This IP address has been reported a total of
25
times from
23 distinct
sources.
95.80.159.242 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 15 07:56:06 www1 sshd\[50065\]: Failed password for root from 95.80.159.242 port 36096 ssh2Jun 1 ...
show moreJun 15 07:56:06 www1 sshd\[50065\]: Failed password for root from 95.80.159.242 port 36096 ssh2Jun 15 07:56:10 www1 sshd\[50067\]: Failed password for root from 95.80.159.242 port 36112 ssh2Jun 15 07:56:19 www1 sshd\[50069\]: Failed password for root from 95.80.159.242 port 58802 ssh2Jun 15 07:56:23 www1 sshd\[50071\]: Failed password for root from 95.80.159.242 port 53546 ssh2Jun 15 07:56:26 www1 sshd\[50076\]: Failed password for root from 95.80.159.242 port 53562 ssh2Jun 15 07:56:30 www1 sshd\[50078\]: Failed password for root from 95.80.159.242 port 53566 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-06-15T00:52:39.357952-04:00 jesse5 sshd[2501325]: Invalid user user from 95.80.159.242 port 495 ...
show more2026-06-15T00:52:39.357952-04:00 jesse5 sshd[2501325]: Invalid user user from 95.80.159.242 port 49556
...
show less
Jun 15 06:38:48 remote.srvfarm.net sshd[1992301]: Connection closed by authenticating user root 95.8 ...
show moreJun 15 06:38:48 remote.srvfarm.net sshd[1992301]: Connection closed by authenticating user root 95.80.159.242 port 35832 [preauth]
Jun 15 06:38:50 remote.srvfarm.net sshd[1992310]: Connection closed by authenticating user root 95.80.159.242 port 57464 [preauth]
Jun 15 06:38:51 remote.srvfarm.net sshd[1992316]: Connection closed by authenticating user root 95.80.159.242 port 57476 [preauth]
Jun 15 06:38:54 remote.srvfarm.net sshd[1992324]: Connection closed by authenticating user root 95.80.159.242 port 57482 [preauth]
Jun 15 06:38:55 remote.srvfarm.net sshd[1992337]: Connection closed by authenticating user root 95.80.159.242 port 57490 [preauth]
show less
SSH Brute force: 432 attempts were recorded from 95.80.159.242
2026-06-15T04:39:18+02:00 Connection ...
show moreSSH Brute force: 432 attempts were recorded from 95.80.159.242
2026-06-15T04:39:18+02:00 Connection closed by authenticating user root 95.80.159.242 port 45784 [preauth]
2026-06-15T04:39:19+02:00 Connection closed by authenticating user root 95.80.159.242 port 50520 [preauth]
2026-06-15T04:39:20+02:00 Connection closed by authenticating user root 95.80.159.242 port 50522 [preauth]
2026-06-15T04:39:21+02:00 Connection closed by authenticating user root 95.80.159.242 port 50526 [preauth]
2026-06-15T04:39:22+02:00 Connection closed by authenticating user root 95.80.159.242 port 50536 [preauth]
2026-06-15T04:39:23+02:00 Connection closed by authenticating user root 95.80.159.242 port 50540 [preauth]
2026-06-15T04:39:24+02:00 Connection closed by authenticating user root 95.80.159.242 port 50544 [preauth]
2026-06-15T04:39:25+02:00 Connection closed by authenticating user root 95.80.159.242 po
show less
2026-06-15T04:07:40.472565+02:00 server sshd-session[255809]: Failed password for root from 95.80.15 ...
show more2026-06-15T04:07:40.472565+02:00 server sshd-session[255809]: Failed password for root from 95.80.159.242 port 60474 ssh2
2026-06-15T04:07:41.411198+02:00 server sshd-session[255812]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.80.159.242 user=root
2026-06-15T04:07:43.629731+02:00 server sshd-session[255812]: Failed password for root from 95.80.159.242 port 60486 ssh2
show less
2026-06-14T19:09:34.035360+02:00 87hcet sshd[1996970]: User root from 95.80.159.242 not allowed beca ...
show more2026-06-14T19:09:34.035360+02:00 87hcet sshd[1996970]: User root from 95.80.159.242 not allowed because not listed in AllowUsers
2026-06-14T19:09:34.145503+02:00 87hcet sshd[1996970]: Connection closed by invalid user root 95.80.159.242 port 60680 [preauth]
2026-06-14T19:09:34.752677+02:00 87hcet sshd[1996979]: User root from 95.80.159.242 not allowed because not listed in AllowUsers
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, root:nginx
• Number ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Credentials: root:ubuntu, root:nginx
• Number of login attempts: 2
• Client: SSH-2.0-Go
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Brute-Force
SSH
Showing 1 to
15
of 25 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩