This IP address has been reported a total of
103
times from
66 distinct
sources.
1.204.202.162 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 24 13:43:42 antti-vps2 sshd[1969430]: Invalid user albert from 1.204.202.162 port 38353
Jul 24 1 ...
show moreJul 24 13:43:42 antti-vps2 sshd[1969430]: Invalid user albert from 1.204.202.162 port 38353
Jul 24 13:48:09 antti-vps2 sshd[1969829]: Connection from 1.204.202.162 port 41148 on 10.0.0.124 port 22 rdomain ""
Jul 24 13:48:12 antti-vps2 sshd[1969829]: User ubuntu not allowed because account is locked
Jul 24 13:56:39 antti-vps2 sshd[1970647]: Connection from 1.204.202.162 port 41909 on 10.0.0.124 port 22 rdomain ""
Jul 24 13:56:41 antti-vps2 sshd[1970647]: User root from 1.204.202.162 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-07-24T19:11:44.171318+09:00 hh-vm-cm24-16g-nrt sshd[2160432]: Invalid user allen from 1.204.202 ...
show more2026-07-24T19:11:44.171318+09:00 hh-vm-cm24-16g-nrt sshd[2160432]: Invalid user allen from 1.204.202.162 port 41652
2026-07-24T19:15:28.548622+09:00 hh-vm-cm24-16g-nrt sshd[2160439]: Invalid user sam from 1.204.202.162 port 40388
2026-07-24T19:19:21.668828+09:00 hh-vm-cm24-16g-nrt sshd[2160442]: Invalid user wist from 1.204.202.162 port 39432
...
show less
2026-07-24T10:11:13.627050+00:00 edge-thn-par02.int.pdx.net.uk sshd[1057688]: Invalid user allen fro ...
show more2026-07-24T10:11:13.627050+00:00 edge-thn-par02.int.pdx.net.uk sshd[1057688]: Invalid user allen from 1.204.202.162 port 40765
2026-07-24T10:14:58.236811+00:00 edge-thn-par02.int.pdx.net.uk sshd[1057927]: Invalid user sam from 1.204.202.162 port 39763
2026-07-24T10:18:48.882640+00:00 edge-thn-par02.int.pdx.net.uk sshd[1058206]: Invalid user wist from 1.204.202.162 port 40716
...
show less
Brute-Force
SSH
Anonymous
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.16 ...
show morepam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.162
Failed password for invalid user allen from 1.204.202.162 port 41316 ssh2
Invalid user sam from 1.204.202.162 port 41923
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.162
Failed password for invalid user sam from 1.204.202.162 port 41923 ssh2
show less
2026-07-24T08:16:58.659114+02:00 router03.eag-fpi.de sshd-session[2229715]: Disconnected from invali ...
show more2026-07-24T08:16:58.659114+02:00 router03.eag-fpi.de sshd-session[2229715]: Disconnected from invalid user zjsf 1.204.202.162 port 40355 [preauth]
2026-07-24T08:22:14.870779+02:00 router03.eag-fpi.de sshd-session[2231149]: Disconnected from authenticating user admin 1.204.202.162 port 38650 [preauth]
2026-07-24T08:26:26.966620+02:00 router03.eag-fpi.de sshd-session[2232237]: Disconnected from authenticating user root 1.204.202.162 port 38169 [preauth]
2026-07-24T08:30:49.682557+02:00 router03.eag-fpi.de sshd-session[2233370]: Invalid user aa11 from 1.204.202.162 port 37894
2026-07-24T08:30:50.407787+02:00 router03.eag-fpi.de sshd-session[2233370]: Disconnected from invalid user aa11 1.204.202.162 port 37894 [preauth]
show less
2026-07-24T09:47:15.161790+03:30 vm940970 sshd[397349]: Invalid user zjsf from 1.204.202.162 port 38 ...
show more2026-07-24T09:47:15.161790+03:30 vm940970 sshd[397349]: Invalid user zjsf from 1.204.202.162 port 38860
...
show less
2026-07-24T06:13:23.645665+00:00 kyana sshd[791670]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-07-24T06:13:23.645665+00:00 kyana sshd[791670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.162
2026-07-24T06:13:25.446031+00:00 kyana sshd[791670]: Failed password for invalid user zjsf from 1.204.202.162 port 39161 ssh2
2026-07-24T06:13:26.272714+00:00 kyana sshd[791670]: Disconnected from invalid user zjsf 1.204.202.162 port 39161 [preauth]
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
โข Credentials: root:minecraft1, dan:danpass, 345 ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
โข Credentials: root:minecraft1, dan:danpass, 345gs5662d34:345gs5662d34, dan:3245gs5662d34, ec2-user:password
โข Number of login attempts: 5
โข 20 command(s) were executed during the session
โข Client: SSH-2.0-libssh_0.9.6
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-07-24T10:50:10.422908+08:00 laxh2-202411170129435ddf18 sshd[107863]: pam_unix(sshd:auth): authe ...
show more2026-07-24T10:50:10.422908+08:00 laxh2-202411170129435ddf18 sshd[107863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.162
2026-07-24T10:50:12.673200+08:00 laxh2-202411170129435ddf18 sshd[107863]: Failed password for invalid user dan from 1.204.202.162 port 39003 ssh2
2026-07-24T10:54:30.640304+08:00 laxh2-202411170129435ddf18 sshd[107879]: Invalid user ec2-user from 1.204.202.162 port 39468
2026-07-24T10:54:30.649185+08:00 laxh2-202411170129435ddf18 sshd[107879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.204.202.162
2026-07-24T10:54:32.593141+08:00 laxh2-202411170129435ddf18 sshd[107879]: Failed password for invalid user ec2-user from 1.204.202.162 port 39468 ssh2
...
show less
Jul 24 00:21:44 [sshd] Timeout before authentication for connection from 1.204.202.162 to 185.216.17 ...
show moreJul 24 00:21:44 [sshd] Timeout before authentication for connection from 1.204.202.162 to 185.216.179.161, pid = 2261450
Jul 24 00:34:31 [sshd] Timeout before authentication for connection from 1.204.202.162 to 185.216.179.161, pid = 2262089
...
show less
Brute-Force
SSH
Showing 1 to
15
of 103 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ