This IP address has been reported a total of
123
times from
107 distinct
sources.
191.180.161.164 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-18T06:43:07.066013+02:00 T440s sshd[1069525]: Failed password for root from 191.180.161.164 ...
show more2026-07-18T06:43:07.066013+02:00 T440s sshd[1069525]: Failed password for root from 191.180.161.164 port 35603 ssh2
2026-07-18T06:43:11.074777+02:00 T440s sshd[1069525]: Failed password for root from 191.180.161.164 port 35603 ssh2
2026-07-18T06:43:13.419535+02:00 T440s sshd[1069525]: Failed password for root from 191.180.161.164 port 35603 ssh2
...
show less
2026-07-18T07:21:47.027972+03:00 kotia sshd-session[311600]: error: maximum authentication attempts ...
show more2026-07-18T07:21:47.027972+03:00 kotia sshd-session[311600]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 33004 ssh2 [preauth]
2026-07-18T07:21:50.482350+03:00 kotia sshd-session[311603]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 33252 ssh2 [preauth]
2026-07-18T07:21:54.234604+03:00 kotia sshd-session[311605]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 33408 ssh2 [preauth]
...
show less
Brute-Force
SSH
Anonymous
SSH Brute Force (3 attempts). Evidence: sshd[17849]: error: maximum authentication attempts exceeded ...
show moreSSH Brute Force (3 attempts). Evidence: sshd[17849]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 60657 ssh2 [preauth];sshd[17852]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 60810 ssh2 [preauth]
show less
2026-07-18T02:43:49.380066+00:00 reliablesite sshd[3758152]: Failed password for root from 191.180.1 ...
show more2026-07-18T02:43:49.380066+00:00 reliablesite sshd[3758152]: Failed password for root from 191.180.161.164 port 52532 ssh2
2026-07-18T02:43:51.885104+00:00 reliablesite sshd[3758152]: Failed password for root from 191.180.161.164 port 52532 ssh2
2026-07-18T02:43:54.525093+00:00 reliablesite sshd[3758152]: Failed password for root from 191.180.161.164 port 52532 ssh2
...
show less
(sshd) Failed SSH login from 191.180.161.164 (BR/Brazil/bfb4a1a4.virtua.com.br): 5 in the last 300 s ...
show more(sshd) Failed SSH login from 191.180.161.164 (BR/Brazil/bfb4a1a4.virtua.com.br): 5 in the last 300 secs
show less
Jul 17 18:53:07 b146-14 sshd[19174]: Failed password for root from 191.180.161.164 port 45759 ssh2
J ...
show moreJul 17 18:53:07 b146-14 sshd[19174]: Failed password for root from 191.180.161.164 port 45759 ssh2
Jul 17 18:53:17 b146-14 sshd[19174]: Failed password for root from 191.180.161.164 port 45759 ssh2
Jul 17 18:53:19 b146-14 sshd[19174]: Failed password for root from 191.180.161.164 port 45759 ssh2
...
show less
Jul 18 00:23:04 fail2ban sshd[3899587]: Failed password for root from 191.180.161.164 port 60112 ssh ...
show moreJul 18 00:23:04 fail2ban sshd[3899587]: Failed password for root from 191.180.161.164 port 60112 ssh2
Jul 18 00:23:22 fail2ban sshd[3899587]: error: maximum authentication attempts exceeded for root from 191.180.161.164 port 60112 ssh2 [preauth]
...
show less
2026-07-17T19:45:21.623147+00:00 karl sshd-session[667044]: Failed password for root from 191.180.16 ...
show more2026-07-17T19:45:21.623147+00:00 karl sshd-session[667044]: Failed password for root from 191.180.161.164 port 39260 ssh2
2026-07-17T19:45:25.531234+00:00 karl sshd-session[667044]: Failed password for root from 191.180.161.164 port 39260 ssh2
2026-07-17T19:45:28.446769+00:00 karl sshd-session[667044]: Failed password for root from 191.180.161.164 port 39260 ssh2
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-07-17. Risk score: 100/100.
show less
Brute-Force
SSH
Showing 1 to
15
of 123 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩