JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 163.5.26.80

163.5.26.80 was found in our database!

This IP was reported 362 times. Confidence of Abuse is 100%: ?

100%

ISP	LIGA HOSTING LTD
Usage Type	Data Center/Web Hosting/Transit
ASN	AS201131
Domain Name	ligahosting.ro
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 163.5.26.80

Whois 163.5.26.80

IP Abuse Reports for 163.5.26.80:

This IP address has been reported a total of 362 times from 208 distinct sources. 163.5.26.80 was first reported on August 21st 2026, and the most recent report was 56 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 tecnicorioja	2026-09-02 22:00:12 (56 minutes ago)	Failed password for root Sep 02 20:09:11 port Bye	Brute-Force SSH
Anonymous	2026-09-02 20:55:47 (2 hours ago)	2026-09-02T20:44:55.004663+00:00 rayhem.dev sshd[1063306]: Invalid user consultor from 163.5.26.80 p ... show more 2026-09-02T20:44:55.004663+00:00 rayhem.dev sshd[1063306]: Invalid user consultor from 163.5.26.80 port 51242 2026-09-02T20:46:13.324367+00:00 rayhem.dev sshd[1063653]: Invalid user coolify from 163.5.26.80 port 46178 2026-09-02T20:47:36.186240+00:00 rayhem.dev sshd[1064048]: Invalid user ubuntu from 163.5.26.80 port 41114 2026-09-02T20:53:10.351936+00:00 rayhem.dev sshd[1065546]: Invalid user santhosh from 163.5.26.80 port 49090 2026-09-02T20:55:46.883664+00:00 rayhem.dev sshd[1066243]: Invalid user mailuser from 163.5.26.80 port 38962 ... show less	Brute-Force SSH
Anonymous	2026-09-02 20:34:53 (2 hours ago)	2026-09-02T20:27:05.741361+00:00 rayhem.dev sshd[1058344]: Invalid user aditya from 163.5.26.80 port ... show more 2026-09-02T20:27:05.741361+00:00 rayhem.dev sshd[1058344]: Invalid user aditya from 163.5.26.80 port 60612 2026-09-02T20:28:13.836335+00:00 rayhem.dev sshd[1058663]: Invalid user navid from 163.5.26.80 port 55548 2026-09-02T20:30:48.022748+00:00 rayhem.dev sshd[1059395]: Invalid user stefanos from 163.5.26.80 port 45418 2026-09-02T20:32:10.486770+00:00 rayhem.dev sshd[1059778]: Invalid user shamim from 163.5.26.80 port 40354 2026-09-02T20:34:53.210720+00:00 rayhem.dev sshd[1060536]: Invalid user shiv from 163.5.26.80 port 58458 ... show less	Brute-Force SSH
🇩🇪 NetEye	2026-09-02 20:28:09 (2 hours ago)	SSH brute force login attempt	Brute-Force SSH
🇸🇪 hhmm	2026-09-02 20:27:46 (2 hours ago)	2026-09-02T23:20:36.360806+03:00 atom sshd-session[610401]: Failed password for root from 163.5.26.8 ... show more 2026-09-02T23:20:36.360806+03:00 atom sshd-session[610401]: Failed password for root from 163.5.26.80 port 42962 ssh2 2026-09-02T23:26:37.467136+03:00 atom sshd-session[610779]: Invalid user aditya from 163.5.26.80 port 33910 2026-09-02T23:26:37.477393+03:00 atom sshd-session[610779]: Failed password for invalid user aditya from 163.5.26.80 port 33910 ssh2 2026-09-02T23:27:44.691768+03:00 atom sshd-session[610844]: Invalid user navid from 163.5.26.80 port 57078 2026-09-02T23:27:44.701817+03:00 atom sshd-session[610844]: Failed password for invalid user navid from 163.5.26.80 port 57078 ssh2 ... show less	SSH
🇺🇸 pablo	2026-09-02 19:00:04 (3 hours ago)	SSH honeypot (Cowrie) recorded 135 events over 53m. Activity: SSH connection to honeypot; SSH creden ... show more SSH honeypot (Cowrie) recorded 135 events over 53m. Activity: SSH connection to honeypot; SSH credential brute-force; SSH key persistence attempt; SSH key written via shell redirect; automated SSH client (scanner banner); crontab persistence installation; post-auth command execution; successful honeypot login. Usernames tried: 345gs5662d34, administrator, ander, armin, book, dima. Passwords tried: 1, 11111111, 123, 123456. Commands: cd ~; chattr -ia .ssh; lockr -ia .ssh \| cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1 \| cat /proc/cpuinfo \| grep name \| wc -l Files written/uploaded: /home/administrator/.ssh/authorized_keys Wazuh rules: 100100,100101,100102,100103,100107,100112,100117,100124. show less	Port Scan Hacking Brute-Force Exploited Host SSH
🇺🇸 yzfdude1	2026-09-02 18:10:54 (4 hours ago)	2026-09-02T12:04:18.137353-06:00 b146-28 sshd[946445]: pam_unix(sshd:auth): authentication failure; ... show more 2026-09-02T12:04:18.137353-06:00 b146-28 sshd[946445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.26.80 user=root 2026-09-02T12:04:20.000971-06:00 b146-28 sshd[946445]: Failed password for invalid user root from 163.5.26.80 port 50764 ssh2 2026-09-02T12:10:54.026648-06:00 b146-28 sshd[946856]: Invalid user administrator from 163.5.26.80 port 44932 ... show less	Brute-Force SSH
🇮🇩 digitalsekuriti.id	2026-09-02 16:56:51 (5 hours ago)	2026-09-02T23:52:37.007446 mail.atmatech.id sshd[3692507]: pam_unix(sshd:auth): authentication failu ... show more 2026-09-02T23:52:37.007446 mail.atmatech.id sshd[3692507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.26.80 2026-09-02T23:52:38.750353 mail.atmatech.id sshd[3692507]: Failed password for invalid user edwin from 163.5.26.80 port 47828 ssh2 2026-09-02T23:53:58.640971 mail.atmatech.id sshd[3693296]: Invalid user ftpuser from 163.5.26.80 port 43690 ... show less	Brute-Force SSH
🇺🇸 sh97	2026-09-02 16:55:05 (6 hours ago)	US905-RN-ASH.vps.992969.xyz: SSH Brute Force from 163.5.26.80 at 2026-09-02 22:25:04 IST	Brute-Force SSH
🇩🇪 Jalos	2026-09-02 15:35:51 (7 hours ago)	$f2bV_matches	Brute-Force SSH
🇯🇵 Indexyz	2026-09-02 14:26:02 (8 hours ago)	2026-09-02T22:21:53.578685+08:00 hostname sshd-session[3291488]: Invalid user dev from 163.5.26.80 ... show more 2026-09-02T22:21:53.578685+08:00 hostname sshd-session[3291488]: Invalid user dev from 163.5.26.80 port 40214 2026-09-02T22:24:39.219688+08:00 hostname sshd-session[3291543]: Connection from 163.5.26.80 port 59178 on 115.231.27.164 port 22 rdomain "" 2026-09-02T22:24:42.779607+08:00 hostname sshd-session[3291543]: Invalid user minecraft from 163.5.26.80 port 59178 2026-09-02T22:26:00.156499+08:00 hostname sshd-session[3291566]: Connection from 163.5.26.80 port 54542 on 115.231.27.164 port 22 rdomain "" 2026-09-02T22:26:01.225241+08:00 hostname sshd-session[3291566]: Invalid user miguel from 163.5.26.80 port 54542 show less	Brute-Force SSH
🇩🇪 LRob	2026-09-02 14:08:08 (8 hours ago)	Unauthorised SSH login attempts \| 2026-09-02 14:08 UTC	Brute-Force SSH
🇦🇺 Epic29	2026-09-02 12:35:55 (10 hours ago)	2026-09-02T22:31:46.999428+10:00 sleep-salami sshd[1748434]: Disconnected from authenticating user r ... show more 2026-09-02T22:31:46.999428+10:00 sleep-salami sshd[1748434]: Disconnected from authenticating user root 163.5.26.80 port 55372 [preauth] 2026-09-02T22:33:06.917367+10:00 sleep-salami sshd[1748446]: Invalid user ubuntu from 163.5.26.80 port 50788 2026-09-02T22:33:07.220974+10:00 sleep-salami sshd[1748446]: Disconnected from invalid user ubuntu 163.5.26.80 port 50788 [preauth] 2026-09-02T22:34:30.464324+10:00 sleep-salami sshd[1748482]: Disconnected from authenticating user root 163.5.26.80 port 46216 [preauth] 2026-09-02T22:35:55.159497+10:00 sleep-salami sshd[1748501]: Invalid user yogi from 163.5.26.80 port 41638 ... show less	Brute-Force SSH
🇫🇷 Sayrix	2026-09-02 12:34:26 (10 hours ago)	2026-09-02T14:32:57.714684+02:00 AGE-1 sshd[3059273]: Invalid user ubuntu from 163.5.26.80 port 3883 ... show more 2026-09-02T14:32:57.714684+02:00 AGE-1 sshd[3059273]: Invalid user ubuntu from 163.5.26.80 port 38830 2026-09-02T14:32:57.760439+02:00 AGE-1 sshd[3059273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.26.80 2026-09-02T14:32:59.311191+02:00 AGE-1 sshd[3059273]: Failed password for invalid user ubuntu from 163.5.26.80 port 38830 ssh2 2026-09-02T14:34:21.633878+02:00 AGE-1 sshd[3059386]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.26.80 user=root 2026-09-02T14:34:23.911265+02:00 AGE-1 sshd[3059386]: Failed password for root from 163.5.26.80 port 34258 ssh2 ... show less	Brute-Force SSH
🇫🇷 Sayrix	2026-09-02 12:08:40 (10 hours ago)	2026-09-02T14:06:01.112888+02:00 AGE-1 sshd[3057745]: Failed password for root from 163.5.26.80 port ... show more 2026-09-02T14:06:01.112888+02:00 AGE-1 sshd[3057745]: Failed password for root from 163.5.26.80 port 41160 ssh2 2026-09-02T14:07:18.387989+02:00 AGE-1 sshd[3057861]: Invalid user devops from 163.5.26.80 port 36576 2026-09-02T14:07:18.432859+02:00 AGE-1 sshd[3057861]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.5.26.80 2026-09-02T14:07:20.368713+02:00 AGE-1 sshd[3057861]: Failed password for invalid user devops from 163.5.26.80 port 36576 ssh2 2026-09-02T14:08:38.569449+02:00 AGE-1 sshd[3057935]: Invalid user yzh from 163.5.26.80 port 60220 ... show less	Brute-Force SSH

Showing 1 to 15 of 362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 213.177.179.163

🇨🇳 180.76.202.69

🇺🇸 71.19.205.137

🇩🇪 213.209.159.4

🇺🇸 207.180.11.233

🇨🇳 183.23.63.115

🇻🇪 38.166.90.118

🇺🇸 162.216.150.20

🇮🇳 161.248.37.160

🇬🇪 95.104.122.17

🇺🇸 20.127.197.119

🇺🇸 185.214.241.215

🇺🇸 162.243.76.142

🇩🇪 154.196.35.96

🇨🇳 121.229.205.104

🇺🇸 52.230.251.199

🇬🇧 37.10.113.218

🇺🇸 35.222.117.243

🇭🇰 34.92.27.137

🇬🇧 31.14.254.26