This IP address has been reported a total of
149
times from
96 distinct
sources.
164.90.166.102 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot hit: HTTP/1.1 request on 9000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ...
show moreHoneypot hit: HTTP/1.1 request on 9000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 9000 [2] TCP
show less
Connection to port 15000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155
User ...
show moreConnection to port 15000 with data transfer.
Data preview: GET / HTTP/1.1
Host: 87.229.95.155
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/201
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
{"event":{"DateTime":"2026-03-02T21:45:02Z","RemoteAddr":"164.90.166.102:50522","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-03-02T21:45:02Z","RemoteAddr":"164.90.166.102:50522","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"5874d6d8-94e4-4e3a-a1ce-b5b410e08e0d","Environ":"","User":"docker","Password":"docker2026","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"164.90.166.102","SourcePort":"50522","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-03-02T21:45:37Z","RemoteAddr":"164.90.166.102:48864","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"8d2212b9-35fb-4ffb-bff6-cecef13c1afa","Environ":"","User":"docker","Password":"P@ssw0rd","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"
show less
2026-03-02T21:48:59.672561shield sshd\[26144\]: Invalid user ubuntu from 164.90.166.102 port 45754
2 ...
show more2026-03-02T21:48:59.672561shield sshd\[26144\]: Invalid user ubuntu from 164.90.166.102 port 45754
2026-03-02T21:48:59.758395shield sshd\[26144\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.166.102
2026-03-02T21:49:02.067004shield sshd\[26144\]: Failed password for invalid user ubuntu from 164.90.166.102 port 45754 ssh2
2026-03-02T21:49:34.103580shield sshd\[26198\]: Invalid user ubuntu from 164.90.166.102 port 60742
2026-03-02T21:49:34.186432shield sshd\[26198\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.166.102
show less
{"event":{"DateTime":"2026-03-02T21:37:49Z","RemoteAddr":"164.90.166.102:58370","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-03-02T21:37:49Z","RemoteAddr":"164.90.166.102:58370","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"99bf3fbe-d74c-4633-94a1-4ca7d25b601e","Environ":"","User":"pi","Password":"raspberry","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"164.90.166.102","SourcePort":"58370","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-03-02T21:38:44Z","RemoteAddr":"164.90.166.102:57030","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"f096d7a9-b94f-4b35-902c-1a85a539e066","Environ":"","User":"root","Password":"1qaz2wsx","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH int
show less
Hacking
Port Scan
Brute-Force
SSH
Anonymous
Trying to login
Brute-Force
SSH
Showing 1 to
15
of 149 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩