JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

94.154.172.29

Neutral Activity

Abuse Confidence Score

0% Low Risk

54 reports

42 reporters · latest 3 months ago

ISP: IP Vendetta Inc.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS209101
Domain Name: ipvendetta.com
Country: 🇩🇪 Germany
City: Koln, North Rhine-Westphalia

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

94.154.172.29 has been reported 54 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

54 from 42 distinct reporters

First reported

April 21st 2026

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-08-01 18:17:32 UTC · (3 months ago)	ICS Labs identified 94.154.172.29 as a malicious indicator from threat intelligence.	Hacking
🇧🇷 ICS Labs	2026-05-20 13:02:11 UTC · (5 months ago)	ICS Labs identified 94.154.172.29 as a malicious indicator from threat intelligence.	Hacking
🇹🇷 realkage	2026-05-01 04:48:00 UTC · (6 months ago)	IP address 94.154.172.29 is currently resolving for betlivo-gir.it.com, a Google-indexed BetLivo phishing / SEO poisoning redirector.	Fraud Orders Web Spam Web App Attack Phishing
🇨🇳 ThreatBook.io	2026-04-23 23:52:54 UTC · (6 months ago)	ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/94.154.172.29	SSH
🇺🇸 bigscoots.com	2026-04-23 02:33:30 UTC · (6 months ago)	94.154.172.29 (SC/Seychelles/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 22 21:33:11 13959 sshd[20440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ... show more 94.154.172.29 (SC/Seychelles/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 22 21:33:11 13959 sshd[20440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.154.172.29 user=root Apr 22 21:08:06 13959 sshd[16668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.20.25 user=root Apr 22 21:08:08 13959 sshd[16668]: Failed password for root from 209.38.20.25 port 56350 ssh2 Apr 22 21:15:35 13959 sshd[17732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.20.25 user=root Apr 22 21:14:34 13959 sshd[17573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.38.20.25 user=root Apr 22 21:14:36 13959 sshd[17573]: Failed password for root from 209.38.20.25 port 53610 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇺🇸 Ferron	2026-04-23 01:50:54 UTC · (6 months ago)	2026-04-23T01:46:06.369257+00:00 mail-us.ferronweb.org sshd-session[3906045]: Invalid user test from 94.154.172.29 port 40360 2026-04-23T01:47:12.300480+00:00 mail-us.ferronweb.org sshd-session[3906154]: Invalid user teamspeak from 94.154.172.29 port ... show more 2026-04-23T01:46:06.369257+00:00 mail-us.ferronweb.org sshd-session[3906045]: Invalid user test from 94.154.172.29 port 40360 2026-04-23T01:47:12.300480+00:00 mail-us.ferronweb.org sshd-session[3906154]: Invalid user teamspeak from 94.154.172.29 port 40456 2026-04-23T01:48:13.689457+00:00 mail-us.ferronweb.org sshd-session[3906263]: Invalid user ubuntu from 94.154.172.29 port 40546 2026-04-23T01:49:14.585247+00:00 mail-us.ferronweb.org sshd-session[3906364]: Invalid user ubuntu from 94.154.172.29 port 40636 2026-04-23T01:50:48.038703+00:00 mail-us.ferronweb.org sshd-session[3906531]: Invalid user steam from 94.154.172.29 port 40726 ... show less	Brute-Force SSH
🇮🇹 emernetsrl	2026-04-23 00:47:34 UTC · (6 months ago)	2026-04-23T01:47:32.894793+01:00 pve sshd-session[2706520]: Failed password for root from 94.154.172.29 port 51748 ssh2 2026-04-23T01:47:33.850318+01:00 pve sshd-session[2706520]: Disconnected from authenticating user root 94.154.172.29 port 51748 [p ... show more 2026-04-23T01:47:32.894793+01:00 pve sshd-session[2706520]: Failed password for root from 94.154.172.29 port 51748 ssh2 2026-04-23T01:47:33.850318+01:00 pve sshd-session[2706520]: Disconnected from authenticating user root 94.154.172.29 port 51748 [preauth] ... show less	Brute-Force SSH
🇩🇪 ghostwarriors	2026-04-22 23:20:23 UTC · (6 months ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇬🇧 ededited	2026-04-22 23:17:32 UTC · (6 months ago)	Apr 23 00:13:32 accessallareas sshd[491900]: Invalid user ubuntu from 94.154.172.29 port 54774 Apr 23 00:15:39 accessallareas sshd[491927]: Invalid user test from 94.154.172.29 port 54930 Apr 23 00:17:32 accessallareas sshd[492182]: Invalid user team ... show more Apr 23 00:13:32 accessallareas sshd[491900]: Invalid user ubuntu from 94.154.172.29 port 54774 Apr 23 00:15:39 accessallareas sshd[491927]: Invalid user test from 94.154.172.29 port 54930 Apr 23 00:17:32 accessallareas sshd[492182]: Invalid user teamspeak from 94.154.172.29 port 55082 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-22 23:14:20 UTC · (6 months ago)	(sshd) Failed SSH login from 94.154.172.29 (SC/Seychelles/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 22 17:49:24 15070 sshd[26943]: Invalid user uploaduser from 94.154.172.29 port 49568 Apr 22 17:49:26 15070 sshd ... show more (sshd) Failed SSH login from 94.154.172.29 (SC/Seychelles/-): 5 in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_SSHD; Logs: Apr 22 17:49:24 15070 sshd[26943]: Invalid user uploaduser from 94.154.172.29 port 49568 Apr 22 17:49:26 15070 sshd[26943]: Failed password for invalid user uploaduser from 94.154.172.29 port 49568 ssh2 Apr 22 18:13:04 15070 sshd[29360]: Invalid user admin from 94.154.172.29 port 49716 Apr 22 18:13:06 15070 sshd[29360]: Failed password for invalid user admin from 94.154.172.29 port 49716 ssh2 Apr 22 18:14:02 15070 sshd[29455]: Invalid user ubuntu from 94.154.172.29 port 49812 show less	Brute-Force SSH
🇺🇸 viperishmonkey	2026-04-22 18:04:48 UTC · (6 months ago)	Apr 22 13:57:13 uranus sshd[867918]: Invalid user pjsuser from 94.154.172.29 port 59324 Apr 22 13:57:13 uranus sshd[867918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.154.172.29 Apr 22 13:57:13 uranus ... show more Apr 22 13:57:13 uranus sshd[867918]: Invalid user pjsuser from 94.154.172.29 port 59324 Apr 22 13:57:13 uranus sshd[867918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.154.172.29 Apr 22 13:57:13 uranus sshd[867918]: Invalid user pjsuser from 94.154.172.29 port 59324 Apr 22 13:57:15 uranus sshd[867918]: Failed password for invalid user pjsuser from 94.154.172.29 port 59324 ssh2 Apr 22 13:58:12 uranus sshd[867924]: Invalid user drivetest from 94.154.172.29 port 59408 Apr 22 13:58:12 uranus sshd[867924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.154.172.29 Apr 22 13:58:12 uranus sshd[867924]: Invalid user drivetest from 94.154.172.29 port 59408 Apr 22 13:58:14 uranus sshd[867924]: Failed password for invalid user drivetest from 94.154.172.29 port 59408 ssh2 Apr 22 13:59:09 uranus sshd[867928]: Invalid user admin1234 from 94.154.172.29 port 59502 Apr 22 13:59:09 uranus sshd[867928]: pam_unix( ... show less	Brute-Force SSH
🇺🇸 vandomatos	2026-04-22 17:49:14 UTC · (6 months ago)	Apr 22 09:02:47 servidor sshd[1607799]: Failed password for root from 94.154.172.29 port 42862 ssh2 Apr 22 09:02:48 servidor sshd[1607799]: Disconnected from authenticating user root 94.154.172.29 port 42862 [preauth] Apr 22 10:49:05 servidor sshd[16 ... show more Apr 22 09:02:47 servidor sshd[1607799]: Failed password for root from 94.154.172.29 port 42862 ssh2 Apr 22 09:02:48 servidor sshd[1607799]: Disconnected from authenticating user root 94.154.172.29 port 42862 [preauth] Apr 22 10:49:05 servidor sshd[1617836]: Invalid user frappe from 94.154.172.29 port 43080 ... show less	Brute-Force SSH
🇺🇸 shaunc	2026-04-22 17:49:04 UTC · (6 months ago)	Apr 22 11:01:22 [redacted] sshd[28951]: Failed password for root from 94.154.172.29 port 50904 ssh2 Apr 22 11:01:22 [redacted] sshd[28951]: Disconnected from 94.154.172.29 port 50904 [preauth] Apr 22 12:49:02 [redacted] sshd[29911]: Invalid user frap ... show more Apr 22 11:01:22 [redacted] sshd[28951]: Failed password for root from 94.154.172.29 port 50904 ssh2 Apr 22 11:01:22 [redacted] sshd[28951]: Disconnected from 94.154.172.29 port 50904 [preauth] Apr 22 12:49:02 [redacted] sshd[29911]: Invalid user frappe from 94.154.172.29 port 51186 show less	Brute-Force SSH
🇺🇸 drewf.ink	2026-04-22 15:39:56 UTC · (6 months ago)	[15:39] Attempted SSH login on port 2222 with credentials teste:1234567	Brute-Force SSH
🇩🇪 Panter	2026-04-22 15:25:59 UTC · (6 months ago)	Bruteforce detected by fail2ban SSH	Brute-Force SSH

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇲🇦 196.75.27.92

🇩🇪 193.233.85.178

🇨🇳 115.190.192.114

🇮🇹 87.10.172.87

🇯🇵 34.104.237.37

🇸🇬 2605:6441:3000:7072:eee7:a7ff:fe19:24fc

🇺🇸 2604:a940:300:5b6:0:12::

🇬🇧 209.97.133.208

🇧🇷 187.92.28.238

🇺🇸 162.216.150.14

🇺🇸 147.185.132.18

🇮🇩 103.186.1.91

🇺🇸 20.118.224.98

🇮🇩 202.65.238.101

🇺🇸 184.178.56.77

🇯🇴 86.108.32.57

🇪🇸 84.127.59.9

🇫🇮 80.223.200.184

🇺🇸 66.132.159.37

🇫🇷 51.254.222.106