Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-10T17:45:44.780637 chaos.ohost.bg sshd[128142]: Invalid user user from 157.20.201.153 port 48264
2026-11-10T17:45:46.244468 chaos.ohost.bg sshd[128184]: Invalid user user from 157.20.201.153 port 48280
2026-11-10T17:45:47.699181 chaos.ohost.b ...
show more2026-11-10T17:45:44.780637 chaos.ohost.bg sshd[128142]: Invalid user user from 157.20.201.153 port 48264
2026-11-10T17:45:46.244468 chaos.ohost.bg sshd[128184]: Invalid user user from 157.20.201.153 port 48280
2026-11-10T17:45:47.699181 chaos.ohost.bg sshd[128702]: Invalid user user from 157.20.201.153 port 48286
2026-11-10T17:45:49.133104 chaos.ohost.bg sshd[130935]: Invalid user user from 157.20.201.153 port 48300
2026-11-10T17:45:50.575646 chaos.ohost.bg sshd[130958]: Invalid user user from 157.20.201.153 port 48314
...
show less
2026-11-10T08:12:00.033967+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1291658]: Failed password for root from 157.20.201.153 port 58862 ssh2
2026-11-10T08:12:02.481943+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1291686]: pam_unix(sshd:aut ...
show more2026-11-10T08:12:00.033967+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1291658]: Failed password for root from 157.20.201.153 port 58862 ssh2
2026-11-10T08:12:02.481943+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1291686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.201.153 user=root
2026-11-10T08:12:04.771607+00:00 edge-hal-ewr01.int.pdx.net.uk sshd-session[1291686]: Failed password for root from 157.20.201.153 port 58864 ssh2
...
show less
Nov 9 22:06:21 3mod sshd[1177955]: Failed password for root from 157.20.201.153 port 37228 ssh2
Nov 9 22:06:23 3mod sshd[1177961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.201.153 user=root
Nov ...
show moreNov 9 22:06:21 3mod sshd[1177955]: Failed password for root from 157.20.201.153 port 37228 ssh2
Nov 9 22:06:23 3mod sshd[1177961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.201.153 user=root
Nov 9 22:06:25 3mod sshd[1177961]: Failed password for root from 157.20.201.153 port 37236 ssh2
Nov 9 22:06:28 3mod sshd[1177998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.20.201.153 user=root
Nov 9 22:06:30 3mod sshd[1177998]: Failed password for root from 157.20.201.153 port 37926 ssh2
...
show less
2026-11-09T20:49:12.792292+00:00 fra-mc-1 sshd[3143823]: Invalid user user from 157.20.201.153 port 47718
2026-11-09T20:49:14.279022+00:00 fra-mc-1 sshd[3143978]: Invalid user user from 157.20.201.153 port 47720
2026-11-09T20:49:15.516128+00:00 fra-m ...
show more2026-11-09T20:49:12.792292+00:00 fra-mc-1 sshd[3143823]: Invalid user user from 157.20.201.153 port 47718
2026-11-09T20:49:14.279022+00:00 fra-mc-1 sshd[3143978]: Invalid user user from 157.20.201.153 port 47720
2026-11-09T20:49:15.516128+00:00 fra-mc-1 sshd[3144084]: Invalid user user from 157.20.201.153 port 48720
2026-11-09T20:49:16.730615+00:00 fra-mc-1 sshd[3144173]: Invalid user user from 157.20.201.153 port 48730
2026-11-09T20:49:17.972432+00:00 fra-mc-1 sshd[3144264]: Invalid user user from 157.20.201.153 port 48734
...
show less
2026-11-09T18:06:07.113866+00:00 lg-obe-sto01.pdx.net.uk sshd[2522687]: Invalid user user from 157.20.201.153 port 55220
2026-11-09T18:06:10.877048+00:00 lg-obe-sto01.pdx.net.uk sshd[2522689]: Invalid user user from 157.20.201.153 port 55226
2026-11- ...
show more2026-11-09T18:06:07.113866+00:00 lg-obe-sto01.pdx.net.uk sshd[2522687]: Invalid user user from 157.20.201.153 port 55220
2026-11-09T18:06:10.877048+00:00 lg-obe-sto01.pdx.net.uk sshd[2522689]: Invalid user user from 157.20.201.153 port 55226
2026-11-09T18:06:12.509529+00:00 lg-obe-sto01.pdx.net.uk sshd[2522692]: Invalid user user from 157.20.201.153 port 55228
...
show less
Brute-Force
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd-session[37509]: Connection closed by authenticating user root 157.20.201.153 port 53130 [preauth];sshd-session[37511]: Connection closed by authenticating user root 157.20.201.153 port 53134 [preauth]