157.180.122.1

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
22 reports
20 reporters · latest 1 day ago
ISP
Hetzner Online GmbH
Usage Type
Data Center/Web Hosting/Transit
ASN
AS24940
Hostname(s)
static.1.122.180.157.clients.your-server.de
Domain Name
hetzner.com
Country
🇫🇮 Finland
City
Helsinki, Uusimaa
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
22 from 20 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇺🇸 United States of America 8 🇩🇪 Germany 3 🇬🇧 United Kingdom of Great Britain and Northern Ireland 2
Most common categories SSH 21 Brute-Force 19 Port Scan 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇮🇳 Parth Maniar
This IP address carried out 12 port scanning attempts on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Port Scan SSH
🇮🇳 Parth Maniar
This IP address carried out 3 SSH credential attack (attempts) on 09-11-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
Brute-Force SSH
🇧🇷 ICS Labs
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-11-09 UTC.
Brute-Force
🇺🇸 abenage
2026-11-08T20:32:42.892208[redacted] sshd[3212314]: Connection closed by authenticating user root 157.180.122.1 port 39731 [preauth]
Brute-Force SSH
🇺🇸 Vidarr
Brute-Force SSH
🇯🇵 ChonkyHamster
SSH honeypot: 1 login attempt, 2026-11-09 UTC; usernames tried include root; client SSH-2.0-Go (fingerprint seen from 27 attacking IPs this week).
Brute-Force SSH
🇩🇪 Tsumugi Kotobuki
SSH Brute-Force | Events: 1 | Ports: 22/SSH | Auth: password(1x) | Client: Go | rDNS: static.1.122.180.157.clients.your-server.de | F2B/ssh-honeypot-bruteforce@2026-11-09T02:03:48Z
Brute-Force SSH
🇺🇸 m2jest1c
Nov 9 01:53:08 instance1 sshd[1590214]: Connection closed by authenticating user root 157.180.122.1 port 45195 [preauth] ...
Brute-Force SSH
🇺🇸 scharsey
Honeypot: 2 SSH events incl. login attempts
Brute-Force SSH
🇺🇸 seraph.ws
SSH honeypot contact — automated credential stuffing attempt
Brute-Force SSH
🇬🇧 sverre26
Bruteforce detected by fail2ban
Brute-Force SSH
🇩🇪 ghostwarriors
Unauthorized connection attempt detected, SSH Brute-Force
Brute-Force Port Scan SSH
🇨🇦 dpinse
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: root:Muhammad786 • Number of login attempts: 1 • Client: SSH-2.0-Go
SSH
🇰🇷 2048
SSH brute-force detected on ampere-2 Source IP: 157.180.122.1 Service: sshd Port: 22 Sample usernames: root
Brute-Force SSH
🇫🇮 GG UNLUCKI
SSH brute-force attempt detected by Fail2Ban. Invalid login attempt against sshd.
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 184.174.96.19
🇫🇮 176.126.111.31
🇨🇳 175.153.221.109
🇮🇳 122.166.158.49
🇨🇳 115.124.28.172
🇫🇷 91.231.89.191
🇫🇷 91.231.89.188
🇧🇬 78.128.114.166
🇬🇧 77.68.33.249
🇺🇸 72.203.196.229
🇺🇸 50.6.5.117
🇳🇱 45.148.10.157
🇮🇳 45.123.10.3
🇧🇪 35.210.38.21
🇧🇪 35.206.185.160
🇰🇷 14.38.188.169
feedback