This IP address has been reported a total of
164
times from
103 distinct
sources.
217.154.148.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [nx-infrastructure]: Brute-force attack detected on 22/SSH
• Credentials: root:a123123, ass ...
show moreHoneypot [nx-infrastructure]: Brute-force attack detected on 22/SSH
• Credentials: root:a123123, assistant:assistant
• Number of login attempts: 2
• Client: SSH-2.0-libssh_0.9.6
Reported by: Justin F.
show less
2026-06-01T18:45:22.052724+02:00 jabber-host01.talk.srvfarm.net sshd[115757]: Invalid user peertube ...
show more2026-06-01T18:45:22.052724+02:00 jabber-host01.talk.srvfarm.net sshd[115757]: Invalid user peertube from 217.154.148.42 port 37318
2026-06-01T18:45:22.333802+02:00 jabber-host01.talk.srvfarm.net sshd[115757]: Disconnected from invalid user peertube 217.154.148.42 port 37318 [preauth]
2026-06-01T18:48:25.580897+02:00 jabber-host01.talk.srvfarm.net sshd[115833]: Disconnected from authenticating user root 217.154.148.42 port 46870 [preauth]
2026-06-01T18:51:36.244301+02:00 jabber-host01.talk.srvfarm.net sshd[115942]: Invalid user tobi from 217.154.148.42 port 38328
2026-06-01T18:51:36.276751+02:00 jabber-host01.talk.srvfarm.net sshd[115942]: Disconnected from invalid user tobi 217.154.148.42 port 38328 [preauth]
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-06-01T23:30:56.720342 mail.atmatech.id sshd[972784]: Failed password for root from 217.154.148. ...
show more2026-06-01T23:30:56.720342 mail.atmatech.id sshd[972784]: Failed password for root from 217.154.148.42 port 42898 ssh2
2026-06-01T23:34:04.506167 mail.atmatech.id sshd[975936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.154.148.42 user=root
2026-06-01T23:34:07.108746 mail.atmatech.id sshd[975936]: Failed password for root from 217.154.148.42 port 48584 ssh2
...
show less
2026-06-01T15:29:34.199904+00:00 seguros-proxy sshd[2318236]: Invalid user ftpuser from 217.154.148. ...
show more2026-06-01T15:29:34.199904+00:00 seguros-proxy sshd[2318236]: Invalid user ftpuser from 217.154.148.42 port 40290
2026-06-01T15:32:47.080053+00:00 seguros-proxy sshd[2320161]: Invalid user ftpuser from 217.154.148.42 port 59390
2026-06-01T15:35:42.799038+00:00 seguros-proxy sshd[2322158]: Invalid user developer from 217.154.148.42 port 56806
...
show less
2026-06-01T17:25:18.347223+02:00 ns1..de sshd-session[177511]: Disconnected from authenticating user ...
show more2026-06-01T17:25:18.347223+02:00 ns1..de sshd-session[177511]: Disconnected from authenticating user root 217.154.148.42 port 32966 [preauth]
2026-06-01T17:30:35.647902+02:00 ns1..de sshd-session[177835]: Invalid user ftpuser from 217.154.148.42 port 51160
2026-06-01T17:30:35.668643+02:00 ns1..de sshd-session[177835]: Disconnected from invalid user ftpuser 217.154.148.42 port 51160 [preauth]
show less
Jun 1 18:01:12 www9 sshd[1059485]: Failed password for invalid user user2 from 217.154.148.42 port ...
show moreJun 1 18:01:12 www9 sshd[1059485]: Failed password for invalid user user2 from 217.154.148.42 port 43754 ssh2
Jun 1 18:04:23 www9 sshd[1059590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.154.148.42 user=root
Jun 1 18:04:25 www9 sshd[1059590]: Failed password for root from 217.154.148.42 port 53416 ssh2
...
show less
Brute-Force
SSH
Showing 121 to
135
of 164 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩