AbuseIPDB » 159.138.173.171

159.138.173.171 was found in our database!

This IP was reported 1,083 times. Confidence of Abuse is 100%: ?

100%

ISP	Huawei South Africa Clouds
Usage Type	Data Center/Web Hosting/Transit
Hostname(s)	sdzhafa.cn
Domain Name	huawei.com
Country	South Africa
City	Johannesburg, Gauteng

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 159.138.173.171

Whois 159.138.173.171

IP Abuse Reports for 159.138.173.171:

This IP address has been reported a total of 1,083 times from 403 distinct sources. 159.138.173.171 was first reported on September 21st 2023, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp	Comment	Categories
Lithium Networks	2023-10-19 09:25:41 (1 month ago)	2023-10-02T11:53:52.904107Zap-Hosting-Lifetime-vRoot sshd[1053640]: Invalid user csh from 159.138.17 ... show more2023-10-02T11:53:52.904107Zap-Hosting-Lifetime-vRoot sshd[1053640]: Invalid user csh from 159.138.173.171 port 49200 2023-10-02T11:57:56.551415Zap-Hosting-Lifetime-vRoot sshd[1055419]: Invalid user mode from 159.138.173.171 port 37618 2023-10-02T11:59:45.907594Zap-Hosting-Lifetime-vRoot sshd[1056222]: Invalid user pgadmin from 159.138.173.171 port 39078 ... show less	Brute-Force SSH
ThreatBook.io	2023-10-11 04:42:42 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/159.138.173.171	Brute-Force
andronick83	2023-10-10 11:19:06 (1 month ago)	Oct 10 11:15:08 main sshd[568764]: Failed password for root from 159.138.173.171 port 44230 ssh2<br ... show moreOct 10 11:15:08 main sshd[568764]: Failed password for root from 159.138.173.171 port 44230 ssh2 Oct 10 11:18:46 main sshd[572831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root Oct 10 11:18:48 main sshd[572831]: Failed password for root from 159.138.173.171 port 44976 ssh2 ... show less	Brute-Force SSH
LoNET	2023-10-10 07:15:30 (1 month ago)	Report 765188 with IP 1755616 for SSH brute-force attack by source 1750299 via ssh-honeypot/0.2.0+ht ... show moreReport 765188 with IP 1755616 for SSH brute-force attack by source 1750299 via ssh-honeypot/0.2.0+http show less	Brute-Force SSH
Filli Group	2023-10-10 07:15:21 (1 month ago)	2023-10-10T09:07:25.128432agent01-k3s.crazycraftland.net sshd[133428]: User root from 159.138.173.17 ... show more2023-10-10T09:07:25.128432agent01-k3s.crazycraftland.net sshd[133428]: User root from 159.138.173.171 not allowed because not listed in AllowUsers 2023-10-10T09:13:13.073956agent01-k3s.crazycraftland.net sshd[133451]: User root from 159.138.173.171 not allowed because not listed in AllowUsers 2023-10-10T09:15:09.194618agent01-k3s.crazycraftland.net sshd[133507]: User root from 159.138.173.171 not allowed because not listed in AllowUsers ... show less	Brute-Force SSH
nikoladd	2023-10-10 06:27:46 (1 month ago)	Oct 10 09:18:36 server2 sshd\[4053\]: User root from 159.138.173.171 not allowed because not listed ... show moreOct 10 09:18:36 server2 sshd\[4053\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers Oct 10 09:20:31 server2 sshd\[4427\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers Oct 10 09:22:17 server2 sshd\[4598\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers Oct 10 09:24:05 server2 sshd\[4795\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers Oct 10 09:25:56 server2 sshd\[5101\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers Oct 10 09:27:45 server2 sshd\[5258\]: User root from 159.138.173.171 not allowed because not listed in AllowUsers show less	Brute-Force
Ba-Yu	2023-10-10 04:15:13 (1 month ago)	Unauthorized ssh login attempt	Web Spam Hacking Brute-Force Exploited Host Web App Attack
ThreatBook.io	2023-10-10 04:06:03 (1 month ago)	ThreatBook Intelligence: Zombie,Scanner more details on https://threatbook.io/ip/159.138.173.171	Brute-Force
justahoneypot	2023-10-10 03:15:20 (1 month ago)	Oct 10 05:11:31 h1745522 sshd[2731836]: Failed password for root from 159.138.173.171 port 40646 ssh ... show moreOct 10 05:11:31 h1745522 sshd[2731836]: Failed password for root from 159.138.173.171 port 40646 ssh2 Oct 10 05:13:27 h1745522 sshd[2733109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root Oct 10 05:13:29 h1745522 sshd[2733109]: Failed password for root from 159.138.173.171 port 40924 ssh2 Oct 10 05:15:18 h1745522 sshd[2734327]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root Oct 10 05:15:19 h1745522 sshd[2734327]: Failed password for root from 159.138.173.171 port 41204 ssh2 ... show less	Brute-Force SSH
aorth	2023-10-10 01:11:51 (1 month ago)	Oct 10 02:04:51 Failed password for invalid user root from 159.138.173.171 port 36972	Brute-Force SSH
r4ptor	2023-10-10 00:13:25 (1 month ago)	Bruteforce Attempt	Brute-Force SSH
pr0vieh	2023-10-09 22:26:29 (1 month ago)	2023-10-10T00:19:13.060571+02:00 Linux10 sshd[1831401]: pam_unix(sshd:auth): authentication failure; ... show more2023-10-10T00:19:13.060571+02:00 Linux10 sshd[1831401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root 2023-10-10T00:19:15.100468+02:00 Linux10 sshd[1831401]: Failed password for root from 159.138.173.171 port 43136 ssh2 2023-10-10T00:21:00.825845+02:00 Linux10 sshd[1837377]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root 2023-10-10T00:21:03.220558+02:00 Linux10 sshd[1837377]: Failed password for root from 159.138.173.171 port 43766 ssh2 2023-10-10T00:22:48.542715+02:00 Linux10 sshd[1842521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root 2023-10-10T00:22:50.430795+02:00 Linux10 sshd[1842521]: Failed password for root from 159.138.173.171 port 44392 ssh2 2023-10-10T00:24:34.295198+02:00 Linux10 sshd[1847492]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru ... show less	Brute-Force SSH
AaranCloud	2023-10-09 22:13:29 (1 month ago)	2023-10-09T23:11:38.329881 VPS-OHI-LIN sshd[803019]: Failed password for root from 159.138.173.171 p ... show more2023-10-09T23:11:38.329881 VPS-OHI-LIN sshd[803019]: Failed password for root from 159.138.173.171 port 38034 ssh2 2023-10-09T23:13:26.173392 VPS-OHI-LIN sshd[803150]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root 2023-10-09T23:13:28.574867 VPS-OHI-LIN sshd[803150]: Failed password for root from 159.138.173.171 port 38666 ssh2 ... show less	Brute-Force SSH
Savvii	2023-10-09 21:45:14 (1 month ago)	20 attempts against mh-ssh on k3s-master02-ec	Brute-Force SSH
forhosting	2023-10-09 19:54:57 (1 month ago)	Oct 9 21:51:22 unifi sshd[164843]: Failed password for root from 159.138.173.171 port 35354 ssh2<br ... show moreOct 9 21:51:22 unifi sshd[164843]: Failed password for root from 159.138.173.171 port 35354 ssh2 Oct 9 21:53:05 unifi sshd[164908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root Oct 9 21:53:07 unifi sshd[164908]: Failed password for root from 159.138.173.171 port 35698 ssh2 Oct 9 21:54:54 unifi sshd[164949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.138.173.171 user=root Oct 9 21:54:56 unifi sshd[164949]: Failed password for root from 159.138.173.171 port 36040 ssh2 ... show less	Brute-Force SSH