This IP address has been reported a total of
37
times from
31 distinct
sources.
104.152.209.148 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 4 18:42:58 centrum sshd-session[1121]: Connection closed by 104.152.209.148 port 45210 [preauth ...
show moreJul 4 18:42:58 centrum sshd-session[1121]: Connection closed by 104.152.209.148 port 45210 [preauth]
Jul 4 18:43:04 centrum sshd-session[1124]: Connection closed by authenticating user root 104.152.209.148 port 45216 [preauth]
...
show less
2026-07-04T04:38:24.568650+02:00 hades sshd[1270582]: Failed password for root from 104.152.209.148 ...
show more2026-07-04T04:38:24.568650+02:00 hades sshd[1270582]: Failed password for root from 104.152.209.148 port 56730 ssh2
2026-07-04T04:38:41.814586+02:00 hades sshd[1270610]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
2026-07-04T04:38:44.169916+02:00 hades sshd[1270610]: Failed password for root from 104.152.209.148 port 39464 ssh2
...
show less
2026-07-03T05:21:47.874947+02:00 ns3006402 sshd[4135122]: Failed password for root from 104.152.209. ...
show more2026-07-03T05:21:47.874947+02:00 ns3006402 sshd[4135122]: Failed password for root from 104.152.209.148 port 34132 ssh2
2026-07-03T05:22:04.479255+02:00 ns3006402 sshd[4135181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
2026-07-03T05:22:06.969643+02:00 ns3006402 sshd[4135181]: Failed password for root from 104.152.209.148 port 55946 ssh2
...
show less
AetherFox VoidGuard detected: Jun 30 21:14:43 heimdall sshd[812140]: Failed password for root from 1 ...
show moreAetherFox VoidGuard detected: Jun 30 21:14:43 heimdall sshd[812140]: Failed password for root from 104.152.209.148 port 55040 ssh2
Jun 30 21:14:47 heimdall sshd[812143]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 30 21:14:49 heimdall sshd[812143]: Failed password for root from 104.152.209.148 port 55054 ssh2
Jun 30 21:14:51 heimdall sshd[812147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 30 21:14:54 heimdall sshd[812147]: Failed password for root from 104.152.209.148 port 33918 ssh2
...
show less
Multiple SSH login attempts from 104.152.209.148 targeting user(s): root | Server Managed by Focusni ...
show moreMultiple SSH login attempts from 104.152.209.148 targeting user(s): root | Server Managed by Focusnic
show less
Jun 28 20:17:56 dalia sshd[499944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreJun 28 20:17:56 dalia sshd[499944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 28 20:17:58 dalia sshd[499944]: Failed password for root from 104.152.209.148 port 60174 ssh2
...
show less
Jun 28 14:13:26 gamehost sshd[2814995]: Failed password for root from 104.152.209.148 port 37056 ssh ...
show moreJun 28 14:13:26 gamehost sshd[2814995]: Failed password for root from 104.152.209.148 port 37056 ssh2
Jun 28 14:13:28 gamehost sshd[2814998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 28 14:13:30 gamehost sshd[2814998]: Failed password for root from 104.152.209.148 port 53678 ssh2
Jun 28 14:13:35 gamehost sshd[2815000]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 28 14:13:37 gamehost sshd[2815000]: Failed password for root from 104.152.209.148 port 53694 ssh2
...
show less
104.152.209.148 (CA/Canada/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more104.152.209.148 (CA/Canada/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 25 00:18:37 14506 sshd[22781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 25 00:18:39 14506 sshd[22781]: Failed password for root from 104.152.209.148 port 55510 ssh2
Jun 25 00:18:40 14506 sshd[22786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 25 00:10:53 14506 sshd[17873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.133.26.159 user=root
Jun 25 00:10:55 14506 sshd[17873]: Failed password for root from 43.133.26.159 port 54486 ssh2
IP Addresses Blocked:
show less
Jun 24 16:20:42 irc sshd[660244]: Failed password for root from 104.152.209.148 port 43318 ssh2
Jun ...
show moreJun 24 16:20:42 irc sshd[660244]: Failed password for root from 104.152.209.148 port 43318 ssh2
Jun 24 16:20:48 irc sshd[660246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 24 16:20:50 irc sshd[660246]: Failed password for root from 104.152.209.148 port 34022 ssh2
Jun 24 16:21:01 irc sshd[660248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 24 16:21:02 irc sshd[660248]: Failed password for root from 104.152.209.148 port 34024 ssh2
Jun 24 16:21:13 irc sshd[660250]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.152.209.148 user=root
Jun 24 16:21:14 irc sshd[660250]: Failed password for root from 104.152.209.148 port 48146 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 37 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩