Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 154.18.197.29:
This IP address has been reported a total of
631
times from
111 distinct
sources.
154.18.197.29 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 200
reports;
Canada
with 140
reports;
Brazil
with 125
reports.
The most common categories in these recent reports were:
SSH
607
times;
Brute-Force
607
times;
Port Scan
21
times;
IoT Targeted
7
times;
Web App Attack
4
times;
Other
6
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-14T12:45:57.407918+00:00 atlas-labs sshd[135285]: Failed password for root from 154.18.197.2 ...
show more2026-09-14T12:45:57.407918+00:00 atlas-labs sshd[135285]: Failed password for root from 154.18.197.29 port 40166 ssh2
2026-09-14T12:50:12.154052+00:00 atlas-labs sshd[135345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.18.197.29 user=root
2026-09-14T12:50:14.038254+00:00 atlas-labs sshd[135345]: Failed password for root from 154.18.197.29 port 47190 ssh2
...
show less
Connection reset by 154.18.197.29 port 51966 [preauth]
error: kex_exchange_identification: read: Con ...
show moreConnection reset by 154.18.197.29 port 51966 [preauth]
error: kex_exchange_identification: read: Connection reset by peer [preauth]
Connection reset by 154.18.197.29 port 51966 [preauth]
error: kex_exchange_identification: read: Connection reset by peer [preauth]
Connection reset by 154.18.197.29 port 42480 [preauth]
show less
Automated report: 3 SSH authentication failure events observed during the last 15 minutes against TC ...
show moreAutomated report: 3 SSH authentication failure events observed during the last 15 minutes against TCP port 22.
show less
2026-09-14T12:02:08.682146+00:00 relay-fi05 sshd-session[44769]: User root from 154.18.197.29 not al ...
show more2026-09-14T12:02:08.682146+00:00 relay-fi05 sshd-session[44769]: User root from 154.18.197.29 not allowed because none of user's groups are listed in AllowGroups
2026-09-14T12:07:00.986844+00:00 relay-fi05 sshd-session[44777]: Connection from 154.18.197.29 port 57380 on 87.58.151.218 port 22 rdomain ""
2026-09-14T12:07:20.913594+00:00 relay-fi05 sshd-session[44777]: User root from 154.18.197.29 not allowed because none of user's groups are listed in AllowGroups
2026-09-14T12:12:10.120335+00:00 relay-fi05 sshd-session[44782]: Connection from 154.18.197.29 port 60958 on 87.58.151.218 port 22 rdomain ""
2026-09-14T12:12:33.576317+00:00 relay-fi05 sshd-session[44782]: User root from 154.18.197.29 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-09-14T09:06:02.804283-03:00 dns1 sshd[5895]: Failed password for root from 154.18.197.29 port 5 ...
show more2026-09-14T09:06:02.804283-03:00 dns1 sshd[5895]: Failed password for root from 154.18.197.29 port 52362 ssh2
2026-09-14T09:06:05.768913-03:00 dns1 sshd[5895]: Connection closed by authenticating user root 154.18.197.29 port 52362 [preauth]
2026-09-14T09:11:18.249501-03:00 dns1 sshd[5928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.18.197.29 user=root
2026-09-14T09:11:20.385892-03:00 dns1 sshd[5928]: Failed password for root from 154.18.197.29 port 37412 ssh2
2026-09-14T09:11:23.773470-03:00 dns1 sshd[5928]: Connection closed by authenticating user root 154.18.197.29 port 37412 [preauth]
show less
2026-09-14T15:03:41.284478+03:00 gogo-server sshd-session[1079790]: Failed password for root from 15 ...
show more2026-09-14T15:03:41.284478+03:00 gogo-server sshd-session[1079790]: Failed password for root from 154.18.197.29 port 35720 ssh2
2026-09-14T15:08:56.102193+03:00 gogo-server sshd-session[1080614]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.18.197.29 user=root
2026-09-14T15:08:58.435620+03:00 gogo-server sshd-session[1080614]: Failed password for root from 154.18.197.29 port 48678 ssh2
...
show less
2026-09-14T12:02:44.964363ch-vmpico sshd[67804]: Failed password for root from 154.18.197.29 port 38 ...
show more2026-09-14T12:02:44.964363ch-vmpico sshd[67804]: Failed password for root from 154.18.197.29 port 38892 ssh2
2026-09-14T12:07:57.930365ch-vmpico sshd[67807]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.18.197.29 user=root
2026-09-14T12:08:00.141518ch-vmpico sshd[67807]: Failed password for root from 154.18.197.29 port 36124 ssh2
...
show less
Invalid user from 154.18.197.29 port 51266
Connection closed by invalid user 154.18.197.29 port 51 ...
show moreInvalid user from 154.18.197.29 port 51266
Connection closed by invalid user 154.18.197.29 port 51266 [preauth]
Connection closed by authenticating user root 154.18.197.29 port 39118 [preauth]
Connection closed by authenticating user root 154.18.197.29 port 60260 [preauth]
Connection closed by authenticating user root 154.18.197.29 port 54014 [preauth]
show less
2026-09-14T14:57:33.400226+03:00 adipy sshd-session[125825]: Failed password for root from 154.18.19 ...
show more2026-09-14T14:57:33.400226+03:00 adipy sshd-session[125825]: Failed password for root from 154.18.197.29 port 56818 ssh2
2026-09-14T14:57:39.378726+03:00 adipy sshd-session[125825]: Connection closed by authenticating user root 154.18.197.29 port 56818 [preauth]
2026-09-14T15:02:36.854484+03:00 adipy sshd-session[125834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.18.197.29 user=root
2026-09-14T15:02:39.162720+03:00 adipy sshd-session[125834]: Failed password for root from 154.18.197.29 port 38702 ssh2
2026-09-14T15:02:46.307784+03:00 adipy sshd-session[125834]: Connection closed by authenticating user root 154.18.197.29 port 38702 [preauth]
...
show less
