This IP address has been reported a total of
512
times from
282 distinct
sources.
192.255.141.70 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Threat Intelligence via ARMTI, Web Attack: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2 ...
show moreThreat Intelligence via ARMTI, Web Attack: POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh
show less
[192.255.141.70] triggered by honeypot on port [80], Timestamp [2026-08-12T05:46:57Z]METHOD=POST PAT ...
show more[192.255.141.70] triggered by honeypot on port [80], Timestamp [2026-08-12T05:46:57Z]METHOD=POST PATH=/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP=HTTP/1.1 UA="libredtail-htt
show less
2026-08-12T01:03:52.630763+02:00 influxdb-host01.influxdb.srvfarm.net sshd[1761]: Connection closed ...
show more2026-08-12T01:03:52.630763+02:00 influxdb-host01.influxdb.srvfarm.net sshd[1761]: Connection closed by authenticating user root 192.255.141.70 port 37794 [preauth]
2026-08-12T01:05:57.035636+02:00 influxdb-host01.influxdb.srvfarm.net sshd[2097]: Invalid user ftptest from 192.255.141.70 port 52482
2026-08-12T01:05:57.332227+02:00 influxdb-host01.influxdb.srvfarm.net sshd[2097]: Connection closed by invalid user ftptest 192.255.141.70 port 52482 [preauth]
2026-08-12T01:08:04.144333+02:00 influxdb-host01.influxdb.srvfarm.net sshd[2160]: Connection closed by authenticating user root 192.255.141.70 port 58582 [preauth]
2026-08-12T01:10:10.347087+02:00 influxdb-host01.influxdb.srvfarm.net sshd[2340]: Connection closed by authenticating user root 192.255.141.70 port 35808 [preauth]
show less
Brute-Force
Anonymous
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 33696 | TTL: 64 | LEN: 60 | TOS: 0x0 ...
show moreBlocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 33696 | TTL: 64 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-08-11T11:16:29.130050-07:00 debian sshd-session[678888]: Invalid user kafka from 192.255.141.70 ...
show more2026-08-11T11:16:29.130050-07:00 debian sshd-session[678888]: Invalid user kafka from 192.255.141.70 port 35828
2026-08-11T11:18:32.481952-07:00 debian sshd-session[678921]: Invalid user git from 192.255.141.70 port 45672
2026-08-11T11:20:39.169541-07:00 debian sshd-session[678945]: Invalid user dolphinscheduler from 192.255.141.70 port 37784
2026-08-11T11:22:44.439516-07:00 debian sshd-session[678972]: Invalid user docker from 192.255.141.70 port 56454
2026-08-11T11:24:50.821432-07:00 debian sshd-session[679002]: Invalid user test from 192.255.141.70 port 59372
...
show less
🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 2375
GET /containers/json
User-Agent: libredtail- ...
show more🛡️ Honeypot [bsts-tpot-hive]: HTTP/1.1 request on 2375
GET /containers/json
User-Agent: libredtail-http
Accept: */*; 2375 [1] TCP
show less
2026-08-11T16:10:24.777393+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202133]: Connection close ...
show more2026-08-11T16:10:24.777393+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202133]: Connection closed by authenticating user admin 192.255.141.70 port 59200 [preauth]
2026-08-11T16:12:28.188559+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202191]: Invalid user orangepi from 192.255.141.70 port 39380
2026-08-11T16:12:28.465686+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202191]: Connection closed by invalid user orangepi 192.255.141.70 port 39380 [preauth]
2026-08-11T16:14:29.707023+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202245]: Connection closed by authenticating user root 192.255.141.70 port 39086 [preauth]
2026-08-11T16:16:35.458479+02:00 influxdb-host01.influxdb.srvfarm.net sshd[202336]: Connection closed by authenticating user root 192.255.141.70 port 49502 [preauth]
show less