This IP address has been reported a total of
44
times from
39 distinct
sources.
158.160.153.102 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
France
with 17
reports;
Germany
with 5
reports;
United States of America
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
40
times;
SSH
38
times;
Hacking
7
times;
Port Scan
4
times;
Exploited Host
3
times;
Other
9
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard ...
show moreSSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.
show less
Hacking
Brute-Force
Exploited Host
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured server. Multiple failed aut ...
show moreRepeated SSH brute force and user enumeration attempts against a secured server. Multiple failed authentication attempts from this IP across an extended period.
show less
This IP address carried out 25 port scanning attempts on 14-10-2026. For more information or to repo ...
show moreThis IP address carried out 25 port scanning attempts on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
This IP address carried out 5 SSH credential attack (attempts) on 14-10-2026. For more information o ...
show moreThis IP address carried out 5 SSH credential attack (attempts) on 14-10-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-10-14T13:03:39.471581+02:00 hera sshd[4043439]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-10-14T13:03:39.471581+02:00 hera sshd[4043439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.160.153.102
2026-10-14T13:03:41.832074+02:00 hera sshd[4043439]: Failed password for invalid user vps from 158.160.153.102 port 36354 ssh2
2026-10-14T13:03:44.352567+02:00 hera sshd[4043441]: Invalid user ftp from 158.160.153.102 port 37526
2026-10-14T13:03:44.397159+02:00 hera sshd[4043441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.160.153.102
2026-10-14T13:03:46.110380+02:00 hera sshd[4043441]: Failed password for invalid user ftp from 158.160.153.102 port 37526 ssh2
...
show less
Single SSH session with creds ubuntu/Ubuntu@1234. Attacker checked system info (uname -a), CPU count ...
show moreSingle SSH session with creds ubuntu/Ubuntu@1234. Attacker checked system info (uname -a), CPU count, and top processes, then searched writable locations and changed to /tmp. Dropped /tmp/w.sh (script, 1.4 KB, sha256:bc36e729c6463e7120677c0d59b9d793401b320520201043048577d4d94cee28), made it executable, and attempted persistence by appending an @reboot crontab entry for /tmp/w.sh with arguments "astats" "netai" "kstats" and "ssh 2 az". No lateral movement observed.
show less
2026-10-14T12:18:33.290498+02:00 vmi768479 sshd[3915996]: Connection closed by authenticating user r ...
show more2026-10-14T12:18:33.290498+02:00 vmi768479 sshd[3915996]: Connection closed by authenticating user root 158.160.153.102 port 44392 [preauth]
2026-10-14T12:18:33.872504+02:00 vmi768479 sshd[3915998]: Invalid user vps from 158.160.153.102 port 44400
2026-10-14T12:18:33.976486+02:00 vmi768479 sshd[3915998]: Connection closed by invalid user vps 158.160.153.102 port 44400 [preauth]
...
show less
Oct 14 12:02:59 lnxmail62 sshd[3713743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreOct 14 12:02:59 lnxmail62 sshd[3713743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.160.153.102 user=root
Oct 14 12:03:01 lnxmail62 sshd[3713743]: Failed password for root from 158.160.153.102 port 53330 ssh2
Oct 14 12:03:02 lnxmail62 sshd[3713844]: Invalid user vps from 158.160.153.102 port 53336
Oct 14 12:03:03 lnxmail62 sshd[3713844]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.160.153.102
Oct 14 12:03:05 lnxmail62 sshd[3713844]: Failed password for invalid user vps from 158.160.153.102 port 53336 ssh2
...
show less
