This IP address has been reported a total of
72
times from
63 distinct
sources.
165.154.64.142 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
IN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 165.154.64.142 at 2026-08-27 06:40: ...
show moreIN04-DRDP-RYZ-STOR: Blocked by Fail2Ban for SSH Brute Force from 165.154.64.142 at 2026-08-27 06:40:53 EDT
show less
2026-08-27T10:29:22.659603+00:00 tok.updn.io sshd[3935070]: Invalid user user from 165.154.64.142 po ...
show more2026-08-27T10:29:22.659603+00:00 tok.updn.io sshd[3935070]: Invalid user user from 165.154.64.142 port 16148
2026-08-27T10:29:22.662830+00:00 tok.updn.io sshd[3935070]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.64.142
2026-08-27T10:29:24.304376+00:00 tok.updn.io sshd[3935070]: Failed password for invalid user user from 165.154.64.142 port 16148 ssh2
2026-08-27T10:29:56.031112+00:00 tok.updn.io sshd[3936722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.64.142 user=root
2026-08-27T10:29:58.338021+00:00 tok.updn.io sshd[3936722]: Failed password for root from 165.154.64.142 port 43610 ssh2
...
show less
2026-08-27T12:18:53.122779+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2714381]: Invalid user admin f ...
show more2026-08-27T12:18:53.122779+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2714381]: Invalid user admin from 165.154.64.142 port 30892
2026-08-27T12:19:26.469899+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2714460]: Invalid user user from 165.154.64.142 port 29486
2026-08-27T12:20:29.920121+02:00 lw-dedi-hdz-10g2480-ams sshd-session[2714575]: Invalid user user from 165.154.64.142 port 52708
...
show less
2026-08-27T10:19:15.846197+00:00 localhost sshd[791189]: pam_unix(sshd:auth): authentication failure ...
show more2026-08-27T10:19:15.846197+00:00 localhost sshd[791189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.154.64.142
2026-08-27T10:19:17.821757+00:00 localhost sshd[791189]: Failed password for invalid user admin from 165.154.64.142 port 51172 ssh2
2026-08-27T10:19:19.589110+00:00 localhost sshd[791189]: Connection closed by invalid user admin 165.154.64.142 port 51172 [preauth]
...
show less
2026-08-27T10:11:19.991600+00:00 server sshd[411726]: Invalid user user from 165.154.64.142 port 190 ...
show more2026-08-27T10:11:19.991600+00:00 server sshd[411726]: Invalid user user from 165.154.64.142 port 19088
2026-08-27T10:12:24.764272+00:00 server sshd[411777]: Invalid user user from 165.154.64.142 port 23170
...
show less
2026-08-27T10:04:07.387785+00:00 edge-per-dus1.int.pdx.net.uk sshd-session[387143]: Invalid user adm ...
show more2026-08-27T10:04:07.387785+00:00 edge-per-dus1.int.pdx.net.uk sshd-session[387143]: Invalid user admin from 165.154.64.142 port 63180
2026-08-27T10:04:41.824090+00:00 edge-per-dus1.int.pdx.net.uk sshd-session[387187]: Invalid user user from 165.154.64.142 port 38654
2026-08-27T10:05:44.591688+00:00 edge-per-dus1.int.pdx.net.uk sshd-session[387303]: Invalid user user from 165.154.64.142 port 41606
...
show less
Honeypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP
Reported by Dis ...
show moreHoneypot [fra-de-honeypot]: SSH handshake/banner (24 bytes of payload); 2222 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
SSH
Anonymous
Aug 27 12:00:59 srv2 sshd[3118188]: Invalid user admin from 165.154.64.142 port 58354
Aug 27 12:01:3 ...
show moreAug 27 12:00:59 srv2 sshd[3118188]: Invalid user admin from 165.154.64.142 port 58354
Aug 27 12:01:31 srv2 sshd[3118220]: Invalid user user from 165.154.64.142 port 45566
Aug 27 12:02:34 srv2 sshd[3118273]: Invalid user user from 165.154.64.142 port 47482
Aug 27 12:04:11 srv2 sshd[3118356]: Invalid user orangepi from 165.154.64.142 port 24862
Aug 27 12:04:42 srv2 sshd[3118406]: Invalid user support from 165.154.64.142 port 21726
...
show less
Brute-Force
SSH
Anonymous
2026-08-27T09:57:50.092249+00:00 de-fra2-ntp1 sshd[4043844]: Invalid user admin from 165.154.64.142 ...
show more2026-08-27T09:57:50.092249+00:00 de-fra2-ntp1 sshd[4043844]: Invalid user admin from 165.154.64.142 port 38134
2026-08-27T09:58:21.746199+00:00 de-fra2-ntp1 sshd[4043846]: Invalid user user from 165.154.64.142 port 48868
2026-08-27T09:59:27.401168+00:00 de-fra2-ntp1 sshd[4043852]: Invalid user user from 165.154.64.142 port 35122
...
show less
Brute-Force
SSH
Showing 1 to
15
of 72 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩