This IP address has been reported a total of
22
times from
14 distinct
sources.
178.46.144.234 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Unauthorized SSH access: 1 login attempt in the last 24 hours. After logging in it ran 8 commands in ...
show moreUnauthorized SSH access: 1 login attempt in the last 24 hours. After logging in it ran 8 commands in 1 session: system reconnaissance, persistence attempts.
show less
Single SSH login using ftpuser/ftpuser from SSH-2.0-Go. The session ran host profiling and then stag ...
show moreSingle SSH login using ftpuser/ftpuser from SSH-2.0-Go. The session ran host profiling and then staged persistence in /tmp. Commands observed: uname -a, cat /proc/cpuinfo | grep processor | wc -l, ps -eo pid,pcpu,comm --sort=-pcpu | head -n 10, and a directory check across /dev/shm /tmp /var/run /mnt /root /. It then created /tmp/w.sh with cd "/tmp" && if [ ! -f "w.sh" ]; then cat > "w.sh" && chmod +x w.sh; fi. Persistence was prepared with a crontab check/add for @reboot entries referencing /tmp/w.sh and arguments "astats" "netai" "kstats" "ssh 2 az". No downloads, dropped artifacts, lateral movement, or exfiltration were observed.
show less
Brute-Force
SSH
Anonymous
2026-10-24T07:52:28.358647+02:00 vps kernel: [9191913.320780] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-24T07:52:28.358647+02:00 vps kernel: [9191913.320780] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=178.46.144.234 DST=54.37.14.118 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=32983 DF PROTO=TCP SPT=49556 DPT=2 WINDOW=29200 RES=0x00 SYN URGP=0
...
show less