This IP address has been reported a total of
19
times from
18 distinct
sources.
150.158.78.42 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 5
reports;
United States of America
with 3
reports;
France
with 2
reports.
The most common categories in these recent reports were:
SSH
13
times;
Brute-Force
11
times;
Port Scan
6
times;
Hacking
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 15 17:33:11 RP2 sshd[2331885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreOct 15 17:33:11 RP2 sshd[2331885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.158.78.42 user=root
Oct 15 17:33:13 RP2 sshd[2331885]: Failed password for root from 150.158.78.42 port 40028 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-10-15T13:20:12.987198+00:00 arrow-ee2 sshd-session[35486]: Failed password for root from 150.15 ...
show more2026-10-15T13:20:12.987198+00:00 arrow-ee2 sshd-session[35486]: Failed password for root from 150.158.78.42 port 57516 ssh2
2026-10-15T13:20:17.403897+00:00 arrow-ee2 sshd-session[35486]: Failed password for root from 150.158.78.42 port 57516 ssh2
2026-10-15T13:20:22.239778+00:00 arrow-ee2 sshd-session[35486]: Failed password for root from 150.158.78.42 port 57516 ssh2
...
show less
Honeypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity ...
show moreHoneypot Finding: SSH intrusion activity on TCP/22; successful login, command, or download activity observed.
show less
Honeypot Finding: active Redis command abuse captured on TCP/6379; 22 high-risk command event(s). Co ...
show moreHoneypot Finding: active Redis command abuse captured on TCP/6379; 22 high-risk command event(s). Commands: MODULE LOAD /tmp/exp.so, SLAVEOF NO ONE, config set dbfilename dump.rdb, config set dir ., CONFIG SET dbfilename exp.so, CONFIG SET dir /tmp/.
show less
Oct 11 08:41:52 ksol sshd-session[31459]: Connection closed by authenticating user :ANONYMIZED: 150. ...
show moreOct 11 08:41:52 ksol sshd-session[31459]: Connection closed by authenticating user :ANONYMIZED: 150.158.78.42 port 46762 [preauth]
...
show less
Blocked by UFW (TCP on 2222)
Source port: 12795
TTL: 110
Packet length: 40
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 2222)
Source port: 12795
TTL: 110
Packet length: 40
TOS: 0x08
This report (for 150.158.78.42) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Oct 7 11:15:38 box sshd-session[63391]: Connection closed by authenticating user root 150.158.78.42 ...
show moreOct 7 11:15:38 box sshd-session[63391]: Connection closed by authenticating user root 150.158.78.42 port 58532 [preauth]
Oct 7 11:15:39 box sshd-session[63392]: Connection closed by authenticating user root 150.158.78.42 port 42802 [preauth]
Oct 7 11:15:39 box sshd-session[63393]: Connection closed by authenticating user root 150.158.78.42 port 46406 [preauth]
Oct 7 11:15:39 box sshd-session[63394]: Connection closed by authenticating user root 150.158.78.42 port 55130 [preauth]
Oct 7 11:15:40 box sshd-session[63395]: Connection closed by authenticating user root 150.158.78.42 port 42116 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-10-07T09:34:30+02:00 lb-2 sshd[53437]: Failed password for root from 150.158.78.42 port 53152 s ...
show more2026-10-07T09:34:30+02:00 lb-2 sshd[53437]: Failed password for root from 150.158.78.42 port 53152 ssh2
2026-10-07T09:34:33+02:00 lb-2 sshd[53437]: Failed password for root from 150.158.78.42 port 53152 ssh2
2026-10-07T09:34:37+02:00 lb-2 sshd[53437]: Failed password for root from 150.158.78.42 port 53152 ssh2
2026-10-07T09:34:40+02:00 lb-2 sshd[53437]: Failed password for root from 150.158.78.42 port 53152 ssh2
...
show less
