This IP address has been reported a total of
23
times from
17 distinct
sources.
158.47.199.158 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-08T22:35:36.714862+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151473]: Disconnected fr ...
show more2026-07-08T22:35:36.714862+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151473]: Disconnected from authenticating user root 158.47.199.158 port 3948 [preauth]
2026-07-08T22:36:44.687777+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151519]: Invalid user julien from 158.47.199.158 port 4383
2026-07-08T22:36:44.750120+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151519]: Disconnected from invalid user julien 158.47.199.158 port 4383 [preauth]
2026-07-08T22:41:12.173787+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151768]: Invalid user yuri from 158.47.199.158 port 5065
2026-07-08T22:41:12.249374+02:00 amqp-host01.amqp.srvfarm.net sshd-session[1151768]: Disconnected from invalid user yuri 158.47.199.158 port 5065 [preauth]
show less
2026-07-08T21:38:34.000681+02:00 [REDACTED] sshd[193117]: Invalid user vlc from 158.47.199.158 port ...
show more2026-07-08T21:38:34.000681+02:00 [REDACTED] sshd[193117]: Invalid user vlc from 158.47.199.158 port 4324
2026-07-08T21:39:24.367290+02:00 [REDACTED] sshd[193132]: Invalid user suporte from 158.47.199.158 port 4008
2026-07-08T21:41:00.191735+02:00 [REDACTED] sshd[193142]: Invalid user deploy from 158.47.199.158 port 4402
2026-07-08T21:43:21.021426+02:00 [REDACTED] sshd[193147]: Invalid user jai from 158.47.199.158 port 4315
2026-07-08T21:44:05.184309+02:00 [REDACTED] sshd[193149]: Invalid user postgres from 158.47.199.158 port 4400
show less
2026-07-08T21:19:36.830837+02:00 [REDACTED] sshd[193024]: Invalid user markus from 158.47.199.158 po ...
show more2026-07-08T21:19:36.830837+02:00 [REDACTED] sshd[193024]: Invalid user markus from 158.47.199.158 port 3868
2026-07-08T21:21:33.333464+02:00 [REDACTED] sshd[193038]: Invalid user user from 158.47.199.158 port 4487
2026-07-08T21:26:09.572669+02:00 [REDACTED] sshd[193065]: Invalid user admin2 from 158.47.199.158 port 4507
2026-07-08T21:26:57.919299+02:00 [REDACTED] sshd[193069]: Invalid user sky from 158.47.199.158 port 4081
2026-07-08T21:27:42.462838+02:00 [REDACTED] sshd[193072]: Invalid user ftpuser from 158.47.199.158 port 4977
show less
Report 2544946 with IP 3592513 for SSH brute-force attack by source 3587171 via ssh-honeypot/0.2.0+h ...
show moreReport 2544946 with IP 3592513 for SSH brute-force attack by source 3587171 via ssh-honeypot/0.2.0+http
show less
2026-07-08T15:08:48.851565webserver sshd[12820]: Invalid user postgres from 158.47.199.158 port 4873 ...
show more2026-07-08T15:08:48.851565webserver sshd[12820]: Invalid user postgres from 158.47.199.158 port 4873
2026-07-08T15:08:50.735424webserver sshd[12820]: Failed password for invalid user postgres from 158.47.199.158 port 4873 ssh2
2026-07-08T15:11:32.639027webserver sshd[21175]: Invalid user john from 158.47.199.158 port 4225
...
show less
Jul 8 12:09:13 mack sshd[295749]: Invalid user postgres from 158.47.199.158 port 4000
Jul 8 12:09: ...
show moreJul 8 12:09:13 mack sshd[295749]: Invalid user postgres from 158.47.199.158 port 4000
Jul 8 12:09:13 mack sshd[295749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.47.199.158
Jul 8 12:09:15 mack sshd[295749]: Failed password for invalid user postgres from 158.47.199.158 port 4000 ssh2
...
show less
2026-07-08T20:34:04.591646+03:00 journals sshd[2824458]: pam_unix(sshd:auth): authentication failure ...
show more2026-07-08T20:34:04.591646+03:00 journals sshd[2824458]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.47.199.158 user=root
2026-07-08T20:34:06.706904+03:00 journals sshd[2824458]: Failed password for root from 158.47.199.158 port 4889 ssh2
2026-07-08T20:35:50.738872+03:00 journals sshd[2824605]: Invalid user inventory from 158.47.199.158 port 4677
2026-07-08T20:35:50.738872+03:00 journals sshd[2824605]: Invalid user inventory from 158.47.199.158 port 4677
...
show less
2026-07-08T19:56:11.106983+03:00 journals sshd[2822632]: Failed password for root from 158.47.199.15 ...
show more2026-07-08T19:56:11.106983+03:00 journals sshd[2822632]: Failed password for root from 158.47.199.158 port 5115 ssh2
2026-07-08T20:01:17.786019+03:00 journals sshd[2822871]: Invalid user apple from 158.47.199.158 port 4356
2026-07-08T20:01:17.786019+03:00 journals sshd[2822871]: Invalid user apple from 158.47.199.158 port 4356
2026-07-08T20:01:17.790191+03:00 journals sshd[2822871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.47.199.158
2026-07-08T20:01:19.870886+03:00 journals sshd[2822871]: Failed password for invalid user apple from 158.47.199.158 port 4356 ssh2
...
show less
SSH Brute force: 8 attempts were recorded from 158.47.199.158
2026-07-08T18:12:58+02:00 Invalid user ...
show moreSSH Brute force: 8 attempts were recorded from 158.47.199.158
2026-07-08T18:12:58+02:00 Invalid user admin from 158.47.199.158 port 4108
2026-07-08T18:25:09+02:00 Invalid user ftpuser1 from 158.47.199.158 port 4500
2026-07-08T18:28:16+02:00 Invalid user rohit from 158.47.199.158 port 4327
2026-07-08T18:31:11+02:00 Disconnected from authenticating user root 158.47.199.158 port 5062 [preauth]
2026-07-08T18:35:01+02:00 Disconnected from authenticating user root 158.47.199.158 port 4028 [preauth]
2026-07-08T18:36:52+02:00 Invalid user tidb from 158.47.199.158 port 4603
2026-07-08T18:38:50+02:00 Invalid user jhpark from 158.47.199.158 port 5059
2026-07-08T18:42:29+02:00 Invalid user irene from 158.47.199.158 port 4982
show less
2026-07-08T19:36:20.128177+03:00 journals sshd[2821387]: Invalid user tidb from 158.47.199.158 port ...
show more2026-07-08T19:36:20.128177+03:00 journals sshd[2821387]: Invalid user tidb from 158.47.199.158 port 4136
2026-07-08T19:36:20.131107+03:00 journals sshd[2821387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.47.199.158
2026-07-08T19:36:22.367880+03:00 journals sshd[2821387]: Failed password for invalid user tidb from 158.47.199.158 port 4136 ssh2
2026-07-08T19:40:11.051075+03:00 journals sshd[2822128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.47.199.158 user=root
2026-07-08T19:40:13.332331+03:00 journals sshd[2822128]: Failed password for root from 158.47.199.158 port 4103 ssh2
...
show less
SSH
Anonymous
Blocked by Fail2Ban for SSH brute-force attacks.
Brute-Force
SSH
Anonymous
2026-07-08T14:30:56.725455+00:00 nijika sshd-session[2118536]: Invalid user titi from 158.47.199.158 ...
show more2026-07-08T14:30:56.725455+00:00 nijika sshd-session[2118536]: Invalid user titi from 158.47.199.158 port 5027
2026-07-08T14:31:46.129229+00:00 nijika sshd-session[2118538]: Invalid user backend from 158.47.199.158 port 3865
2026-07-08T14:35:05.624917+00:00 nijika sshd-session[2118552]: Invalid user song from 158.47.199.158 port 4137
2026-07-08T14:35:54.276087+00:00 nijika sshd-session[2118554]: Invalid user postgres from 158.47.199.158 port 4388
2026-07-08T14:36:42.366026+00:00 nijika sshd-session[2118556]: Invalid user jeff from 158.47.199.158 port 4964
...
show less
Brute-Force
SSH
Showing 1 to
15
of 23 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩