This IP address has been reported a total of
43
times from
27 distinct
sources.
167.172.161.223 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 8000)
Source port: 61013
TTL: 237
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8000)
Source port: 61013
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 167.172.161.223) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot hit: HTTP/1.1 request on 10000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) ...
show moreHoneypot hit: HTTP/1.1 request on 10000
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 10000 [2] TCP
show less
Web App Attack
Anonymous
denied traffic to a honeypot network. destination port 8880.
Blocked by UFW (TCP on 8881)
Source port: 61003
TTL: 238
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 8881)
Source port: 61003
TTL: 238
Packet length: 44
TOS: 0x08
This report (for 167.172.161.223) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-03-02T08:58:22.289777-03:00 dns1 sshd[17096]: Failed password for invalid user mysql from 167.1 ...
show more2026-03-02T08:58:22.289777-03:00 dns1 sshd[17096]: Failed password for invalid user mysql from 167.172.161.223 port 34242 ssh2
2026-03-02T08:58:23.355282-03:00 dns1 sshd[17096]: Connection closed by invalid user mysql 167.172.161.223 port 34242 [preauth]
2026-03-02T08:58:46.831021-03:00 dns1 sshd[17098]: Invalid user odoo from 167.172.161.223 port 40192
2026-03-02T08:58:47.983006-03:00 dns1 sshd[17098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.161.223
2026-03-02T08:58:49.839867-03:00 dns1 sshd[17098]: Failed password for invalid user odoo from 167.172.161.223 port 40192 ssh2
show less
2026-03-02T11:43:11.727526+00:00 ubuntu-4gb-fsn1-1 sshd[3531157]: Invalid user hadoop from 167.172.1 ...
show more2026-03-02T11:43:11.727526+00:00 ubuntu-4gb-fsn1-1 sshd[3531157]: Invalid user hadoop from 167.172.161.223 port 45230
2026-03-02T11:43:38.832963+00:00 ubuntu-4gb-fsn1-1 sshd[3531685]: Invalid user hadoop from 167.172.161.223 port 41424
2026-03-02T11:44:06.896199+00:00 ubuntu-4gb-fsn1-1 sshd[3532239]: Invalid user hadoop from 167.172.161.223 port 50336
2026-03-02T11:44:34.897050+00:00 ubuntu-4gb-fsn1-1 sshd[3532821]: Invalid user hadoop from 167.172.161.223 port 48772
2026-03-02T11:45:02.077223+00:00 ubuntu-4gb-fsn1-1 sshd[3533372]: Invalid user hadoop from 167.172.161.223 port 38522
...
show less
2026-03-02T08:36:55.271921-03:00 dns1 sshd[16761]: Invalid user guest from 167.172.161.223 port 3391 ...
show more2026-03-02T08:36:55.271921-03:00 dns1 sshd[16761]: Invalid user guest from 167.172.161.223 port 33910
2026-03-02T08:36:55.552061-03:00 dns1 sshd[16761]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.161.223
2026-03-02T08:36:57.295005-03:00 dns1 sshd[16761]: Failed password for invalid user guest from 167.172.161.223 port 33910 ssh2
2026-03-02T08:36:58.512593-03:00 dns1 sshd[16761]: Connection closed by invalid user guest 167.172.161.223 port 33910 [preauth]
2026-03-02T08:37:21.490368-03:00 dns1 sshd[16779]: Invalid user guest from 167.172.161.223 port 38716
show less
2026-03-02T11:18:51.712974+00:00 ubuntu-4gb-fsn1-1 sshd[3501707]: Invalid user ftptest from 167.172. ...
show more2026-03-02T11:18:51.712974+00:00 ubuntu-4gb-fsn1-1 sshd[3501707]: Invalid user ftptest from 167.172.161.223 port 39180
2026-03-02T11:19:19.648833+00:00 ubuntu-4gb-fsn1-1 sshd[3502281]: Invalid user ftptest from 167.172.161.223 port 34448
2026-03-02T11:19:47.637660+00:00 ubuntu-4gb-fsn1-1 sshd[3502848]: Invalid user ftptest from 167.172.161.223 port 54584
2026-03-02T11:20:16.077890+00:00 ubuntu-4gb-fsn1-1 sshd[3503420]: Invalid user ftptest from 167.172.161.223 port 52668
2026-03-02T11:20:43.796009+00:00 ubuntu-4gb-fsn1-1 sshd[3503975]: Invalid user ftptest from 167.172.161.223 port 60912
...
show less
2026-03-02T08:15:17.489192-03:00 dns1 sshd[16419]: Failed password for invalid user es from 167.172. ...
show more2026-03-02T08:15:17.489192-03:00 dns1 sshd[16419]: Failed password for invalid user es from 167.172.161.223 port 54982 ssh2
2026-03-02T08:15:18.979082-03:00 dns1 sshd[16419]: Connection closed by invalid user es 167.172.161.223 port 54982 [preauth]
2026-03-02T08:15:41.989261-03:00 dns1 sshd[16447]: Invalid user es from 167.172.161.223 port 39332
2026-03-02T08:15:42.226295-03:00 dns1 sshd[16447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.161.223
2026-03-02T08:15:43.874641-03:00 dns1 sshd[16447]: Failed password for invalid user es from 167.172.161.223 port 39332 ssh2
show less
Fail2Ban sshd ban: Mar 02 11:10:49 N8N-Server sshd[105876]: Invalid user elasticsearch from 167.172. ...
show moreFail2Ban sshd ban: Mar 02 11:10:49 N8N-Server sshd[105876]: Invalid user elasticsearch from 167.172.161.223 port 45730
show less