This IP address has been reported a total of
1,005
times from
339 distinct
sources.
167.172.166.5 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-16T20:53:29.595543+00:00 it-mil01 sshd-session[2871813]: Invalid user mc from 167.172.166.5 ...
show more2026-06-16T20:53:29.595543+00:00 it-mil01 sshd-session[2871813]: Invalid user mc from 167.172.166.5 port 48820
2026-06-16T20:58:12.031241+00:00 it-mil01 sshd-session[2872216]: Connection from 167.172.166.5 port 45758 on 5.231.80.191 port 22 rdomain ""
2026-06-16T20:58:12.215356+00:00 it-mil01 sshd-session[2872216]: Invalid user alex from 167.172.166.5 port 45758
...
show less
2026-06-16T21:58:37.499390+02:00 sd-64746 sshd[1323994]: Invalid user explicatos from 167.172.166.5 ...
show more2026-06-16T21:58:37.499390+02:00 sd-64746 sshd[1323994]: Invalid user explicatos from 167.172.166.5 port 55380
2026-06-16T22:00:15.957107+02:00 sd-64746 sshd[1324483]: Invalid user bert from 167.172.166.5 port 55978
2026-06-16T22:01:55.440007+02:00 sd-64746 sshd[1324921]: Invalid user m from 167.172.166.5 port 38482
...
show less
2026-06-16T21:41:31.471958+02:00 gw-de35-01.guestgw.net sshd[421439]: Invalid user nginx from 167.17 ...
show more2026-06-16T21:41:31.471958+02:00 gw-de35-01.guestgw.net sshd[421439]: Invalid user nginx from 167.172.166.5 port 32932
2026-06-16T21:41:31.535129+02:00 gw-de35-01.guestgw.net sshd[421439]: Disconnected from invalid user nginx 167.172.166.5 port 32932 [preauth]
2026-06-16T21:43:10.836535+02:00 gw-de35-01.guestgw.net sshd[421927]: Disconnected from authenticating user root 167.172.166.5 port 41562 [preauth]
2026-06-16T21:44:45.868428+02:00 gw-de35-01.guestgw.net sshd[422350]: Disconnected from authenticating user root 167.172.166.5 port 46728 [preauth]
2026-06-16T21:46:22.757860+02:00 gw-de35-01.guestgw.net sshd[422926]: Disconnected from authenticating user root 167.172.166.5 port 42106 [preauth]
show less
Jun 17 00:08:45 mags sshd-session[2329512]: Invalid user ubuntu from 167.172.166.5 port 51904
Jun 17 ...
show moreJun 17 00:08:45 mags sshd-session[2329512]: Invalid user ubuntu from 167.172.166.5 port 51904
Jun 17 00:15:19 mags sshd-session[2331838]: Invalid user ubuntu from 167.172.166.5 port 51516
Jun 17 00:20:41 mags sshd-session[2332990]: Invalid user admin from 167.172.166.5 port 46974
Jun 17 00:22:20 mags sshd-session[2333049]: Invalid user george from 167.172.166.5 port 38362
Jun 17 00:30:36 mags sshd-session[2335445]: Invalid user weblogic from 167.172.166.5 port 45934
Jun 17 00:32:17 mags sshd-session[2335580]: Invalid user peer from 167.172.166.5 port 53180
Jun 17 00:33:53 mags sshd-session[2335661]: Invalid user postgres from 167.172.166.5 port 41542
...
show less
Jun 16 15:47:52 irc sshd[613651]: Failed password for root from 167.172.166.5 port 50800 ssh2
Jun 16 ...
show moreJun 16 15:47:52 irc sshd[613651]: Failed password for root from 167.172.166.5 port 50800 ssh2
Jun 16 15:49:25 irc sshd[613655]: Invalid user buser from 167.172.166.5 port 53768
Jun 16 15:49:25 irc sshd[613655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.166.5
Jun 16 15:49:27 irc sshd[613655]: Failed password for invalid user buser from 167.172.166.5 port 53768 ssh2
Jun 16 15:51:36 irc sshd[613662]: Invalid user postgres from 167.172.166.5 port 59732
Jun 16 15:51:36 irc sshd[613662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.166.5
Jun 16 15:51:38 irc sshd[613662]: Failed password for invalid user postgres from 167.172.166.5 port 59732 ssh2
...
show less
2026-06-16T14:43:06.516751+02:00 axisverse sshd-session[1538503]: Invalid user vlad from 167.172.166 ...
show more2026-06-16T14:43:06.516751+02:00 axisverse sshd-session[1538503]: Invalid user vlad from 167.172.166.5 port 36488
2026-06-16T14:49:21.372389+02:00 axisverse sshd-session[1558395]: Invalid user buser from 167.172.166.5 port 55592
2026-06-16T14:51:33.468068+02:00 axisverse sshd-session[1565392]: Invalid user postgres from 167.172.166.5 port 58654
...
show less
Report 2470910 with IP 3518477 for SSH brute-force attack by source 3513135 via ssh-honeypot/0.2.0+h ...
show moreReport 2470910 with IP 3518477 for SSH brute-force attack by source 3513135 via ssh-honeypot/0.2.0+http
show less
2026-06-16T08:31:37.658823-04:00 Host-KEWR-E sshd[360087]: User root from 167.172.166.5 not allowed ...
show more2026-06-16T08:31:37.658823-04:00 Host-KEWR-E sshd[360087]: User root from 167.172.166.5 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1005 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩