Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
159.203.164.141 has been reported 28
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
IP Abuse Reports for 159.203.164.141:
This IP address has been reported a total of
28
times from
25 distinct
sources.
159.203.164.141 was first reported on
, and the most recent report was
.
2026-02-19T19:45:49.867016srv-sftp2 sshd[1969]: Invalid user postgres from 159.203.164.141 port 3784 ...
show more2026-02-19T19:45:49.867016srv-sftp2 sshd[1969]: Invalid user postgres from 159.203.164.141 port 37846
2026-02-19T19:46:37.505058srv-sftp2 sshd[2137]: Invalid user oracle from 159.203.164.141 port 53554
2026-02-19T19:47:23.764363srv-sftp2 sshd[2187]: Invalid user user from 159.203.164.141 port 59256
2026-02-19T19:48:09.869021srv-sftp2 sshd[2395]: Invalid user vps from 159.203.164.141 port 54186
2026-02-19T19:48:55.324492srv-sftp2 sshd[2444]: Invalid user testuser from 159.203.164.141 port 42972
2026-02-19T19:49:41.470457srv-sftp2 sshd[2458]: Invalid user server from 159.203.164.141 port 47758
2026-02-19T19:50:36.469607srv-sftp2 sshd[2684]: Invalid user hadoop from 159.203.164.141 port 49950
2026-02-19T19:51:23.196347srv-sftp2 sshd[2742]: Invalid user git from 159.203.164.141 port 33266
2026-02-19T19:52:11.413249srv-sftp2 sshd[2946]: Invalid user deploy from 159.203.164.141 port 58128
2026-02-19T19:52:58.826616srv-sftp2 sshd[2999]: Invalid user test from 159.203.164.141 port 38396
...
show less
2026-02-19T10:46:07.923388-08:00 RoblOracle sshd-session[235540]: Invalid user postgres from 159.203 ...
show more2026-02-19T10:46:07.923388-08:00 RoblOracle sshd-session[235540]: Invalid user postgres from 159.203.164.141 port 38846
2026-02-19T10:46:55.063594-08:00 RoblOracle sshd-session[235673]: Invalid user oracle from 159.203.164.141 port 57882
2026-02-19T10:47:41.418645-08:00 RoblOracle sshd-session[235763]: Invalid user user from 159.203.164.141 port 42348
2026-02-19T10:48:28.004742-08:00 RoblOracle sshd-session[235859]: Invalid user vps from 159.203.164.141 port 42438
2026-02-19T10:49:13.600861-08:00 RoblOracle sshd-session[235929]: Invalid user testuser from 159.203.164.141 port 34318
...
show less
Brute-Force
SSH
Anonymous
Invalid user postgres from 159.203.164.141 port 37846
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:root, root ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:root, root:root123, root:root321, root:123, root:321, root:pass
• Number of login attempts: 6
• 12 command(s) were executed during the session
• Client: SSH-2.0-Go
show less
Feb 19 19:39:25 vmi174663 sshd[1145616]: Failed password for root from 159.203.164.141 port 42826 ss ...
show moreFeb 19 19:39:25 vmi174663 sshd[1145616]: Failed password for root from 159.203.164.141 port 42826 ssh2
Feb 19 19:40:34 vmi174663 sshd[1145869]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.164.141 user=root
Feb 19 19:40:37 vmi174663 sshd[1145869]: Failed password for root from 159.203.164.141 port 45298 ssh2
Feb 19 19:41:34 vmi174663 sshd[1146283]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.164.141 user=root
Feb 19 19:41:36 vmi174663 sshd[1146283]: Failed password for root from 159.203.164.141 port 49994 ssh2
...
show less
Feb 19 19:37:22 guestgw-router01.remscheid.de sshd[943353]: Connection closed by authenticating user ...
show moreFeb 19 19:37:22 guestgw-router01.remscheid.de sshd[943353]: Connection closed by authenticating user root 159.203.164.141 port 55478 [preauth]
Feb 19 19:38:22 guestgw-router01.remscheid.de sshd[943489]: Connection closed by authenticating user root 159.203.164.141 port 49642 [preauth]
Feb 19 19:39:25 guestgw-router01.remscheid.de sshd[943588]: Connection closed by authenticating user root 159.203.164.141 port 51512 [preauth]
Feb 19 19:40:36 guestgw-router01.remscheid.de sshd[943728]: Connection closed by authenticating user root 159.203.164.141 port 38580 [preauth]
Feb 19 19:41:35 guestgw-router01.remscheid.de sshd[943827]: Connection closed by authenticating user root 159.203.164.141 port 60736 [preauth]
show less
2026-02-19T18:38:09.192998+00:00 news2.dwmp.it sshd[970830]: Failed password for root from 159.203.1 ...
show more2026-02-19T18:38:09.192998+00:00 news2.dwmp.it sshd[970830]: Failed password for root from 159.203.164.141 port 36828 ssh2
2026-02-19T18:39:10.545999+00:00 news2.dwmp.it sshd[971135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.164.141 user=root
2026-02-19T18:39:13.309583+00:00 news2.dwmp.it sshd[971135]: Failed password for root from 159.203.164.141 port 57944 ssh2
...
show less