JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

195.158.5.242

Activity Trending Down

Abuse Confidence Score

100% Critical

149 reports

90 reporters · latest 1 week ago

ISP: Uzbektelekom Joint Stock Company
Usage Type: Fixed Line ISP
ASN: AS8193
Hostname(s): kuch.uz
Domain Name: bkm.uz
Country: 🇺🇿 Uzbekistan
City: Tashkent, Tashkent

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

149 from 90 distinct reporters

First reported

October 25th 2026

Most recent report

1 week ago

Last 60 days

Top reporter locations 🇫🇷 France 55 🇺🇸 United States of America 33 🇩🇪 Germany 29

Most common categories SSH 140 Brute-Force 137 Port Scan 15 Hacking 8 IoT Targeted 4

Old reports The most recent abuse report for this IP address is from 1 week ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 SiyCah	2026-11-06 07:00:08 UTC · (1 week ago)	195.158.5.242 fell into Endlessh tarpit; 0/84 total connections are currently still open. Total time wasted: 8m 24s. Total bytes sent by tarpit: 51.00KiB. Report generated by Endlessh Report Generator v1.2.3	Brute-Force Port Scan SSH Hacking
🇩🇪 SiyCah	2026-11-05 07:00:06 UTC · (1 week ago)	195.158.5.242 fell into Endlessh tarpit; 0/84 total connections are currently still open. Total time wasted: 8m 24s. Total bytes sent by tarpit: 51.00KiB. Report generated by Endlessh Report Generator v1.2.3	Brute-Force Port Scan SSH Hacking
🇫🇷 Samuel La Manna	2026-11-05 00:38:49 UTC · (1 week ago)	SSH brute-force against my server: 11 failed attempts, usernames tried: dex, exchange, hash, ubuntu, zjy, deploy.	Brute-Force SSH
🇰🇷 yazzang	2026-11-05 00:05:14 UTC · (1 week ago)	SSH honeypot: automated intrusion attempts against a personal decoy server (Server Guardian Warboard). Read-only capture.	Hacking Brute-Force Exploited Host SSH
🇧🇷 radardatelecom	2026-11-04 16:53:04 UTC · (1 week ago)	Blocked by Radar da Telecom firewall — abuseipdb	Bad Web Bot Web App Attack
🇬🇧 sverre26	2026-11-04 16:26:03 UTC · (1 week ago)	Bruteforce detected by fail2ban	Brute-Force SSH
🇺🇸 johuang92	2026-11-04 16:19:27 UTC · (1 week ago)	Cowrie SSH honeypot: session 4fd1f044137d \| 1 login attempt(s) \| 5 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s ... show more Cowrie SSH honeypot: session 4fd1f044137d \| 1 login attempt(s) \| 5 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s CPU:%s" "$U" "$N"' ; true; /bin/uname -a 2 > /dev/null \| /usr/bin/tr -d \n; /usr/bin/nproc 2 > /dev/null; /bin/grep -c ^processor /proc/cpuinfo 2 > /dev/null; U=; N=2 processor : 0 processor : 1; /usr/bin/printf "%s CPU:%s" "$U" "$N" \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
Anonymous	2026-11-04 15:44:52 UTC · (1 week ago)	2026-11-04T21:20:03.599871+08:00 HKCM1-20251208195653fcc911 sshd-session[136507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root 2026-11-04T21:20:05.935020+08:00 HKCM1-20251208195653fc ... show more 2026-11-04T21:20:03.599871+08:00 HKCM1-20251208195653fcc911 sshd-session[136507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root 2026-11-04T21:20:05.935020+08:00 HKCM1-20251208195653fcc911 sshd-session[136507]: Failed password for root from 195.158.5.242 port 39864 ssh2 2026-11-04T22:35:51.202489+08:00 HKCM1-20251208195653fcc911 sshd-session[140495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root 2026-11-04T22:35:52.634319+08:00 HKCM1-20251208195653fcc911 sshd-session[140495]: Failed password for root from 195.158.5.242 port 50016 ssh2 2026-11-04T23:44:42.904109+08:00 HKCM1-20251208195653fcc911 sshd-session[144130]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root 2026-11-04T23:44:45.227906+08:00 HKCM1-20251208195653fcc911 sshd-session[144130]: Failed password for root from 195.158.5.242 port ... show less	Brute-Force SSH
🇺🇸 johuang92	2026-11-04 15:42:33 UTC · (1 week ago)	Cowrie SSH honeypot: session fc85a99a8071 \| 1 login attempt(s) \| 5 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s ... show more Cowrie SSH honeypot: session fc85a99a8071 \| 1 login attempt(s) \| 5 command(s): /bin/sh -c 'U=$(/bin/uname -a 2>/dev/null \| /usr/bin/tr -d "\n"); N=$(/usr/bin/nproc 2>/dev/null \|\| /bin/grep -c ^processor /proc/cpuinfo 2>/dev/null); /usr/bin/printf "%s CPU:%s" "$U" "$N"' ; true; /bin/uname -a 2 > /dev/null \| /usr/bin/tr -d \n; /usr/bin/nproc 2 > /dev/null; /bin/grep -c ^processor /proc/cpuinfo 2 > /dev/null; U=; N=2 processor : 0 processor : 1; /usr/bin/printf "%s CPU:%s" "$U" "$N" \| classified as: brute_force, reconnaissance show less	Brute-Force SSH
🇫🇷 Neoloop	2026-11-04 15:02:42 UTC · (1 week ago)	Nov 4 15:58:39 athena sshd[3756857]: Failed password for invalid user deploy from 195.158.5.242 port 47126 ssh2 Nov 4 16:00:56 athena sshd[3759711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.2 ... show more Nov 4 15:58:39 athena sshd[3756857]: Failed password for invalid user deploy from 195.158.5.242 port 47126 ssh2 Nov 4 16:00:56 athena sshd[3759711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root Nov 4 16:00:59 athena sshd[3759711]: Failed password for root from 195.158.5.242 port 51508 ssh2 Nov 4 16:02:39 athena sshd[3761661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.158.5.242 user=root Nov 4 16:02:41 athena sshd[3761661]: Failed password for root from 195.158.5.242 port 35788 ssh2 ... show less	Brute-Force SSH
🇫🇷 HerrWolf	2026-11-04 15:00:06 UTC · (1 week ago)	CrowdSec Detection: crowdsecurity/ssh-slow-bf	Brute-Force SSH
🇫🇷 alps.one	2026-11-04 14:59:04 UTC · (1 week ago)	Nov 4 15:40:53 vmi291233 sshd[244688]: Invalid user deploy from 195.158.5.242 port 40148 Nov 4 15:45:57 vmi291233 sshd[244737]: Invalid user deploy from 195.158.5.242 port 49144 Nov 4 15:48:11 vmi291233 sshd[244761]: Invalid user deploy from 195.1 ... show more Nov 4 15:40:53 vmi291233 sshd[244688]: Invalid user deploy from 195.158.5.242 port 40148 Nov 4 15:45:57 vmi291233 sshd[244737]: Invalid user deploy from 195.158.5.242 port 49144 Nov 4 15:48:11 vmi291233 sshd[244761]: Invalid user deploy from 195.158.5.242 port 53558 Nov 4 15:52:26 vmi291233 sshd[244803]: Invalid user deploy from 195.158.5.242 port 34040 Nov 4 15:59:03 vmi291233 sshd[244867]: Invalid user deploy from 195.158.5.242 port 47122 show less	Brute-Force SSH
Anonymous	2026-11-04 14:53:04 UTC · (1 week ago)	Automated report: repeated failed SSH login attempts, banned by fail2ban (jail: sshd)	Brute-Force SSH
🇩🇪 ghostwarriors	2026-11-04 14:50:42 UTC · (1 week ago)	Unauthorized connection attempt detected, SSH Brute-Force	Brute-Force Port Scan SSH
🇫🇷 rhydo	2026-11-04 14:50:40 UTC · (1 week ago)	2026-11-04T15:41:14.838383+01:00 server sshd[3306395]: Invalid user deploy from 195.158.5.242 port 38654 2026-11-04T15:43:49.996709+01:00 server sshd[3306987]: User root from 195.158.5.242 not allowed because listed in DenyUsers 2026-11-04T15:46:18.8 ... show more 2026-11-04T15:41:14.838383+01:00 server sshd[3306395]: Invalid user deploy from 195.158.5.242 port 38654 2026-11-04T15:43:49.996709+01:00 server sshd[3306987]: User root from 195.158.5.242 not allowed because listed in DenyUsers 2026-11-04T15:46:18.894934+01:00 server sshd[3307530]: Invalid user deploy from 195.158.5.242 port 47636 2026-11-04T15:48:29.881070+01:00 server sshd[3308023]: Invalid user deploy from 195.158.5.242 port 52030 2026-11-04T15:50:39.797855+01:00 server sshd[3308505]: User root from 195.158.5.242 not allowed because listed in DenyUsers ... show less	Brute-Force SSH

Showing 1 to 15 of 149 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 2a14:7c1:5026::1

🇬🇧 195.206.182.214

🇺🇸 172.84.101.19

🇺🇸 67.207.184.23

🇩🇪 194.88.98.113

🇺🇸 162.216.150.78

🇺🇸 157.254.75.182

🇺🇸 157.230.81.138

🇺🇸 152.232.236.161

🇳🇱 109.160.32.150

🇮🇳 92.4.87.225

🇲🇾 47.254.207.118

🇨🇩 41.77.220.188

🇷🇺 37.113.113.77

🇸🇪 193.105.134.45

🇺🇸 136.70.233.80

🇩🇪 93.152.221.108

🇺🇸 66.132.159.85

🇸🇬 47.128.36.195

🇳🇱 45.115.26.32