This IP address has been reported a total of
261
times from
188 distinct
sources.
195.242.178.167 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-02T06:23:22.454775+03:30 da-cat sshd[188153]: Invalid user admin from 195.242.178.167 port 3 ...
show more2026-06-02T06:23:22.454775+03:30 da-cat sshd[188153]: Invalid user admin from 195.242.178.167 port 35450
...
show less
2026-06-02T03:45:59.130429+02:00 router01.kfz-heimchen.de sshd-session[2447029]: Connection closed b ...
show more2026-06-02T03:45:59.130429+02:00 router01.kfz-heimchen.de sshd-session[2447029]: Connection closed by authenticating user admin 195.242.178.167 port 39018 [preauth]
2026-06-02T03:46:31.007377+02:00 router01.kfz-heimchen.de sshd-session[2447121]: Invalid user orangepi from 195.242.178.167 port 36382
2026-06-02T03:46:31.391976+02:00 router01.kfz-heimchen.de sshd-session[2447121]: Connection closed by invalid user orangepi 195.242.178.167 port 36382 [preauth]
2026-06-02T03:47:04.058433+02:00 router01.kfz-heimchen.de sshd-session[2447217]: Connection closed by authenticating user root 195.242.178.167 port 45900 [preauth]
2026-06-02T03:47:35.588269+02:00 router01.kfz-heimchen.de sshd-session[2447307]: Connection closed by authenticating user root 195.242.178.167 port 56192 [preauth]
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-06-02T01:08:34.971918 socky.stom66.co.uk sshd[1512486]: Invalid user admin from 195.242.178.167 ...
show more2026-06-02T01:08:34.971918 socky.stom66.co.uk sshd[1512486]: Invalid user admin from 195.242.178.167 port 56168
2026-06-02T01:09:05.942463 socky.stom66.co.uk sshd[1512832]: Invalid user orangepi from 195.242.178.167 port 45720
...
show less
2026-06-02T02:55:45.911571+02:00 wels sshd[1394092]: Invalid user admin from 195.242.178.167 port 60 ...
show more2026-06-02T02:55:45.911571+02:00 wels sshd[1394092]: Invalid user admin from 195.242.178.167 port 60892
2026-06-02T02:55:46.100495+02:00 wels sshd[1394092]: Connection closed by invalid user admin 195.242.178.167 port 60892 [preauth]
2026-06-02T02:56:17.029782+02:00 wels sshd[1394094]: Invalid user orangepi from 195.242.178.167 port 57112
...
show less
2026-06-01T19:28:25.208867-05:00 whangaparaoa.com sshd-session[449937]: Failed password for invalid ...
show more2026-06-01T19:28:25.208867-05:00 whangaparaoa.com sshd-session[449937]: Failed password for invalid user admin from 195.242.178.167 port 44094 ssh2
2026-06-01T19:28:57.005438-05:00 whangaparaoa.com sshd-session[449939]: Invalid user orangepi from 195.242.178.167 port 51796
2026-06-01T19:28:57.011116-05:00 whangaparaoa.com sshd-session[449939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.242.178.167
2026-06-01T19:28:59.141832-05:00 whangaparaoa.com sshd-session[449939]: Failed password for invalid user orangepi from 195.242.178.167 port 51796 ssh2
...
show less
2026-06-02T02:22:44.548859+02:00 srv01 sshd[3255033]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-06-02T02:22:44.548859+02:00 srv01 sshd[3255033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.242.178.167
2026-06-02T02:22:46.536350+02:00 srv01 sshd[3255033]: Failed password for invalid user admin from 195.242.178.167 port 58158 ssh2
...
show less
Jun 2 00:04:43 ice2 sshd[2089945]: Invalid user orangepi from 195.242.178.167 port 56022
Jun 2 00: ...
show moreJun 2 00:04:43 ice2 sshd[2089945]: Invalid user orangepi from 195.242.178.167 port 56022
Jun 2 00:08:20 ice2 sshd[2089966]: Invalid user test from 195.242.178.167 port 43094
...
show less
Brute-Force
SSH
Showing 151 to
165
of 261 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ