167.235.26.80
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Hetzner Online GmbH
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS24940
- Hostname(s)
- static.80.26.235.167.clients.your-server.de
- Domain Name
- hetzner.com
- Country
- 🇩🇪 Germany
- City
- Nuremberg, Bavaria
No reports in the last 60 days
167.235.26.80 has been reported 397 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
397 from
120 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 rjdefrancisco |
Unwanted traffic detected by honeypot on May 27, 2026: brute force and hacking attacks (5 over ssh).
|
Port Scan Brute-Force SSH | |
| 🇨🇭 m_vlasov |
Cowrie SSH/Telnet honeypot: 10 login attempts, 2 sessions, 0 shell commands.
|
Port Scan Brute-Force SSH | |
| 🇺🇸 cwytech |
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-ssh-crit.
|
Brute-Force SSH | |
| 🇫🇮 FlamingMojo |
Cowrie Honeypot: Unauthorised SSH/Telnet login attempt with user "root" at 2026-05-28T00:41:02Z
|
Brute-Force SSH | |
| 🇨🇦 bdonvr |
|
Brute-Force SSH | |
| 🇦🇹 Pingger Shikkoken |
|
Hacking Brute-Force SSH | |
| 🇰🇷 2048 |
2026-05-28T06:06:10.440347+09:00 no2 sshd[1975457]: Disconnected from authenticating user root 167.235.26.80 port 40892 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 canine.tools |
[fail2ban Auto Report] 2026-05-27T16:47:28.051956-04:00 alpha sshd-session[3392256]: error: maximum authentication attempts exceeded for root from 167.235.26.80 port 35192 ssh2 [preauth]
...
|
Brute-Force SSH | |
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: ab:21:61:aa:bd:e8:d0:ea:77:9c:bd:ea:7d:94:8b:a9
|
SSH | |
| 🇨🇦 dpinse |
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credential used: root:undefined
• Number of login attempts: 1
• Client: SSH-2.0-libssh2_1.11.0
• SSH key fingerprints: 91:84:e0:1a:53:41:f8:a9:47:d0:02:76:96:72:e4:bb
|
SSH | |
| 🇰🇷 2048 |
2026-05-28T03:40:17.965584+09:00 no6 sshd[483662]: Disconnected from authenticating user root 167.235.26.80 port 58774 [preauth]
...
|
Brute-Force SSH | |
| 🇺🇸 PP-VTNK |
2026-05-27T20:46:54.964321+03:00 vatnik sshd[204452]: User root from 167.235.26.80 not allowed because listed in DenyUsers
...
|
Hacking Brute-Force SSH | |
| 🇬🇧 Stuart Reid |
...
|
SSH | |
| 🇺🇸 canine.tools |
[fail2ban Auto Report] 2026-05-27T13:20:56.200070-04:00 alpha sshd-session[3321251]: error: maximum authentication attempts exceeded for root from 167.235.26.80 port 33188 ssh2 [preauth]
...
|
Brute-Force SSH | |
| 🇬🇧 WebServ |
Blocked by ufw after 3 attempts in last 300s.
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown