This IP address has been reported a total of
334
times from
62 distinct
sources.
154.119.166.18 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 6
reports;
Germany
with 3
reports;
United States of America
with 3
reports.
The most common categories in these recent reports were:
Port Scan
15
times;
Brute-Force
6
times;
Hacking
5
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated scan detection against redacted protected targets. Hits=4; port 445 proto 6 detection hone ...
show moreAutomated scan detection against redacted protected targets. Hits=4; port 445 proto 6 detection honeypot_tcp; port 445 proto 6 detection honeypot_tcp
show less
Port Scan
Anonymous
2026-10-06T14:02:32.568593+02:00 vps kernel: [7658934.340663] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=f ...
show more2026-10-06T14:02:32.568593+02:00 vps kernel: [7658934.340663] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=154.119.166.18 DST=54.37.14.118 LEN=52 TOS=0x00 PREC=0x00 TTL=109 ID=32281 DF PROTO=TCP SPT=27772 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0
...
show less
🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 44868) to a p ...
show more🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 44868) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities).
show less
🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 7413) to a pa ...
show more🛡️ Honeypot [bsts-tpot-sensor]: Unsolicited SMB connection (dst port 445/tcp, src port 7413) to a passive honeypot sensor. No legitimate SMB service is exposed here; this traffic is consistent with automated internet-wide scanning or exploitation attempts targeting SMB (e.g. EternalBlue-class vulnerabilities).
show less
Unsolicited TCP connection from 154.119.166.18 to port 0 at 2026-10-01T09:44:56Z. Source IP complete ...
show moreUnsolicited TCP connection from 154.119.166.18 to port 0 at 2026-10-01T09:44:56Z. Source IP completed three-way handshake to non-public service on this host. Detected by automated intrusion monitoring.
show less
PortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no ...
show morePortSentry honeypot: unsolicited TCP connection to closed decoy port 445 (SMB) on a host running no such service. Automated port-scan detection at 2026-09-29T06:41:13Z.
show less
