This IP address has been reported a total of
25,200
times from
1,852 distinct
sources.
92.207.4.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-18T10:03:08.323974+00:00 vultr sshd[2210849]: Invalid user s1 from 92.207.4.157 port 38888
2 ...
show more2026-08-18T10:03:08.323974+00:00 vultr sshd[2210849]: Invalid user s1 from 92.207.4.157 port 38888
2026-08-18T10:05:19.363478+00:00 vultr sshd[2212802]: Invalid user transfer from 92.207.4.157 port 58064
2026-08-18T10:07:19.256267+00:00 vultr sshd[2214533]: Invalid user builder from 92.207.4.157 port 48992
2026-08-18T10:09:15.623125+00:00 vultr sshd[2216258]: Invalid user efs from 92.207.4.157 port 39926
2026-08-18T10:11:16.588636+00:00 vultr sshd[2218033]: Invalid user teamspeak from 92.207.4.157 port 59088
...
show less
Aug 18 10:21:50 Debian-1202-bookworm-amd64-base sshd[2583847]: pam_unix(sshd:auth): authentication f ...
show moreAug 18 10:21:50 Debian-1202-bookworm-amd64-base sshd[2583847]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157 user=root
Aug 18 10:21:51 Debian-1202-bookworm-amd64-base sshd[2583847]: Failed password for root from 92.207.4.157 port 36954 ssh2
Aug 18 10:23:58 Debian-1202-bookworm-amd64-base sshd[2677679]: Invalid user ftp-user from 92.207.4.157 port 56214
Aug 18 10:23:58 Debian-1202-bookworm-amd64-base sshd[2677679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 10:23:59 Debian-1202-bookworm-amd64-base sshd[2677679]: Failed password for invalid user ftp-user from 92.207.4.157 port 56214 ssh2
...
show less
Aug 18 10:01:00 Debian-1202-bookworm-amd64-base sshd[1674705]: Failed password for root from 92.207. ...
show moreAug 18 10:01:00 Debian-1202-bookworm-amd64-base sshd[1674705]: Failed password for root from 92.207.4.157 port 41982 ssh2
Aug 18 10:03:13 Debian-1202-bookworm-amd64-base sshd[1775875]: Invalid user ftpuser from 92.207.4.157 port 33018
Aug 18 10:03:13 Debian-1202-bookworm-amd64-base sshd[1775875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 10:03:15 Debian-1202-bookworm-amd64-base sshd[1775875]: Failed password for invalid user ftpuser from 92.207.4.157 port 33018 ssh2
Aug 18 10:05:20 Debian-1202-bookworm-amd64-base sshd[1866354]: Invalid user ubuntu from 92.207.4.157 port 52278
...
show less
Aug 18 09:48:11 mcb-it sshd[3435416]: Failed password for invalid user landi from 92.207.4.157 port ...
show moreAug 18 09:48:11 mcb-it sshd[3435416]: Failed password for invalid user landi from 92.207.4.157 port 59086 ssh2
Aug 18 09:50:23 mcb-it sshd[3435547]: Invalid user guilherme from 92.207.4.157 port 50120
Aug 18 09:50:23 mcb-it sshd[3435547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 09:50:26 mcb-it sshd[3435547]: Failed password for invalid user guilherme from 92.207.4.157 port 50120 ssh2
Aug 18 09:52:27 mcb-it sshd[3435669]: Invalid user testing from 92.207.4.157 port 41138
...
show less
Aug 18 09:29:31 Debian-1202-bookworm-amd64-base sshd[282535]: Failed password for root from 92.207.4 ...
show moreAug 18 09:29:31 Debian-1202-bookworm-amd64-base sshd[282535]: Failed password for root from 92.207.4.157 port 35390 ssh2
Aug 18 09:31:41 Debian-1202-bookworm-amd64-base sshd[380780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157 user=root
Aug 18 09:31:44 Debian-1202-bookworm-amd64-base sshd[380780]: Failed password for root from 92.207.4.157 port 54664 ssh2
Aug 18 09:33:52 Debian-1202-bookworm-amd64-base sshd[472749]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157 user=root
Aug 18 09:33:54 Debian-1202-bookworm-amd64-base sshd[472749]: Failed password for root from 92.207.4.157 port 45704 ssh2
...
show less
Aug 18 09:12:04 Debian-1202-bookworm-amd64-base sshd[3717229]: Failed password for invalid user admi ...
show moreAug 18 09:12:04 Debian-1202-bookworm-amd64-base sshd[3717229]: Failed password for invalid user admin from 92.207.4.157 port 50680 ssh2
Aug 18 09:14:11 Debian-1202-bookworm-amd64-base sshd[3811858]: Invalid user scan from 92.207.4.157 port 41708
Aug 18 09:14:11 Debian-1202-bookworm-amd64-base sshd[3811858]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 09:14:13 Debian-1202-bookworm-amd64-base sshd[3811858]: Failed password for invalid user scan from 92.207.4.157 port 41708 ssh2
Aug 18 09:16:18 Debian-1202-bookworm-amd64-base sshd[3898634]: Invalid user svn from 92.207.4.157 port 60964
...
show less
deployed SSH key persistence via libssh 0.9.6. Attempted creds: 345gs5662d34/345gs5662d34, temp/1234 ...
show moredeployed SSH key persistence via libssh 0.9.6. Attempted creds: 345gs5662d34/345gs5662d34, temp/12345, temp/3245gs5662d34. Executed cmd chain removing .ssh dir, recreating it, injecting RSA pubkey AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXx for unauthorized access. Second sequence attempted chattr -ia on .ssh dir to strip immutability, followed by 'lockr' invocation (custom tool). Pattern indicates persistent backdoor prep via SSH key injection while removing file protections. Attack duration 6 seconds across 3 sessions suggests automated scanning/script-driven exploitation. libssh 0.9.6 commonly used in botnets. Creds match weak/default patterns. No external downloads. Direct SSH compromise attempt with immediate persistence installation.
show less
Brute-Force
SSH
Anonymous
2026-08-18T08:45:17.235622 www.yerkanian.com sshd-session[1143168]: Invalid user admin from 92.207.4 ...
show more2026-08-18T08:45:17.235622 www.yerkanian.com sshd-session[1143168]: Invalid user admin from 92.207.4.157 port 54034
2026-08-18T08:45:17.239576 www.yerkanian.com sshd-session[1143168]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
2026-08-18T08:45:19.848781 www.yerkanian.com sshd-session[1143168]: Failed password for invalid user admin from 92.207.4.157 port 54034 ssh2
2026-08-18T08:47:31.896349 www.yerkanian.com sshd-session[1143204]: Invalid user misha from 92.207.4.157 port 45080
2026-08-18T08:47:31.900768 www.yerkanian.com sshd-session[1143204]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
2026-08-18T08:47:33.571574 www.yerkanian.com sshd-session[1143204]: Failed password for invalid user misha from 92.207.4.157 port 45080 ssh2
2026-08-18T08:49:37.169755 www.yerkanian.com sshd-session[1143236]: Invalid user qwe from 92.207.4.157 port 36100
...
show less
2026-08-18T06:43:56.376557+00:00 hidden-primary sshd[1036372]: Failed password for invalid user admi ...
show more2026-08-18T06:43:56.376557+00:00 hidden-primary sshd[1036372]: Failed password for invalid user admin from 92.207.4.157 port 53126 ssh2
2026-08-18T06:46:03.958940+00:00 hidden-primary sshd[1036493]: Invalid user misha from 92.207.4.157 port 44156
2026-08-18T06:46:03.962686+00:00 hidden-primary sshd[1036493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
2026-08-18T06:46:05.882701+00:00 hidden-primary sshd[1036493]: Failed password for invalid user misha from 92.207.4.157 port 44156 ssh2
2026-08-18T06:48:22.161111+00:00 hidden-primary sshd[1036499]: Invalid user qwe from 92.207.4.157 port 35206
...
show less
Aug 18 08:39:04 mcb-it sshd[3431026]: Failed password for invalid user temp from 92.207.4.157 port 3 ...
show moreAug 18 08:39:04 mcb-it sshd[3431026]: Failed password for invalid user temp from 92.207.4.157 port 39944 ssh2
Aug 18 08:44:08 mcb-it sshd[3431308]: Invalid user admin from 92.207.4.157 port 45880
Aug 18 08:44:08 mcb-it sshd[3431308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 08:44:09 mcb-it sshd[3431308]: Failed password for invalid user admin from 92.207.4.157 port 45880 ssh2
Aug 18 08:46:21 mcb-it sshd[3431429]: Invalid user misha from 92.207.4.157 port 36916
...
show less
Aug 18 08:38:28 Debian-1202-bookworm-amd64-base sshd[2228099]: Failed password for invalid user temp ...
show moreAug 18 08:38:28 Debian-1202-bookworm-amd64-base sshd[2228099]: Failed password for invalid user temp from 92.207.4.157 port 42680 ssh2
Aug 18 08:44:26 Debian-1202-bookworm-amd64-base sshd[2488128]: Invalid user admin from 92.207.4.157 port 54376
Aug 18 08:44:26 Debian-1202-bookworm-amd64-base sshd[2488128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.207.4.157
Aug 18 08:44:28 Debian-1202-bookworm-amd64-base sshd[2488128]: Failed password for invalid user admin from 92.207.4.157 port 54376 ssh2
Aug 18 08:46:38 Debian-1202-bookworm-amd64-base sshd[2583233]: Invalid user misha from 92.207.4.157 port 45410
...
show less
Aug 18 06:05:43 transform-schauspielschule sshd[2416042]: Invalid user parker from 92.207.4.157 port ...
show moreAug 18 06:05:43 transform-schauspielschule sshd[2416042]: Invalid user parker from 92.207.4.157 port 33218
Aug 18 06:08:42 transform-schauspielschule sshd[2416435]: Invalid user cron from 92.207.4.157 port 53408
Aug 18 06:10:13 transform-schauspielschule sshd[2416760]: Invalid user uftp from 92.207.4.157 port 35260
Aug 18 06:11:41 transform-schauspielschule sshd[2416954]: Invalid user jmr from 92.207.4.157 port 45348
Aug 18 06:13:05 transform-schauspielschule sshd[2417179]: Invalid user team from 92.207.4.157 port 55426
...
show less
Brute-Force
SSH
Showing 1 to
15
of 25200 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩