Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
Whitelisted Subnet
Whitelisted netblocks are typically owned by trusted entities, such as Google or Microsoft who
may use them for search engine spiders. However, these same entities sometimes also provide cloud
servers and mail services which are easily abused. Pay special attention when trusting or
distrusting these IPs.
This IP address has been reported a total of
15
times from
9 distinct
sources.
162.159.122.84 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Brazil
with 4
reports;
Belgium
with 2
reports;
Czechia
with 1
report.
The most common categories in these recent reports were:
SSH
4
times;
Brute-Force
4
times;
Web App Attack
2
times;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-15T20:16:26.684711+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2401842]: pam_unix(sshd: ...
show more2026-10-15T20:16:26.684711+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2401842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.122.84
2026-10-15T20:16:28.902034+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2401842]: Failed password for invalid user admin from 162.159.122.84 port 54895 ssh2
2026-10-15T20:16:32.153957+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2401842]: Failed password for invalid user admin from 162.159.122.84 port 54895 ssh2
...
show less
2026-10-15T17:02:21.701031+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2376171]: pam_unix(sshd: ...
show more2026-10-15T17:02:21.701031+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2376171]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.122.84
2026-10-15T17:02:24.061933+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2376171]: Failed password for invalid user kloe from 162.159.122.84 port 57615 ssh2
2026-10-15T17:02:27.548910+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[2376171]: Failed password for invalid user kloe from 162.159.122.84 port 57615 ssh2
...
show less
2026-10-09T14:18:00.549500+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1172336]: pam_unix(sshd: ...
show more2026-10-09T14:18:00.549500+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1172336]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.122.84
2026-10-09T14:18:02.566210+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1172336]: Failed password for invalid user administrator from 162.159.122.84 port 55315 ssh2
2026-10-09T14:18:06.105938+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[1172336]: Failed password for invalid user administrator from 162.159.122.84 port 55315 ssh2
...
show less
2026-10-06T09:44:16.967809+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[567217]: pam_unix(sshd:a ...
show more2026-10-06T09:44:16.967809+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[567217]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.159.122.84
2026-10-06T09:44:19.050253+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[567217]: Failed password for invalid user admin from 162.159.122.84 port 64807 ssh2
2026-10-06T09:44:22.567704+00:00 edge-con-sao01.int.pdx.net.uk sshd-session[567217]: Failed password for invalid user admin from 162.159.122.84 port 64807 ssh2
...
show less
Confirmed malicious activity observed via T-Pot honeypot Observed 11 events on port 80 (unknown) fro ...
show moreConfirmed malicious activity observed via T-Pot honeypot Observed 11 events on port 80 (unknown) from 2026-01-03T17:26:34+00:00 to 2026-01-03T17:28:54.420000+00:00. Sample: {"src_ip": "162.159.122.84", "src_port": 13114, "dest_port": 80}
show less
[Sun Dec 21 14:13:05.553939 2025] [php:error] [pid 3641445] [client 162.159.122.84:9953] script '/va ...
show more[Sun Dec 21 14:13:05.553939 2025] [php:error] [pid 3641445] [client 162.159.122.84:9953] script '/var/www/html/403.php' not found or unable to stat
[Sun Dec 21 14:14:05.889133 2025] [php:error] [pid 3641916] [client 162.159.122.84:11410] script '/var/www/html/wtz.php' not found or unable to stat
[Sun Dec 21 14:14:05.889133 2025] [php:error] [pid 3641916] [client 162.159.122.84:11410] script '/var/www/html/wtz.php' not found or unable to stat
[Sun Dec 21 14:14:06.325955 2025] [php:error] [pid 3641916] [client 162.159.122.84:11410] script '/var/www/html/galex.php' not found or unable to stat
...
show less
[Sun Dec 21 11:09:07.842582 2025] [php:error] [pid 3556046] [client 162.159.122.84:12524] script '/v ...
show more[Sun Dec 21 11:09:07.842582 2025] [php:error] [pid 3556046] [client 162.159.122.84:12524] script '/var/www/html/about.php' not found or unable to stat, referer: https://www.google.com/
[Sun Dec 21 11:09:08.057285 2025] [php:error] [pid 3556046] [client 162.159.122.84:12524] script '/var/www/html/bless.php' not found or unable to stat, referer: https://www.bing.com/
[Sun Dec 21 11:09:13.982690 2025] [php:error] [pid 3556338] [client 162.159.122.84:12528] script '/var/www/html/goods.php' not found or unable to stat, referer: https://www.google.de/
[Sun Dec 21 11:09:14.205700 2025] [php:error] [pid 3556338] [client 162.159.122.84:12528] script '/var/www/html/k.php' not found or unable to stat, referer: https://www.yahoo.com/
[Sun Dec 21 11:09:17.548849 2025] [php:error] [pid 3556338] [client 162.159.122.84:12528] script '/var/www/html/new.php' not found or unable to stat, referer: https://www.google.com/
...
show less
