165.22.124.218

[dsaracingteam.gr] httpd-config-scan: sites=global; logs=/var/log/nginx/access.log; samples=/.git/config | /.git/config | fast_lane=true kernel_at=2026-10-22T19:57:13+00:00

RDP (Windows Remote Desktop) Brute-force detected.

list.rtbh.com.tr report: tcp/0

Honeypot hit: HTTP/1.1 request on 13000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image ... show more Honeypot hit: HTTP/1.1 request on 13000 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate; 13000 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less

FW-PortScan: Traffic Blocked srcport=61005 dstport=1133

Mar 17 20:02:01 centrum sshd-session[25994]: banner exchange: Connection from 165.22.124.218 port 47294: invalid format Mar 17 20:02:01 centrum sshd-session[25995]: banner exchange: Connection from 165.22.124.218 port 47296: invalid format ...

Port 22 Scan, PTR: None

Unauthorized connection attempt detected, SSH Brute-Force

Mar 16 12:00:32 mail sshd[3870]: Failed password for root from 165.22.124.218 port 60592 ssh2 Mar 16 12:01:49 mail sshd[3896]: Failed password for root from 165.22.124.218 port 32992 ssh2 Mar 16 12:03:03 mail sshd[3909]: Failed password for root from ... show more Mar 16 12:00:32 mail sshd[3870]: Failed password for root from 165.22.124.218 port 60592 ssh2 Mar 16 12:01:49 mail sshd[3896]: Failed password for root from 165.22.124.218 port 32992 ssh2 Mar 16 12:03:03 mail sshd[3909]: Failed password for root from 165.22.124.218 port 45862 ssh2 Mar 16 12:04:15 mail sshd[3922]: Failed password for root from 165.22.124.218 port 50334 ssh2 Mar 16 12:05:28 mail sshd[4274]: Failed password for root from 165.22.124.218 port 54250 ssh2 ... show less

2026-03-16T11:02:59.717461+00:00 EO-FE-01 sshd[1896105]: Failed password for root from 165.22.124.218 port 41346 ssh2 2026-03-16T11:04:09.471690+00:00 EO-FE-01 sshd[1896225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ... show more 2026-03-16T11:02:59.717461+00:00 EO-FE-01 sshd[1896105]: Failed password for root from 165.22.124.218 port 41346 ssh2 2026-03-16T11:04:09.471690+00:00 EO-FE-01 sshd[1896225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.218 user=root 2026-03-16T11:04:11.663165+00:00 EO-FE-01 sshd[1896225]: Failed password for root from 165.22.124.218 port 44612 ssh2 2026-03-16T11:05:22.120648+00:00 EO-FE-01 sshd[1896416]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.218 user=root 2026-03-16T11:05:24.331825+00:00 EO-FE-01 sshd[1896416]: Failed password for root from 165.22.124.218 port 39384 ssh2 ... show less

Detected multiple authentication failures and invalid user attempts from IP address 165.22.124.218 on [PT] Lis-4 Node.

Detected SSH brute force attack from 3 different servers

Mar 16 12:00:18 apo sshd[7523]: Failed password for root from 165.22.124.218 port 37768 ssh2 Mar 16 12:01:37 apo sshd[10147]: Failed password for root from 165.22.124.218 port 46744 ssh2 Mar 16 12:02:51 apo sshd[12551]: Failed password for root from ... show more Mar 16 12:00:18 apo sshd[7523]: Failed password for root from 165.22.124.218 port 37768 ssh2 Mar 16 12:01:37 apo sshd[10147]: Failed password for root from 165.22.124.218 port 46744 ssh2 Mar 16 12:02:51 apo sshd[12551]: Failed password for root from 165.22.124.218 port 40298 ssh2 Mar 16 12:04:02 apo sshd[14776]: Failed password for root from 165.22.124.218 port 47538 ssh2 ... show less

Mar 16 12:01:43 qube2 sshd[91355]: Failed password for root from 165.22.124.218 port 37054 ssh2 Mar 16 12:02:56 qube2 sshd[91905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.218 user=root Mar 1 ... show more Mar 16 12:01:43 qube2 sshd[91355]: Failed password for root from 165.22.124.218 port 37054 ssh2 Mar 16 12:02:56 qube2 sshd[91905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.218 user=root Mar 16 12:02:57 qube2 sshd[91905]: Failed password for root from 165.22.124.218 port 45642 ssh2 ... show less

2026-03-16T19:01:37.606852+08:00 CVM24121 sshd[703085]: Failed password for root from 165.22.124.218 port 44220 ssh2 2026-03-16T19:02:49.365672+08:00 CVM24121 sshd[703219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show more 2026-03-16T19:01:37.606852+08:00 CVM24121 sshd[703085]: Failed password for root from 165.22.124.218 port 44220 ssh2 2026-03-16T19:02:49.365672+08:00 CVM24121 sshd[703219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.124.218 user=root 2026-03-16T19:02:51.907958+08:00 CVM24121 sshd[703219]: Failed password for root from 165.22.124.218 port 49776 ssh2 ... show less