JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

116.203.128.141

Recent Activity

Abuse Confidence Score

100% Critical

22 reports

19 reporters · latest 2 days ago

ISP: Hetzner Online GmbH
Usage Type: Data Center/Web Hosting/Transit
ASN: AS24940
Hostname(s): ns2.z-ware.hu
Domain Name: hetzner.com
Country: 🇩🇪 Germany
City: Nuremberg, Bavaria

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

22 from 19 distinct reporters

First reported

November 11th 2026

Most recent report

2 days ago

Last 60 days

Top reporter locations 🇩🇪 Germany 8 🇳🇱 Netherlands 5 🇧🇾 Belarus 2

Most common categories Brute-Force 19 SSH 18 Port Scan 1 DDoS Attack 1

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Roderic	2026-11-11 18:01:16 UTC · (2 days ago)	116.203.128.141 (DE/Germany/Bavaria/Nuremberg/ns2.z-ware.hu/[redacted]	Brute-Force
🇩🇪 formality	2026-11-11 17:27:28 UTC · (2 days ago)	Invalid user formality from 116.203.128.141 port 45678	Brute-Force SSH
Anonymous	2026-11-11 17:06:48 UTC · (2 days ago)	(sshd) Failed SSH login from 116.203.128.141 (DE/Germany/ns2.z-ware.hu)	Brute-Force SSH
🇩🇪 formality	2026-11-11 16:39:08 UTC · (2 days ago)	Invalid user gematec from 116.203.128.141 port 58654	Brute-Force SSH
🇺🇦 oh.mg	2026-11-11 15:58:08 UTC · (2 days ago)	(sshd) Failed SSH login from 116.203.128.141 (DE/Germany/ns2.z-ware.hu): 1 in the last 3600 secs; Ports: ; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-11-11T15:58:07.459750+00:00 crichton sshd[2867109]: pam_unix(sshd:auth): authentication failure; ... show more (sshd) Failed SSH login from 116.203.128.141 (DE/Germany/ns2.z-ware.hu): 1 in the last 3600 secs; Ports: ; Direction: 0; Trigger: LF_TRIGGER; Logs: 2026-11-11T15:58:07.459750+00:00 crichton sshd[2867109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.128.141 user=root show less	Brute-Force SSH
🇩🇪 formality	2026-11-11 15:31:46 UTC · (2 days ago)	Invalid user formality from 116.203.128.141 port 45752	Brute-Force SSH
Anonymous	2026-11-11 15:21:00 UTC · (2 days ago)	Port Scan detected from 116.203.128.141 (DE/Germany/Bavaria/Nuremberg/ns2.z-ware.hu/[redacted]).	Port Scan
🇺🇸 MatCat	2026-11-11 15:05:14 UTC · (2 days ago)	Banned by fail2ban: sshd	Brute-Force SSH
🇺🇸 0xem.ma	2026-11-11 15:01:14 UTC · (2 days ago)	2026-11-11T16:00:11.006247+01:00 vmi3299174 sshd[4193697]: Failed password for invalid user ubuntu from 116.203.128.141 port 55386 ssh2 2026-11-11T16:01:11.905797+01:00 vmi3299174 sshd[4194087]: pam_unix(sshd:auth): authentication failure; logname= u ... show more 2026-11-11T16:00:11.006247+01:00 vmi3299174 sshd[4193697]: Failed password for invalid user ubuntu from 116.203.128.141 port 55386 ssh2 2026-11-11T16:01:11.905797+01:00 vmi3299174 sshd[4194087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.128.141 user=root 2026-11-11T16:01:13.843285+01:00 vmi3299174 sshd[4194087]: Failed password for root from 116.203.128.141 port 58900 ssh2 ... show less	Brute-Force SSH
🇳🇱 Alboweb B.V.	2026-11-11 14:11:04 UTC · (2 days ago)	SSH abuse or brute-force attack detected by Fail2Ban in ssh jail	Brute-Force SSH
🇩🇪 LRob	2026-11-11 14:01:12 UTC · (2 days ago)	SSH brute force	Brute-Force SSH
🇳🇱 Mangelot Hosting	2026-11-11 13:59:43 UTC · (2 days ago)	116.203.128.141 (DE/Germany/ns2.z-ware.hu), 8 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 11 14:58:21 sshd[788560]: Failed password for [USERNAME] from 178.156.19 ... show more 116.203.128.141 (DE/Germany/ns2.z-ware.hu), 8 distributed sshd attacks on account [REDACTED] in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 11 14:58:21 sshd[788560]: Failed password for [USERNAME] from 178.156.199.230 port 51256 ssh2 Nov 11 14:38:41 sshd[774758]: Failed password for [USERNAME] from 41.76.109.172 port 45444 ssh2 Nov 11 14:51:58 sshd[783814]: Failed password for [USERNAME] from 116.203.128.141 port 48586 ssh2 Nov 11 14:51:55 sshd[783814]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.203.128.141 user=[USERNAME] Nov 11 14:38:39 sshd[774758]: pam_unix(sshd:auth): authen show less	DDoS Attack
🇩🇪 DEV-DNS	2026-11-11 11:46:09 UTC · (2 days ago)	116.203.128.141 (DE/Germany/Bavaria/Nuremberg/ns2.z-ware.hu/[redacted]	Brute-Force
🇩🇪 formality	2026-11-11 11:20:12 UTC · (2 days ago)	Invalid user gematec from 116.203.128.141 port 52412	Brute-Force SSH
🇨🇿 lp	2026-11-11 11:18:10 UTC · (2 days ago)	SSH Brute force: 1 attempts were recorded from 116.203.128.141 2026-11-11T12:05:09+0100 Connection closed by authenticating user root 116.203.128.141 [preauth]	Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇸🇬 212.73.148.23

🇻🇪 190.153.80.145

🇮🇷 185.112.150.99

🇺🇸 172.178.122.196

🇺🇸 162.216.150.95

🇫🇷 84.17.60.236

🇮🇱 64.177.66.60

🇰🇷 49.254.204.134

🇸🇬 47.82.11.137

🇳🇱 45.148.10.157

🇲🇦 41.143.193.2

🇷🇺 31.41.14.129

🇺🇸 2a06:98c0:3600::103

🇸🇬 212.73.148.28

🇺🇸 161.193.7.37

🇨🇿 109.205.75.50

🇨🇦 85.217.149.0

🇳🇱 46.151.178.14

🇺🇸 45.144.112.55

🇮🇳 43.242.247.66