This IP address has been reported a total of
45
times from
37 distinct
sources.
189.165.5.242 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 12
reports;
United States of America
with 8
reports;
Canada
with 3
reports.
The most common categories in these recent reports were:
Brute-Force
44
times;
SSH
42
times;
Exploited Host
2
times;
Hacking
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-22T18:56:33.237290ch-vmpico sshd[195341]: Failed password for root from 189.165.5.242 port 3 ...
show more2026-10-22T18:56:33.237290ch-vmpico sshd[195341]: Failed password for root from 189.165.5.242 port 36045 ssh2
2026-10-22T18:58:19.066462ch-vmpico sshd[195343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.5.242 user=root
2026-10-22T18:58:20.499005ch-vmpico sshd[195343]: Failed password for root from 189.165.5.242 port 51712 ssh2
...
show less
2026-10-22T18:30:13.976499+00:00 ks6.hofud.com sshd[910987]: Disconnected from authenticating user r ...
show more2026-10-22T18:30:13.976499+00:00 ks6.hofud.com sshd[910987]: Disconnected from authenticating user root 189.165.5.242 port 59002 [preauth]
2026-10-22T18:32:40.539401+00:00 ks6.hofud.com sshd[911196]: Disconnected from authenticating user root 189.165.5.242 port 53508 [preauth]
2026-10-22T18:35:03.862385+00:00 ks6.hofud.com sshd[911530]: Disconnected from authenticating user root 189.165.5.242 port 48076 [preauth]
2026-10-22T18:37:31.152895+00:00 ks6.hofud.com sshd[911808]: Disconnected from authenticating user root 189.165.5.242 port 42870 [preauth]
2026-10-22T18:39:56.429111+00:00 ks6.hofud.com sshd[912031]: Disconnected from authenticating user root 189.165.5.242 port 37330 [preauth]
...
show less
2026-10-22T18:08:14.673158+00:00 ks6.hofud.com sshd[908854]: Disconnected from authenticating user r ...
show more2026-10-22T18:08:14.673158+00:00 ks6.hofud.com sshd[908854]: Disconnected from authenticating user root 189.165.5.242 port 51969 [preauth]
2026-10-22T18:10:39.201184+00:00 ks6.hofud.com sshd[909151]: Disconnected from authenticating user root 189.165.5.242 port 46203 [preauth]
2026-10-22T18:13:11.739976+00:00 ks6.hofud.com sshd[909357]: Disconnected from authenticating user root 189.165.5.242 port 41107 [preauth]
2026-10-22T18:15:37.788192+00:00 ks6.hofud.com sshd[909585]: Disconnected from authenticating user root 189.165.5.242 port 36008 [preauth]
2026-10-22T18:18:10.657379+00:00 ks6.hofud.com sshd[909831]: Disconnected from authenticating user root 189.165.5.242 port 59525 [preauth]
...
show less
2026-10-22T20:01:39.123184+02:00 web3 sshd-session[603716]: Failed password for root from 189.165.5. ...
show more2026-10-22T20:01:39.123184+02:00 web3 sshd-session[603716]: Failed password for root from 189.165.5.242 port 51456 ssh2
2026-10-22T20:03:25.357147+02:00 web3 sshd-session[603745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.5.242 user=root
2026-10-22T20:03:27.461057+02:00 web3 sshd-session[603745]: Failed password for root from 189.165.5.242 port 38950 ssh2
2026-10-22T20:05:17.922258+02:00 web3 sshd-session[603785]: refused connect from 189.165.5.242 (189.165.5.242)
show less
2026-10-22T19:02:32.915895+02:00 RobertMitchum sshd-session[3078259]: pam_unix(sshd:auth): authentic ...
show more2026-10-22T19:02:32.915895+02:00 RobertMitchum sshd-session[3078259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.5.242
2026-10-22T19:02:35.603276+02:00 RobertMitchum sshd-session[3078259]: Failed password for invalid user kitchen from 189.165.5.242 port 60124 ssh2
2026-10-22T19:06:31.193890+02:00 RobertMitchum sshd-session[3079582]: Invalid user leandro from 189.165.5.242 port 56963
...
show less
2026-10-22T16:20:38.480781+00:00 kocer-main-webserver sshd[407341]: Invalid user oleg from 189.165.5 ...
show more2026-10-22T16:20:38.480781+00:00 kocer-main-webserver sshd[407341]: Invalid user oleg from 189.165.5.242 port 34637
2026-10-22T16:25:19.371572+00:00 kocer-main-webserver sshd[407782]: Invalid user moshe from 189.165.5.242 port 51884
2026-10-22T16:27:37.249983+00:00 kocer-main-webserver sshd[408023]: Invalid user manish from 189.165.5.242 port 46226
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: moshe, Pass: [REDACTED]
2026-10-22T17:50:55.744874 proxy-ssh.dsi.uvsq.fr sshd[318903]: Failed password for invalid user TEST ...
show more2026-10-22T17:50:55.744874 proxy-ssh.dsi.uvsq.fr sshd[318903]: Failed password for invalid user TEST from 189.165.5.242 port 49737 ssh2
2026-10-22T17:50:56.875634 proxy-ssh.dsi.uvsq.fr sshd[318903]: Disconnected from invalid user TEST 189.165.5.242 port 49737 [preauth]
2026-10-22T17:53:15.685729 proxy-ssh.dsi.uvsq.fr sshd[318923]: Invalid user test from 189.165.5.242 port 44413
2026-10-22T17:53:15.697496 proxy-ssh.dsi.uvsq.fr sshd[318923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.165.5.242
2026-10-22T17:53:17.535843 proxy-ssh.dsi.uvsq.fr sshd[318923]: Failed password for invalid user test from 189.165.5.242 port 44413 ssh2
...
show less
