Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
154.125.237.115 has a threat confidence score of 52%. This IP address from Senegal (AS8346, SONATEL SONATEL-AS Autonomous System) has been observed in 3 honeypot sessions targeting SSH protocols. First observed on April 18, 2026, most recently active April 18, 2026.
Attempts to remove filesystem attribute protections (e.g., immutable flags via chattr -i/-a) from the user’s ~/.ssh directory. This pattern indicates preparatory activity to modify SSH trust configuration, commonly preceding insertion or replacement of authorized_keys for persistence.