JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

166.108.196.154

Neutral Activity

Abuse Confidence Score

0% Low Risk

63 reports

44 reporters · latest 3 months ago

ISP: Huawei-Cloud-SG
Usage Type: Data Center/Web Hosting/Transit
ASN: AS136907
Domain Name: huawei.com
Country: 🇸🇬 Singapore
City: Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

166.108.196.154 has been reported 63 times. The most recent report is from 3 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

63 from 44 distinct reporters

First reported

July 25th 2025

Most recent report

3 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇧🇷 ICS Labs	2026-07-25 21:33:32 UTC · (3 months ago)	ICS Labs identified 166.108.196.154 as a malicious indicator from threat intelligence.	Hacking
🇧🇷 ICS Labs	2026-05-20 12:35:17 UTC · (5 months ago)	ICS Labs identified 166.108.196.154 as a malicious indicator from threat intelligence.	Hacking
🇳🇱 BellFix	2026-04-27 17:56:10 UTC · (6 months ago)	Fail2ban reported 166.108.196.154 for sshd	SSH Brute-Force
🇫🇷 SpaceHost-Server	2026-04-26 22:38:10 UTC · (6 months ago)		Brute-Force Web App Attack
🇫🇷 SpaceHost-Server	2026-04-25 22:33:40 UTC · (6 months ago)		Brute-Force Web App Attack
🇺🇸 anon333	2026-04-24 07:33:41 UTC · (6 months ago)	Hacker syslog review 1777016021	Hacking
🇩🇪 Lazentis	2026-04-24 07:15:53 UTC · (6 months ago)	Unauthorized access attempt to port 22 (tcp)	Brute-Force SSH
🇺🇸 ezscale	2026-04-24 06:40:19 UTC · (6 months ago)	SSH brute force on atl-03.node.vps.ezscale.tech (3 failures). Detected by fail2ban.	Brute-Force SSH
🇰🇷 hanb.jp	2026-04-24 06:39:43 UTC · (6 months ago)	Apr 24 06:38:35 v4bgp sshd[422387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.108.196.154 user=root Apr 24 06:38:37 v4bgp sshd[422387]: Failed password for root from 166.108.196.154 port 36732 ssh2 A ... show more Apr 24 06:38:35 v4bgp sshd[422387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.108.196.154 user=root Apr 24 06:38:37 v4bgp sshd[422387]: Failed password for root from 166.108.196.154 port 36732 ssh2 Apr 24 06:39:42 v4bgp sshd[422513]: Invalid user alex from 166.108.196.154 port 59906 ... show less	Brute-Force SSH
🇺🇸 bigscoots.com	2026-04-24 05:44:30 UTC · (6 months ago)	166.108.196.154 (SG/Singapore/ecs-166-108-196-154.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 24 00:44:13 15066 sshd[20299]: pam_unix(sshd:au ... show more 166.108.196.154 (SG/Singapore/ecs-166-108-196-154.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Apr 24 00:44:13 15066 sshd[20299]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.79.132 user=root Apr 24 00:28:15 15066 sshd[18990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.108.196.154 user=root Apr 24 00:28:17 15066 sshd[18990]: Failed password for root from 166.108.196.154 port 57716 ssh2 Apr 24 00:09:04 15066 sshd[17025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.72.38 user=root Apr 24 00:09:06 15066 sshd[17025]: Failed password for root from 68.183.72.38 port 37594 ssh2 IP Addresses Blocked: 163.5.79.132 (FR/France/-) show less	Brute-Force SSH
🇨🇭 ScanThe.Net	2026-04-24 05:37:25 UTC · (6 months ago)	ID: 2770662299 \| PORT: 15336 \| https://166-108-196-154.scanthe.net	Port Scan
Anonymous	2026-04-24 05:13:27 UTC · (6 months ago)	Invalid user mdm from 166.108.196.154 port 54402	Brute-Force SSH
🇩🇪 ipcop.net	2026-04-24 04:24:24 UTC · (6 months ago)	Malicious activity detected from 166.108.196.154.	Brute-Force
🇩🇪 Aaron Hirsch	2026-04-24 04:22:31 UTC · (6 months ago)	2026-04-24T06:18:30.008431+02:00 larry sshd-session[1816335]: Invalid user webserver from 166.108.196.154 port 43222 2026-04-24T06:19:32.292801+02:00 larry sshd-session[1816438]: Invalid user admin from 166.108.196.154 port 50898 2026-04-24T06:20:30. ... show more 2026-04-24T06:18:30.008431+02:00 larry sshd-session[1816335]: Invalid user webserver from 166.108.196.154 port 43222 2026-04-24T06:19:32.292801+02:00 larry sshd-session[1816438]: Invalid user admin from 166.108.196.154 port 50898 2026-04-24T06:20:30.437228+02:00 larry sshd-session[1816445]: Invalid user ftpuser from 166.108.196.154 port 46820 2026-04-24T06:21:28.416366+02:00 larry sshd-session[1816548]: Invalid user steam from 166.108.196.154 port 49778 2026-04-24T06:22:30.461533+02:00 larry sshd-session[1816562]: Invalid user sammy from 166.108.196.154 port 42960 ... show less	Brute-Force SSH
🇳🇱 shiroyashik	2026-04-24 04:20:53 UTC · (6 months ago)	2026-04-24T07:18:54.886762+03:00 [HOSTNAME] sshd-session[1411459]: Invalid user webserver from 166.108.196.154 port 60584 2026-04-24T07:19:55.156295+03:00 [HOSTNAME] sshd-session[1411515]: Invalid user admin from 166.108.196.154 port 35216 2026-04-24 ... show more 2026-04-24T07:18:54.886762+03:00 [HOSTNAME] sshd-session[1411459]: Invalid user webserver from 166.108.196.154 port 60584 2026-04-24T07:19:55.156295+03:00 [HOSTNAME] sshd-session[1411515]: Invalid user admin from 166.108.196.154 port 35216 2026-04-24T07:20:52.502219+03:00 [HOSTNAME] sshd-session[1411572]: Invalid user ftpuser from 166.108.196.154 port 39088 ... show less	SSH

Showing 1 to 15 of 63 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 207.244.242.22

🇵🇹 195.23.177.69

🇩🇪 185.250.250.95

🇷🇸 176.125.229.134

🇫🇮 147.185.133.234

🇬🇧 45.135.141.26

🇯🇵 43.133.187.11

🇨🇳 222.189.173.173

🇷🇺 178.20.45.128

🇫🇷 169.58.67.217

🇩🇪 139.19.117.129

🇲🇺 102.117.81.187

🇺🇸 96.78.175.36

🇷🇴 80.94.92.55

🇬🇧 45.135.141.65

🇬🇧 45.135.141.63

🇬🇧 45.135.141.46

🇧🇪 35.210.160.81

🇮🇩 202.51.214.99

🇨🇳 182.43.76.81