This IP address has been reported a total of
262
times from
208 distinct
sources.
165.154.1.112 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 56
reports;
United States of America
with 56
reports;
France
with 21
reports.
The most common categories in these recent reports were:
SSH
245
times;
Brute-Force
243
times;
Hacking
13
times;
Port Scan
11
times;
FTP Brute-Force
5
times;
Other
8
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-27T17:07:36.233833-05:00 nocix-dedi-bf2421-mci sshd-session[3413615]: Invalid user firewall ...
show more2026-10-27T17:07:36.233833-05:00 nocix-dedi-bf2421-mci sshd-session[3413615]: Invalid user firewall from 165.154.1.112 port 38548
2026-10-27T17:17:31.907785-05:00 nocix-dedi-bf2421-mci sshd-session[3414483]: Invalid user gnats from 165.154.1.112 port 32708
2026-10-27T17:19:15.674898-05:00 nocix-dedi-bf2421-mci sshd-session[3414618]: Invalid user systemd from 165.154.1.112 port 28402
...
show less
2026-10-27T22:08:43.878023+02:00 serengeti sshd-session[667804]: Failed password for root from 165.1 ...
show more2026-10-27T22:08:43.878023+02:00 serengeti sshd-session[667804]: Failed password for root from 165.154.1.112 port 61182 ssh2
2026-10-27T22:12:39.600551+02:00 serengeti sshd-session[668707]: Failed password for root from 165.154.1.112 port 61054 ssh2
2026-10-27T22:16:23.329985+02:00 serengeti sshd-session[669281]: Invalid user cloud from 165.154.1.112 port 13410
2026-10-27T22:16:23.331558+02:00 serengeti sshd-session[669281]: Failed password for invalid user cloud from 165.154.1.112 port 13410 ssh2
2026-10-27T22:19:45.017985+02:00 serengeti sshd-session[669589]: Failed password for root from 165.154.1.112 port 28798 ssh2
...
show less
[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evide ...
show more[EmExpress] Auto banned by Fail2Ban. Reason: SSH brute force / repeated failed login attempts. Evidence:
Oct 27 19:35:39 emexpress sshd[81427]: Failed password for root from 165.154.1.112 port 60552 ssh2
Oct 27 19:37:30 emexpress sshd[81482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.1.112 user=root
Oct 27 19:37:32 emexpress sshd[81482]: Failed password for root from 165.154.1.112 port 33460 ssh2
show less
2026-10-27T19:59:43.778660+01:00 vmd177327 sshd-session[1642917]: Failed password for root from 165. ...
show more2026-10-27T19:59:43.778660+01:00 vmd177327 sshd-session[1642917]: Failed password for root from 165.154.1.112 port 35486 ssh2
2026-10-27T20:01:33.320074+01:00 vmd177327 sshd-session[1643799]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.1.112 user=root
2026-10-27T20:01:35.535236+01:00 vmd177327 sshd-session[1643799]: Failed password for root from 165.154.1.112 port 22330 ssh2
...
show less
Blocked by https://aegis.hr — Fail2ban IP Ban - (MITRE T1110.001), 2 attempts, Period: 2026-10-27 18 ...
show moreBlocked by https://aegis.hr — Fail2ban IP Ban - (MITRE T1110.001), 2 attempts, Period: 2026-10-27 18:27:36 to 2026-10-27 18:27:36
show less
