This IP address has been reported a total of
29
times from
29 distinct
sources.
51.158.116.204 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-10T19:19:43.174656+01:00 hh-vm-a14-5t-lon sshd-session[83780]: Invalid user admin from 51.15 ...
show more2026-06-10T19:19:43.174656+01:00 hh-vm-a14-5t-lon sshd-session[83780]: Invalid user admin from 51.158.116.204 port 34830
2026-06-10T19:19:43.437637+01:00 hh-vm-a14-5t-lon sshd-session[83782]: Invalid user admin from 51.158.116.204 port 34838
2026-06-10T19:19:43.761453+01:00 hh-vm-a14-5t-lon sshd-session[83784]: Invalid user admin from 51.158.116.204 port 34840
...
show less
SSH Brute force: 29 attempts were recorded from 51.158.116.204
2026-06-10T20:12:34+02:00 Connection ...
show moreSSH Brute force: 29 attempts were recorded from 51.158.116.204
2026-06-10T20:12:34+02:00 Connection closed by authenticating user root 51.158.116.204 port 56512 [preauth]
2026-06-10T20:12:34+02:00 Connection closed by authenticating user root 51.158.116.204 port 56528 [preauth]
2026-06-10T20:12:34+02:00 Connection closed by authenticating user root 51.158.116.204 port 56538 [preauth]
2026-06-10T20:12:35+02:00 Connection closed by authenticating user root 51.158.116.204 port 56548 [preauth]
2026-06-10T20:12:35+02:00 Connection closed by authenticating user root 51.158.116.204 port 56558 [preauth]
2026-06-10T20:12:35+02:00 Connection closed by authenticating user root 51.158.116.204 port 56570 [preauth]
2026-06-10T20:12:36+02:00 Connection closed by authenticating user root 51.158.116.204 port 56580 [preauth]
2026-06-10T20:12:36+02:00 Invalid user admin from 51.158.116.204 port 56586
2026-
show less
2026-06-10T20:18:45.845501+02:00 vpn sshd[89587]: Invalid user admin from 51.158.116.204 port 37422
...
show more2026-06-10T20:18:45.845501+02:00 vpn sshd[89587]: Invalid user admin from 51.158.116.204 port 37422
2026-06-10T20:18:46.225227+02:00 vpn sshd[89589]: Invalid user admin from 51.158.116.204 port 37436
2026-06-10T20:18:46.997100+02:00 vpn sshd[89591]: Invalid user admin from 51.158.116.204 port 37440
...
show less
Brute-Force
SSH
Anonymous
2026-06-10T20:18:01.903261+02:00 devicedock sshd-session[185414]: User root from 51.158.116.204 not ...
show more2026-06-10T20:18:01.903261+02:00 devicedock sshd-session[185414]: User root from 51.158.116.204 not allowed because not listed in AllowUsers
2026-06-10T20:18:02.388745+02:00 devicedock sshd-session[185420]: User root from 51.158.116.204 not allowed because not listed in AllowUsers
2026-06-10T20:18:02.909299+02:00 devicedock sshd-session[185422]: User root from 51.158.116.204 not allowed because not listed in AllowUsers
...
show less
Jun 10 21:16:06 box sshd-session[2445]: Connection closed by authenticating user root 51.158.116.204 ...
show moreJun 10 21:16:06 box sshd-session[2445]: Connection closed by authenticating user root 51.158.116.204 port 54296 [preauth]
Jun 10 21:16:07 box sshd-session[2447]: Connection closed by authenticating user root 51.158.116.204 port 54306 [preauth]
Jun 10 21:16:08 box sshd-session[2449]: Connection closed by authenticating user root 51.158.116.204 port 54310 [preauth]
Jun 10 21:16:09 box sshd-session[2451]: Connection closed by authenticating user root 51.158.116.204 port 55180 [preauth]
Jun 10 21:16:11 box sshd-session[2453]: Connection closed by authenticating user root 51.158.116.204 port 55184 [preauth]
...
show less
Blocked by UFW (TCP on 22)
Source port: 49916
TTL: 47
Packet length: 52
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 49916
TTL: 47
Packet length: 52
TOS: 0x08
This report (for 51.158.116.204) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-10T18:14:44Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-10T18:14:44Z and 2026-06-10T18:15:13Z
show less
Brute-Force
SSH
Showing 1 to
15
of 29 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ