43.159.145.52

SSH brute-force blocked by fail2ban: 2026-05-18T04:21:59.611145+02:00 [host] sshd-session[811918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 user=root 2026-05-18T04:22:02.027146+02:00 [host ... show more SSH brute-force blocked by fail2ban: 2026-05-18T04:21:59.611145+02:00 [host] sshd-session[811918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 user=root 2026-05-18T04:22:02.027146+02:00 [host] sshd-session[811918]: Failed password for root from 43.159.145.52 port 58650 ssh2 show less

Confirmed malicious by STILWaters CTI platform (score=100, sources=1)

SSH/Telnet honeypot: 3 login attempts, 3 sessions, 2 shell commands.

Automatic Fail2Ban report from jail ssh: multiple matching events detected.

Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).

Reportado automáticamente desde LiquidaZona Cloud WAF.

Unwanted traffic detected by honeypot on May 19, 2026: brute force and hacking attacks (3 over ssh).

May 20 00:39:48 b146-39 sshd[90616]: Invalid user hossein from 43.159.145.52 port 50344 May 20 00:39:48 b146-39 sshd[90616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 May 20 00:39:50 b146-3 ... show more May 20 00:39:48 b146-39 sshd[90616]: Invalid user hossein from 43.159.145.52 port 50344 May 20 00:39:48 b146-39 sshd[90616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 May 20 00:39:50 b146-39 sshd[90616]: Failed password for invalid user hossein from 43.159.145.52 port 50344 ssh2 ... show less

May 20 10:03:27 undeadly sshd-session[23980]: Failed password for root from 43.159.145.52 port 56018 ssh2 May 20 10:06:14 undeadly sshd-session[14632]: Failed password for root from 43.159.145.52 port 45534 ssh2 May 20 10:07:26 undeadly sshd-session[ ... show more May 20 10:03:27 undeadly sshd-session[23980]: Failed password for root from 43.159.145.52 port 56018 ssh2 May 20 10:06:14 undeadly sshd-session[14632]: Failed password for root from 43.159.145.52 port 45534 ssh2 May 20 10:07:26 undeadly sshd-session[56843]: Failed password for root from 43.159.145.52 port 44918 ssh2 May 20 10:08:37 undeadly sshd-session[30060]: Failed password for root from 43.159.145.52 port 45548 ssh2 May 20 10:09:48 undeadly sshd-session[10070]: Failed password for root from 43.159.145.52 port 49398 ssh2 ... show less

nl03: SSH Brute Force from 43.159.145.52 at 2026-05-20 11:39:02 IST

Invalid user claude from 43.159.145.52 port 46408

2026-05-20T08:34:41.197975+03:00 dude sshd[3920399]: Failed password for root from 43.159.145.52 port 44312 ssh2 2026-05-20T08:35:51.743463+03:00 dude sshd[3923306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh ... show more 2026-05-20T08:34:41.197975+03:00 dude sshd[3920399]: Failed password for root from 43.159.145.52 port 44312 ssh2 2026-05-20T08:35:51.743463+03:00 dude sshd[3923306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 user=root 2026-05-20T08:35:53.393965+03:00 dude sshd[3923306]: Failed password for root from 43.159.145.52 port 51364 ssh2 2026-05-20T08:37:00.134265+03:00 dude sshd[3925948]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 user=root 2026-05-20T08:37:01.925254+03:00 dude sshd[3925948]: Failed password for root from 43.159.145.52 port 48524 ssh2 ... show less

$f2bV_matches

UFW BLOCK Report: Total attempts: 4 Top ports and details: - Port 22 (4x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi) Source IP: 43.159.145.52 | this report is autogenerated by ZIME Cloud

May 20 10:01:29 NL04-VM-AMS sshd[2366409]: Failed password for root from 43.159.145.52 port 50084 ssh2 May 20 10:02:40 NL04-VM-AMS sshd[2366479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 u ... show more May 20 10:01:29 NL04-VM-AMS sshd[2366409]: Failed password for root from 43.159.145.52 port 50084 ssh2 May 20 10:02:40 NL04-VM-AMS sshd[2366479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.159.145.52 user=root May 20 10:02:42 NL04-VM-AMS sshd[2366479]: Failed password for root from 43.159.145.52 port 35084 ssh2 ... show less