154.124.102.166

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36

SSH brute force

Confirmed malicious by STILWaters CTI platform (score=100, sources=1)

SSH brute force

ThreatBook Intelligence: Dynamic IP more details on http://threatbook.io/ip/154.124.102.166

Invalid user dev from 154.124.102.166 port 56500

Detected SSH brute force attack from 3 different servers

Invalid user ubuntu from 154.124.102.166 port 54099

154.124.102.166 (SN/Senegal/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 9 00:30:05 15145 sshd[3063]: Failed password for root from 168.138.213.115 port 39820 ssh2 ... show more 154.124.102.166 (SN/Senegal/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 9 00:30:05 15145 sshd[3063]: Failed password for root from 168.138.213.115 port 39820 ssh2 Apr 9 00:30:03 15145 sshd[3063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.138.213.115 user=root Apr 9 00:01:53 15145 sshd[31457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.124.102.166 user=root Apr 9 00:01:55 15145 sshd[31457]: Failed password for root from 154.124.102.166 port 58868 ssh2 Apr 9 00:32:23 15145 sshd[3447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.83.126.184 user=root IP Addresses Blocked: 168.138.213.115 (JP/Japan/-) show less

35 invalid SSH login attempts from 154.124.102.166 in the last 1.7 hours

sshd: 2 attempts from 154.124.102.166 on node: sgp02

2026-04-09T05:03:06.247111 VPS22519220 sshd[1398458]: Failed password for root from 154.124.102.166 port 38604 ssh2 2026-04-09T05:12:16.579929 VPS22519220 sshd[1399636]: Invalid user dd from 154.124.102.166 port 32960 ...

2026-04-09T06:58:23.562670+02:00 webmail sshd[3552744]: Invalid user ubuntu from 154.124.102.166 port 55081 2026-04-09T07:11:19.732110+02:00 webmail sshd[3556169]: Invalid user ubuntu from 154.124.102.166 port 42881 ...

2026-04-09T11:07:32.228190+06:00 zabbix sshd[26553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.124.102.166 2026-04-09T11:07:34.147834+06:00 zabbix sshd[26553]: Failed password for invalid user test1 f ... show more 2026-04-09T11:07:32.228190+06:00 zabbix sshd[26553]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.124.102.166 2026-04-09T11:07:34.147834+06:00 zabbix sshd[26553]: Failed password for invalid user test1 from 154.124.102.166 port 56120 ssh2 ... show less

Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.