 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
Jun 3 19:00:09 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
Jun 3 19:00:11 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
Jun 3 19:00:14 www4 sshd[541616]: Failed password for root from 157.20.159.54 port 50854 ssh2
...
show less
2026-06-03T11:00:12.978710+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 p ...
show more2026-06-03T11:00:12.978710+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 port 48404 ssh2
2026-06-03T11:00:16.110906+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 port 48404 ssh2
2026-06-03T11:00:18.489564+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 port 48404 ssh2
2026-06-03T11:00:23.015326+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 port 48404 ssh2
2026-06-03T11:00:26.148854+00:00 xproot sshd[2227345]: Failed password for root from 157.20.159.54 port 48404 ssh2
...
show less
2026-06-03T00:17:59.231128 gateway sshd[892418]: Failed password for root from 157.20.159.54 port 33 ...
show more2026-06-03T00:17:59.231128 gateway sshd[892418]: Failed password for root from 157.20.159.54 port 33446 ssh2
2026-06-03T00:18:01.263998 gateway sshd[892418]: Failed password for root from 157.20.159.54 port 33446 ssh2
2026-06-03T00:18:04.298686 gateway sshd[892418]: Failed password for root from 157.20.159.54 port 33446 ssh2
2026-06-03T00:18:07.800191 gateway sshd[892418]: Failed password for root from 157.20.159.54 port 33446 ssh2
2026-06-03T00:18:09.754320 gateway sshd[892418]: Disconnecting authenticating user root 157.20.159.54 port 33446: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-06-03T00:18:11.417050 gateway sshd[892425]: Invalid user test from 157.20.159.54 port 51664
2026-06-03T00:18:11.420266 gateway sshd[892425]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.159.54
2026-06-03T00:18:12.898060 gateway sshd[892425]: Failed password for invalid user test from 157.20.159
...
show less
2026-06-02T03:54:43.288709+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159. ...
show more2026-06-02T03:54:43.288709+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159.54 port 42136 ssh2
2026-06-02T03:54:45.695322+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159.54 port 42136 ssh2
2026-06-02T03:54:48.026594+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159.54 port 42136 ssh2
2026-06-02T03:54:50.871023+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159.54 port 42136 ssh2
2026-06-02T03:54:54.143437+02:00 **** sshd-session[18496]: Failed password for root from 157.20.159.54 port 42136 ssh2
show less
2026-06-01T22:55:57.167194+02:00 domotica sshd-session[4502]: Failed password for root from 157.20.1 ...
show more2026-06-01T22:55:57.167194+02:00 domotica sshd-session[4502]: Failed password for root from 157.20.159.54 port 38196 ssh2
...
show less
2026-06-01T19:14:38.360796milloweb sshd[1505]: Failed password for root from 157.20.159.54 port 5539 ...
show more2026-06-01T19:14:38.360796milloweb sshd[1505]: Failed password for root from 157.20.159.54 port 55396 ssh2
2026-06-01T19:14:40.276122milloweb sshd[1505]: Failed password for root from 157.20.159.54 port 55396 ssh2
2026-06-01T19:14:42.798885milloweb sshd[1505]: Failed password for root from 157.20.159.54 port 55396 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 103 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩