This IP address has been reported a total of
1,426
times from
640 distinct
sources.
104.243.42.167 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 3 14:31:17 internal-mail-rafled-com sshd[1240132]: Invalid user paul from 104.243.42.167 port 4 ...
show moreJun 3 14:31:17 internal-mail-rafled-com sshd[1240132]: Invalid user paul from 104.243.42.167 port 42620
...
show less
Jun 3 14:09:33 internal-mail-rafled-com sshd[1239923]: Invalid user chris from 104.243.42.167 port ...
show moreJun 3 14:09:33 internal-mail-rafled-com sshd[1239923]: Invalid user chris from 104.243.42.167 port 43498
...
show less
Jun 3 13:52:03 internal-mail-rafled-com sshd[1239753]: Invalid user sgp from 104.243.42.167 port 56 ...
show moreJun 3 13:52:03 internal-mail-rafled-com sshd[1239753]: Invalid user sgp from 104.243.42.167 port 56890
...
show less
Jun 3 13:36:59 internal-mail-rafled-com sshd[1239603]: Invalid user web_admin from 104.243.42.167 p ...
show moreJun 3 13:36:59 internal-mail-rafled-com sshd[1239603]: Invalid user web_admin from 104.243.42.167 port 51862
...
show less
2026-06-03T12:31:11.789737+00:00 obscura.infra.lumis.moe sshd[1533384]: Invalid user rebecca from 10 ...
show more2026-06-03T12:31:11.789737+00:00 obscura.infra.lumis.moe sshd[1533384]: Invalid user rebecca from 104.243.42.167 port 43194
2026-06-03T12:35:48.516046+00:00 obscura.infra.lumis.moe sshd[1533869]: Invalid user dat from 104.243.42.167 port 47274
2026-06-03T12:37:55.589489+00:00 obscura.infra.lumis.moe sshd[1534047]: Invalid user wilson from 104.243.42.167 port 38076
...
show less
Report 2427640 with IP 3439323 for SSH brute-force attack by source 3469865 via ssh-honeypot/0.2.0+h ...
show moreReport 2427640 with IP 3439323 for SSH brute-force attack by source 3469865 via ssh-honeypot/0.2.0+http
show less
Jun 3 10:45:02 mail-mx2 sshd[101061]: Invalid user cosmo from 104.243.42.167 port 52066
Jun 3 10:5 ...
show moreJun 3 10:45:02 mail-mx2 sshd[101061]: Invalid user cosmo from 104.243.42.167 port 52066
Jun 3 10:51:44 mail-mx2 sshd[101111]: Invalid user bitnami from 104.243.42.167 port 52494
Jun 3 10:53:46 mail-mx2 sshd[101122]: Invalid user mcserver from 104.243.42.167 port 40008
...
show less
2026-06-03T10:20:37.729769+00:00 vps.billy.wales sshd-session[159062]: Failed password for invalid u ...
show more2026-06-03T10:20:37.729769+00:00 vps.billy.wales sshd-session[159062]: Failed password for invalid user william from 104.243.42.167 port 49868 ssh2
2026-06-03T10:22:10.911616+00:00 vps.billy.wales sshd-session[159098]: Invalid user carlos from 104.243.42.167 port 44484
2026-06-03T10:22:10.923189+00:00 vps.billy.wales sshd-session[159098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.42.167
2026-06-03T10:22:13.162369+00:00 vps.billy.wales sshd-session[159098]: Failed password for invalid user carlos from 104.243.42.167 port 44484 ssh2
2026-06-03T10:23:46.107789+00:00 vps.billy.wales sshd-session[159118]: Invalid user user from 104.243.42.167 port 51612
...
show less
2026-06-03T10:00:49.156668+00:00 vps.billy.wales sshd-session[158208]: Failed password for invalid u ...
show more2026-06-03T10:00:49.156668+00:00 vps.billy.wales sshd-session[158208]: Failed password for invalid user vishnu from 104.243.42.167 port 44598 ssh2
2026-06-03T10:02:29.917760+00:00 vps.billy.wales sshd-session[158494]: Invalid user jack from 104.243.42.167 port 44928
2026-06-03T10:02:29.925975+00:00 vps.billy.wales sshd-session[158494]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.42.167
2026-06-03T10:02:31.925559+00:00 vps.billy.wales sshd-session[158494]: Failed password for invalid user jack from 104.243.42.167 port 44928 ssh2
2026-06-03T10:04:02.610902+00:00 vps.billy.wales sshd-session[158506]: Invalid user sbbs from 104.243.42.167 port 44796
...
show less
Detected multiple authentication failures and invalid user attempts from IP address 104.243.42.167 o ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 104.243.42.167 on [PT] Lis-4 Node.
show less
2026-06-03T09:42:33.520016+00:00 vps.billy.wales sshd-session[157780]: pam_unix(sshd:auth): authenti ...
show more2026-06-03T09:42:33.520016+00:00 vps.billy.wales sshd-session[157780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.42.167
2026-06-03T09:42:35.196412+00:00 vps.billy.wales sshd-session[157780]: Failed password for invalid user jennifer from 104.243.42.167 port 54736 ssh2
2026-06-03T09:44:21.313519+00:00 vps.billy.wales sshd-session[157804]: Invalid user pt from 104.243.42.167 port 55684
2026-06-03T09:44:21.322304+00:00 vps.billy.wales sshd-session[157804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.42.167
2026-06-03T09:44:22.921862+00:00 vps.billy.wales sshd-session[157804]: Failed password for invalid user pt from 104.243.42.167 port 55684 ssh2
...
show less
Jun 3 03:42:55 prospero sshd[327087]: Invalid user jennifer from 104.243.42.167 port 59850
Jun 3 0 ...
show moreJun 3 03:42:55 prospero sshd[327087]: Invalid user jennifer from 104.243.42.167 port 59850
Jun 3 03:42:55 prospero sshd[327087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.243.42.167
Jun 3 03:42:58 prospero sshd[327087]: Failed password for invalid user jennifer from 104.243.42.167 port 59850 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-03T05:37:55.770599-04:00 server1 sshd[12985]: Disconnected from authenticating user root 104 ...
show more2026-06-03T05:37:55.770599-04:00 server1 sshd[12985]: Disconnected from authenticating user root 104.243.42.167 port 57574 [preauth]
2026-06-03T05:42:41.254739-04:00 server1 sshd[13082]: Invalid user jennifer from 104.243.42.167 port 60700
2026-06-03T05:42:41.268192-04:00 server1 sshd[13082]: Disconnected from invalid user jennifer 104.243.42.167 port 60700 [preauth]
...
show less