This IP address has been reported a total of
206
times from
174 distinct
sources.
192.6.161.135 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Blocked by UFW (TCP on 2222)
Source port: 47567
TTL: 60
Packet length: 40
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 2222)
Source port: 47567
TTL: 60
Packet length: 40
TOS: 0x00
This report (for 192.6.161.135) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-10-23T13:27:36.835961+00:00 arrow-nl-ru1 sshd-session[125828]: pam_unix(sshd:auth): authenticat ...
show more2026-10-23T13:27:36.835961+00:00 arrow-nl-ru1 sshd-session[125828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.6.161.135
2026-10-23T13:27:38.801701+00:00 arrow-nl-ru1 sshd-session[125828]: Failed password for invalid user admin from 192.6.161.135 port 51470 ssh2
2026-10-23T13:28:15.851768+00:00 arrow-nl-ru1 sshd-session[125837]: Invalid user user from 192.6.161.135 port 34964
...
show less
2026-10-23T08:49:43.440437-04:00 ashburn sshd[404293]: Failed password for invalid user user from 19 ...
show more2026-10-23T08:49:43.440437-04:00 ashburn sshd[404293]: Failed password for invalid user user from 192.6.161.135 port 45512 ssh2
2026-10-23T08:50:16.678926-04:00 ashburn sshd[404315]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.6.161.135 user=root
2026-10-23T08:50:19.171221-04:00 ashburn sshd[404315]: Failed password for root from 192.6.161.135 port 60080 ssh2
2026-10-23T08:50:52.585135-04:00 ashburn sshd[404342]: Invalid user user from 192.6.161.135 port 56044
2026-10-23T08:50:52.589184-04:00 ashburn sshd[404342]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.6.161.135
2026-10-23T08:50:55.024051-04:00 ashburn sshd[404342]: Failed password for invalid user user from 192.6.161.135 port 56044 ssh2
2026-10-23T08:51:28.889707-04:00 ashburn sshd[404348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.6.161.135 user=root
2026-10-23T08:51:30.602038-04:00
...
show less
Oct 23 15:25:32 box sshd-session[80729]: Invalid user admin from 192.6.161.135 port 56754
Oct 23 15: ...
show moreOct 23 15:25:32 box sshd-session[80729]: Invalid user admin from 192.6.161.135 port 56754
Oct 23 15:25:33 box sshd-session[80729]: Connection closed by invalid user admin 192.6.161.135 port 56754 [preauth]
Oct 23 15:26:04 box sshd-session[80736]: Invalid user user from 192.6.161.135 port 46760
Oct 23 15:26:04 box sshd-session[80736]: Connection closed by invalid user user 192.6.161.135 port 46760 [preauth]
Oct 23 15:26:35 box sshd-session[80739]: Connection closed by authenticating user root 192.6.161.135 port 55588 [preauth]
...
show less
Detectado por Wazuh SIEM en api-ux.com | Alertas: 41 | Nivel max: 10 | Agentes: web-apiux-2025 | PHP ...
show moreDetectado por Wazuh SIEM en api-ux.com | Alertas: 41 | Nivel max: 10 | Agentes: web-apiux-2025 | PHP CGI-bin vulnerability attempt.; Multiple web server 400 error codes from same source ip.; Web server 400 error code.
show less
21 invalid SSH login attempts from 192.6.161.135 in the last 0.2 hours
Brute-Force
SSH
Anonymous
2026-10-23T10:57:24.549959+00:00 NexNode sshd[685979]: Invalid user admin from 192.6.161.135 port 38 ...
show more2026-10-23T10:57:24.549959+00:00 NexNode sshd[685979]: Invalid user admin from 192.6.161.135 port 38532
2026-10-23T10:57:55.977888+00:00 NexNode sshd[687198]: Invalid user user from 192.6.161.135 port 35798
2026-10-23T10:58:59.142275+00:00 NexNode sshd[688978]: Invalid user user from 192.6.161.135 port 44706
2026-10-23T11:00:33.201666+00:00 NexNode sshd[692377]: Invalid user orangepi from 192.6.161.135 port 38666
2026-10-23T11:01:04.235989+00:00 NexNode sshd[693654]: Invalid user support from 192.6.161.135 port 56248
...
show less
(mod_security) mod_security (id:920350) triggered by 192.6.161.135 (US/United States/-): 5 in the la ...
show more(mod_security) mod_security (id:920350) triggered by 192.6.161.135 (US/United States/-): 5 in the last 300 secs (CF_ENABLE)
show less
Blocked by UFW (TCP on 2375)
Source port: 41537
TTL: 57
Packet length: 40
TOS: 0x00
This report (fo ...
show moreBlocked by UFW (TCP on 2375)
Source port: 41537
TTL: 57
Packet length: 40
TOS: 0x00
This report (for 192.6.161.135) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less