This IP address has been reported a total of
63
times from
50 distinct
sources.
102.220.161.174 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 18
reports;
France
with 11
reports;
Japan
with 6
reports.
Over the same time period, 102.220.161.174 has changed
country of origin 2 times.
The most common categories in these recent reports were:
SSH
51
times;
Brute-Force
51
times;
Port Scan
10
times;
Hacking
3
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute-force: 3 failed login attempts against a key-only server (blocked by fail2ban).
Brute-Force
SSH
Anonymous
unsolicited connect TCP dport 44444 (sport 9020)
Hacking
Anonymous
UFW blocked 9 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 4153,5269,7103, ...
show moreUFW blocked 9 unsolicited TCP packet(s) in last 65 minutes ago. Destination port(s): 4153,5269,7103,9976,19260,34874,38274,44444,48293. Server has no public-facing services; all blocks are uninvited.
show less
2026-10-10T03:14:50.318760+00:00 my-vps sshd-session[278888]: Invalid user packer from 102.220.161.1 ...
show more2026-10-10T03:14:50.318760+00:00 my-vps sshd-session[278888]: Invalid user packer from 102.220.161.174 port 62730
2026-10-10T03:36:01.578977+00:00 my-vps sshd-session[278916]: Invalid user user from 102.220.161.174 port 53722
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
2026-10-10T03:45:17.053157+02:00 rc01 sshd[3468276]: Invalid user k8scert from 102.220.161.174 port ...
show more2026-10-10T03:45:17.053157+02:00 rc01 sshd[3468276]: Invalid user k8scert from 102.220.161.174 port 27674
2026-10-10T03:45:17.060402+02:00 rc01 sshd[3468276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.220.161.174
2026-10-10T03:45:18.985374+02:00 rc01 sshd[3468276]: Failed password for invalid user k8scert from 102.220.161.174 port 27674 ssh2
...
show less
2026-10-10T02:37:55.865266+02:00 mtrtools sshd[2369648]: Invalid user q from 102.220.161.174 port 60 ...
show more2026-10-10T02:37:55.865266+02:00 mtrtools sshd[2369648]: Invalid user q from 102.220.161.174 port 60220
2026-10-10T02:41:17.047700+02:00 mtrtools sshd[2372229]: Invalid user admin from 102.220.161.174 port 11106
2026-10-10T02:50:35.849954+02:00 mtrtools sshd[2379678]: Invalid user frances from 102.220.161.174 port 19866
...
show less
Honeypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 ...
show moreHoneypot Finding: repeated TCP service probing on TCP/22 (SSH); 2 application-level events across 2 source port(s). Sensor(s): Cowrie.
show less
Oct 10 01:28:14 www sshd\[23558\]: Invalid user SJ19 from 102.220.161.174
Brute-Force
SSH
Anonymous
Oct 10 07:22:23 vm50 sshd[107443]: Invalid user dirmngr from 102.220.161.174 port 32988
Oct 10 07:22 ...
show moreOct 10 07:22:23 vm50 sshd[107443]: Invalid user dirmngr from 102.220.161.174 port 32988
Oct 10 07:22:23 vm50 sshd[107443]: Disconnected from invalid user dirmngr 102.220.161.174 port 32988 [preauth]
Oct 10 07:26:49 vm50 sshd[107466]: Connection from 102.220.161.174 port 16050 on 103.3.61.195 port 22 rdomain ""
Oct 10 07:26:50 vm50 sshd[107466]: Invalid user sanam from 102.220.161.174 port 16050
Oct 10 07:26:50 vm50 sshd[107466]: Disconnected from invalid user sanam 102.220.161.174 port 16050 [preauth]
...
show less
