This IP address carried out 2 SSH credential attack (attempts) on 05-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Honeypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-04T23:00:21Z to 2026-10-04T23:00:21Z UTC.
...
show moreHoneypot trap triggered: unsolicited TCP connection(s) to unused port(s) 2222 on a host running no such service. There is no legitimate reason to connect to these ports.
Observed 1 connection(s) from 2026-10-04T23:00:21Z to 2026-10-04T23:00:21Z UTC.
2026-10-04T23:00:21Z tcp/2222 data: SSH-2.0-OpenSSH_8.9
Connection was blocked automatically at the firewall. Reported by an automated honeypot.
show less
Oct 5 00:52:30 obsidian sshd[2061777]: error: PAM: Authentication failure for root from 31.46.229.174
Oct 5 01:00:13 obsidian sshd[2074831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.46.229.174 user ...
show moreOct 5 00:52:30 obsidian sshd[2061777]: error: PAM: Authentication failure for root from 31.46.229.174
Oct 5 01:00:13 obsidian sshd[2074831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.46.229.174 user=root
Oct 5 01:00:15 obsidian sshd[2074831]: Failed password for root from 31.46.229.174 port 36446 ssh2
...
show less
2026-10-04T18:23:34.201468-06:00 node1.us sshd-session[3159984]: Connection closed by authenticating user root 31.46.229.174 port 43244 [preauth]
2026-10-04T18:28:41.976303-06:00 node1.us sshd-session[3166149]: pam_unix(sshd:auth): authentication fai ...
show more2026-10-04T18:23:34.201468-06:00 node1.us sshd-session[3159984]: Connection closed by authenticating user root 31.46.229.174 port 43244 [preauth]
2026-10-04T18:28:41.976303-06:00 node1.us sshd-session[3166149]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.46.229.174 user=root
2026-10-04T18:28:44.260715-06:00 node1.us sshd-session[3166149]: Failed password for root from 31.46.229.174 port 38900 ssh2
...
show less
2026-10-05T00:22:51.574167+00:00 instance-20241105-1951 sshd[3177471]: Connection closed by authenticating user root 31.46.229.174 port 50414 [preauth]
...
Hacking
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
