This IP address has been reported a total of
34
times from
26 distinct
sources.
185.103.164.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-14T01:33:06.616023+00:00 de-ffm-lim02-mt01 sshd[3601430]: pam_unix(sshd:auth): authenticatio ...
show more2026-06-14T01:33:06.616023+00:00 de-ffm-lim02-mt01 sshd[3601430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.103.164.42 user=root
2026-06-14T01:33:09.127854+00:00 de-ffm-lim02-mt01 sshd[3601430]: Failed password for root from 185.103.164.42 port 55718 ssh2
2026-06-14T02:06:38.833348+00:00 de-ffm-lim02-mt01 sshd[3603600]: Invalid user admin from 185.103.164.42 port 34988
...
show less
2026-06-14T02:01:13.388676+03:00 vatnik sshd[214922]: error: kex_exchange_identification: Connection ...
show more2026-06-14T02:01:13.388676+03:00 vatnik sshd[214922]: error: kex_exchange_identification: Connection closed by remote host
2026-06-14T02:01:13.390883+03:00 vatnik sshd[214922]: Connection closed by 185.103.164.42 port 38570
...
show less
2026-06-11T10:18:29.689591+02:00 mx01.crazycraftland.net sshd-session[2543852]: User root from 185.1 ...
show more2026-06-11T10:18:29.689591+02:00 mx01.crazycraftland.net sshd-session[2543852]: User root from 185.103.164.42 not allowed because not listed in AllowUsers
2026-06-11T10:27:34.691502+02:00 mx01.crazycraftland.net sshd-session[2549836]: User root from 185.103.164.42 not allowed because not listed in AllowUsers
2026-06-11T10:28:58.063343+02:00 mx01.crazycraftland.net sshd-session[2550701]: User root from 185.103.164.42 not allowed because not listed in AllowUsers
...
show less
2026-06-11T05:10:49.050395+02:00 v2202507290157366551 sshd[3031586]: Invalid user admin from 185.103 ...
show more2026-06-11T05:10:49.050395+02:00 v2202507290157366551 sshd[3031586]: Invalid user admin from 185.103.164.42 port 50122
2026-06-11T05:10:49.064436+02:00 v2202507290157366551 sshd[3031586]: Connection closed by invalid user admin 185.103.164.42 port 50122 [preauth]
2026-06-11T05:14:58.662431+02:00 v2202507290157366551 sshd[3034989]: Invalid user 4tf.de from 185.103.164.42 port 50582
...
show less
SSH Brute force: 2 attempts were recorded from 185.103.164.42
2026-06-09T22:32:27+02:00 Connection c ...
show moreSSH Brute force: 2 attempts were recorded from 185.103.164.42
2026-06-09T22:32:27+02:00 Connection closed by authenticating user root 185.103.164.42 port 35228 [preauth]
2026-06-09T22:32:27+02:00 Connection closed by authenticating user root 185.103.164.42 port 56760 [preauth]
show less
SSH Brute force: 1 attempts were recorded from 185.103.164.42
2026-06-05T00:31:21+02:00 Connection c ...
show moreSSH Brute force: 1 attempts were recorded from 185.103.164.42
2026-06-05T00:31:21+02:00 Connection closed by authenticating user root 185.103.164.42 port 48892 [preauth]
show less
2026-06-04T10:44:57.906089+02:00 [server] sshd-session[487135]: Invalid user pi from 185.103.164.42 ...
show more2026-06-04T10:44:57.906089+02:00 [server] sshd-session[487135]: Invalid user pi from 185.103.164.42 port 54578
2026-06-04T11:06:47.201214+02:00 [server] sshd-session[491468]: Invalid user admin from 185.103.164.42 port 39028
2026-06-04T11:15:22.600534+02:00 [server] sshd-session[493120]: Invalid user admin from 185.103.164.42 port 43772
...
show less
2026-06-01T04:02:05.149167+02:00 eproxy sshd[1483828]: User root not allowed because account is lock ...
show more2026-06-01T04:02:05.149167+02:00 eproxy sshd[1483828]: User root not allowed because account is locked
2026-06-01T04:02:05.171096+02:00 eproxy sshd[1483828]: Connection closed by invalid user root 185.103.164.42 port 35996 [preauth]
...
show less
Web App Attack
Showing 1 to
15
of 34 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩