This IP address has been reported a total of
4,704
times from
1,122 distinct
sources.
81.193.159.166 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 1 20:49:33 ubuntu sshd[1362871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 1 20:49:33 ubuntu sshd[1362871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.193.159.166 user=root
Jun 1 20:49:35 ubuntu sshd[1362871]: Failed password for root from 81.193.159.166 port 48094 ssh2
Jun 1 20:51:36 ubuntu sshd[1362959]: Invalid user mostafa from 81.193.159.166 port 51618
Jun 1 20:51:36 ubuntu sshd[1362959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.193.159.166
Jun 1 20:51:39 ubuntu sshd[1362959]: Failed password for invalid user mostafa from 81.193.159.166 port 51618 ssh2
...
show less
2026-06-01T21:35:11.699448+02:00 MHosting sshd[578446]: Invalid user nurul from 81.193.159.166 port ...
show more2026-06-01T21:35:11.699448+02:00 MHosting sshd[578446]: Invalid user nurul from 81.193.159.166 port 56876
2026-06-01T21:44:25.327179+02:00 MHosting sshd[581086]: Invalid user ubuntu from 81.193.159.166 port 53234
2026-06-01T21:46:27.918823+02:00 MHosting sshd[581672]: Invalid user gourav from 81.193.159.166 port 56738
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: group1, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: rajesh, Pass: [REDACTED]
SSH brute force attempt. User: postgres, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
2026-06-01T20:00:05+02:00 lb-1 sshd[624152]: Invalid user ubuntu from 81.193.159.166 port 32936
2026 ...
show more2026-06-01T20:00:05+02:00 lb-1 sshd[624152]: Invalid user ubuntu from 81.193.159.166 port 32936
2026-06-01T20:00:05+02:00 lb-1 sshd[624152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.193.159.166
2026-06-01T20:00:08+02:00 lb-1 sshd[624152]: Failed password for invalid user ubuntu from 81.193.159.166 port 32936 ssh2
2026-06-01T20:02:15+02:00 lb-1 sshd[624377]: Invalid user abc from 81.193.159.166 port 37386
...
show less
(sshd) Failed SSH login from 81.193.159.166 (PT/Portugal/bl4-159-166.dsl.telepac.pt): 5 in the last ...
show more(sshd) Failed SSH login from 81.193.159.166 (PT/Portugal/bl4-159-166.dsl.telepac.pt): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 1 12:54:42 15039 sshd[8736]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.193.159.166 user=root
Jun 1 12:54:45 15039 sshd[8736]: Failed password for root from 81.193.159.166 port 50082 ssh2
Jun 1 12:59:45 15039 sshd[11336]: Invalid user ubuntu from 81.193.159.166 port 52540
Jun 1 12:59:47 15039 sshd[11336]: Failed password for invalid user ubuntu from 81.193.159.166 port 52540 ssh2
Jun 1 13:01:55 15039 sshd[12395]: Invalid user abc from 81.193.159.166 port 56992
show less
Jun 1 18:00:20 hermes sshd[1475701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 1 18:00:20 hermes sshd[1475701]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.193.159.166
Jun 1 18:00:20 hermes sshd[1475701]: Invalid user ubuntu from 81.193.159.166 port 57590
Jun 1 18:00:22 hermes sshd[1475701]: Failed password for invalid user ubuntu from 81.193.159.166 port 57590 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T17:22:32Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-01T17:22:32Z and 2026-06-01T17:51:41Z
show less
Detected multiple authentication failures and invalid user attempts from IP address 81.193.159.166 o ...
show moreDetected multiple authentication failures and invalid user attempts from IP address 81.193.159.166 on [ES] Sapphire Node.
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: shoply, Pass: [REDACTED]
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Report 2422586 with IP 3303084 for SSH brute-force attack by source 3464811 via ssh-honeypot/0.2.0+h ...
show moreReport 2422586 with IP 3303084 for SSH brute-force attack by source 3464811 via ssh-honeypot/0.2.0+http
show less
Brute-Force
SSH
Showing 166 to
180
of 4704 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩