UFW BLOCK Report:
Total attempts: 12
Top ports and details:
- Port 22 (12x): SSH Brute-Force ( ...
show moreUFW BLOCK Report:
Total attempts: 12
Top ports and details:
- Port 22 (12x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 154.8.140.99
| this report is autogenerated by ZIME Cloud
show less
2026-07-07T18:53:16.658137-05:00 dev-202409121749-inst sshd[2141684]: Invalid user cloud from 154.8. ...
show more2026-07-07T18:53:16.658137-05:00 dev-202409121749-inst sshd[2141684]: Invalid user cloud from 154.8.140.99 port 49966
2026-07-07T18:53:25.499957-05:00 dev-202409121749-inst sshd[2141693]: Invalid user test from 154.8.140.99 port 54320
2026-07-07T18:53:45.492134-05:00 dev-202409121749-inst sshd[2141705]: Invalid user guest from 154.8.140.99 port 34154
2026-07-07T18:53:51.845367-05:00 dev-202409121749-inst sshd[2141712]: Invalid user postgres from 154.8.140.99 port 37684
...
show less
2026-07-06T13:14:35.480121+00:00 nbg01-02-mon sshd[526046]: pam_unix(sshd:auth): authentication fail ...
show more2026-07-06T13:14:35.480121+00:00 nbg01-02-mon sshd[526046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.140.99
2026-07-06T13:14:37.813991+00:00 nbg01-02-mon sshd[526046]: Failed password for invalid user postgres from 154.8.140.99 port 57580 ssh2
2026-07-06T13:14:40.336404+00:00 nbg01-02-mon sshd[526048]: Invalid user testuser from 154.8.140.99 port 35390
...
show less
2026-07-06T20:52:53.047188+08:00 *hostname* sshd-session[1974059]: Invalid user moxa from 154.8.140. ...
show more2026-07-06T20:52:53.047188+08:00 *hostname* sshd-session[1974059]: Invalid user moxa from 154.8.140.99 port 53660
2026-07-06T20:52:57.330598+08:00 *hostname* sshd-session[1974064]: Connection from 154.8.140.99 port 54850 on 157.90.9.74 port 22 rdomain ""
2026-07-06T20:52:58.763761+08:00 *hostname* sshd-session[1974064]: Invalid user user from 154.8.140.99 port 54850
2026-07-06T20:53:00.067189+08:00 *hostname* sshd-session[1974066]: Connection from 154.8.140.99 port 57902 on 157.90.9.74 port 22 rdomain ""
2026-07-06T20:53:00.529401+08:00 *hostname* sshd-session[1974066]: Invalid user dspace from 154.8.140.99 port 57902
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: fail2ban_ban. Sources: fail2ban. First seen: 2026-07-06. Risk score: 20/100.
show less
Jul 6 05:55:16 plesk sshd-session[1482497]: Failed password for invalid user mcserver from 154.8.14 ...
show moreJul 6 05:55:16 plesk sshd-session[1482497]: Failed password for invalid user mcserver from 154.8.140.99 port 39650 ssh2
Jul 6 05:55:21 plesk sshd-session[1482590]: Invalid user admin from 154.8.140.99 port 42698
Jul 6 05:55:21 plesk sshd-session[1482590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.140.99
Jul 6 05:55:23 plesk sshd-session[1482590]: Failed password for invalid user admin from 154.8.140.99 port 42698 ssh2
Jul 6 05:55:34 plesk sshd-session[1482629]: Invalid user testuser from 154.8.140.99 port 48096
...
show less
Brute-Force
SSH
Anonymous
2026-07-06T03:43:54.998801+00:00 hel01-01-oc sshd[642499]: Invalid user git from 154.8.140.99 port 5 ...
show more2026-07-06T03:43:54.998801+00:00 hel01-01-oc sshd[642499]: Invalid user git from 154.8.140.99 port 53816
2026-07-06T03:43:55.223953+00:00 hel01-01-oc sshd[642499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.8.140.99
2026-07-06T03:43:57.336329+00:00 hel01-01-oc sshd[642499]: Failed password for invalid user git from 154.8.140.99 port 53816 ssh2
...
show less
2026-07-06T03:04:41.080134+00:00 MailServer-Slave sshd[964372]: Failed password for root from 154.8. ...
show more2026-07-06T03:04:41.080134+00:00 MailServer-Slave sshd[964372]: Failed password for root from 154.8.140.99 port 49836 ssh2
2026-07-06T03:04:44.715176+00:00 MailServer-Slave sshd[964374]: Invalid user git from 154.8.140.99 port 53138
...
show less
Brute-Force
SSH
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩