JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

154.53.166.5

Neutral Activity

Abuse confidence score ?

0% Low Risk

24 reports

19 reporters · latest 2 years ago

ISP	Kuzey Veri Merkezi Anonim Sirketi
Usage Type	Fixed Line ISP
ASN	AS174
Hostname(s)	hosted-by.hzd.com.tr
Domain Name	kuzeydc.com
Country	🇹🇷 Turkey
City	Cekmekoy, Istanbul

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

154.53.166.5 has been reported 24 times. The most recent report is from 2 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 154.53.166.5

Export CSV

This IP address has been reported a total of 24 times from 19 distinct sources. 154.53.166.5 was first reported on June 30th 2024, and the most recent report was 2 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
Anonymous	2024-07-01 22:41:08 (2 years ago)	port 23	Port Scan
🇩🇪 formality	2024-07-01 19:28:14 (2 years ago)	Invalid user deployer from 154.53.166.5 port 49622	Brute-Force SSH
🇺🇸 bigscoots.com	2024-07-01 18:18:35 (2 years ago)	(sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; ... show more (sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 1 18:17:53 22616 sshd[3930]: Invalid user test from 154.53.166.5 port 42152 Jul 1 18:17:55 22616 sshd[3930]: Failed password for invalid user test from 154.53.166.5 port 42152 ssh2 Jul 1 18:18:06 22616 sshd[3986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root Jul 1 18:18:08 22616 sshd[3986]: Failed password for root from 154.53.166.5 port 44088 ssh2 Jul 1 18:18:18 22616 sshd[3993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root show less	Brute-Force SSH
🇺🇸 bigscoots.com	2024-07-01 16:48:53 (2 years ago)	(sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; ... show more (sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 1 11:48:20 17907 sshd[6914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root Jul 1 11:48:23 17907 sshd[6914]: Failed password for root from 154.53.166.5 port 51984 ssh2 Jul 1 11:48:32 17907 sshd[6922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root Jul 1 11:48:35 17907 sshd[6922]: Failed password for root from 154.53.166.5 port 42060 ssh2 Jul 1 11:48:44 17907 sshd[6928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root show less	Brute-Force SSH
🇧🇾 sashan	2024-07-01 15:18:02 (2 years ago)	2024-07-01T18:18:01.659096+03:00 gate kernel: [199351.282943] nftables: JAIL-TELNET IN=wan OUT= MAC= ... show more 2024-07-01T18:18:01.659096+03:00 gate kernel: [199351.282943] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=154.53.166.5 DST=xxx.xxx.xxx.xxx LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=54321 PROTO=TCP SPT=50399 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇺🇸 bigscoots.com	2024-07-01 12:57:30 (2 years ago)	(sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; ... show more (sshd) Failed SSH login from 154.53.166.5 (TR/Turkey/hosted-by.hzd.com.tr): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jul 1 07:56:59 13662 sshd[2277]: Invalid user dock from 154.53.166.5 port 44976 Jul 1 07:57:01 13662 sshd[2277]: Failed password for invalid user dock from 154.53.166.5 port 44976 ssh2 Jul 1 07:57:11 13662 sshd[2335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root Jul 1 07:57:13 13662 sshd[2335]: Failed password for root from 154.53.166.5 port 56402 ssh2 Jul 1 07:57:23 13662 sshd[2345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root show less	Brute-Force SSH
🇩🇪 mxpgmbh	2024-07-01 12:47:23 (2 years ago)	2024-07-01T14:46:59.372056+02:00 ** sshd[126581]: Failed password for root from 154.53.166.5 port ... show more 2024-07-01T14:46:59.372056+02:00 sshd[126581]: Failed password for root from 154.53.166.5 port 48396 ssh2 2024-07-01T14:47:09.201949+02:00 sshd[126790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root 2024-07-01T14:47:11.395353+02:00 sshd[126790]: Failed password for root from 154.53.166.5 port 50100 ssh2 2024-07-01T14:47:21.194144+02:00 sshd[126792]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.53.166.5 user=root 2024-07-01T14:47:23.036136+02:00 ** sshd[126792]: Failed password for root from 154.53.166.5 port 47662 ssh2 show less	Brute-Force SSH
🇧🇷 diego	2024-07-01 12:11:46 (2 years ago)	Events: TCP SYN Discovery or Flooding, Seen 4 times in the last 10800 seconds	DDoS Attack
🇷🇸 bokili88	2024-07-01 06:01:00 (2 years ago)	024-07-01 08:00:41 - GUI-MODE - LOGIN-ERROR: DEFEND-ATTACKS: IP:[154.53.166.5] has surpassed max num ... show more 024-07-01 08:00:41 - GUI-MODE - LOGIN-ERROR: DEFEND-ATTACKS: IP:[154.53.166.5] has surpassed max number of login attempts:[5] 2024-07-01 08:00:32 - GUI-MODE - LOGIN-ERROR: DEFEND-ATTACKS: IP:[154.53.166.5] has surpassed max number of login attempts:[5] 2024-07-01 08:00:22 - GUI-MODE - LOGIN-ERROR: DEFEND-ATTACKS: IP:[154.53.166.5] has surpassed max number of login attempts:[5] show less	Port Scan Brute-Force SSH
🇺🇸 RAP	2024-07-01 05:59:38 (2 years ago)	2024-07-01 05:59:38 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇺🇸 en0	2024-07-01 02:32:17 (2 years ago)	2024-06-30 21:32:17,537 fail2ban.actions [981]: NOTICE [sshd] Ban 154.53.166.5	Brute-Force SSH
🇩🇪 eurows.net	2024-07-01 00:58:01 (2 years ago)	Jul 1 02:54:53 hydrogen sshd[2040386]: Invalid user photo from 154.53.166.5 port 41244 Jul 1 02:55 ... show more Jul 1 02:54:53 hydrogen sshd[2040386]: Invalid user photo from 154.53.166.5 port 41244 Jul 1 02:55:12 hydrogen sshd[2040595]: Invalid user null from 154.53.166.5 port 54722 Jul 1 02:55:21 hydrogen sshd[2040597]: Invalid user natasha from 154.53.166.5 port 48620 Jul 1 02:55:49 hydrogen sshd[2040799]: Invalid user testing from 154.53.166.5 port 60504 Jul 1 02:58:00 hydrogen sshd[2041707]: Invalid user phone from 154.53.166.5 port 36360 ... show less	Brute-Force SSH
🇩🇪 Blexyel	2024-06-30 23:52:12 (2 years ago)	2024-07-01T01:51:08.007816+02:00 phoenixts-xl sshd[1031690]: Invalid user mcserver from 154.53.166.5 ... show more 2024-07-01T01:51:08.007816+02:00 phoenixts-xl sshd[1031690]: Invalid user mcserver from 154.53.166.5 port 51260 2024-07-01T01:51:17.614557+02:00 phoenixts-xl sshd[1031719]: Invalid user testuser from 154.53.166.5 port 33934 2024-07-01T01:51:44.207947+02:00 phoenixts-xl sshd[1031772]: Invalid user student from 154.53.166.5 port 58134 2024-07-01T01:52:02.566962+02:00 phoenixts-xl sshd[1031796]: Invalid user student from 154.53.166.5 port 38902 2024-07-01T01:52:12.153917+02:00 phoenixts-xl sshd[1031805]: Invalid user oracle from 154.53.166.5 port 38912 ... show less	Brute-Force SSH
🇺🇸 MPL	2024-06-30 22:30:14 (2 years ago)	tcp/23	Port Scan
🇳🇱 Erik	2024-06-30 22:03:33 (2 years ago)	(mod_security) mod_security (id:210841) triggered by 154.53.166.5 (TR/Türkiye/Istanbul/Istanbul/host ... show more (mod_security) mod_security (id:210841) triggered by 154.53.166.5 (TR/Türkiye/Istanbul/Istanbul/hosted-by.hzd.com.tr): 5 in the last 3600 secs show less	Web App Attack

Showing 1 to 15 of 24 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇨🇳 180.76.52.146

🇮🇳 103.248.120.6

🇦🇷 181.110.158.118

🇦🇺 158.178.141.16

🇨🇳 121.29.149.176

🇹🇼 118.150.142.70

🇨🇳 117.81.212.152

🇹🇼 114.46.182.154

🇳🇱 109.160.32.34

🇭🇰 94.190.229.193

🇺🇦 91.208.194.40

🇹🇷 88.249.195.23

🇧🇬 82.147.142.205

🇸🇬 45.78.224.85

🇧🇪 34.140.134.141

🇺🇸 34.19.91.56

🇬🇧 213.166.84.42

🇧🇷 187.110.238.50

🇸🇬 184.168.123.171

🇮🇳 103.189.244.58