This IP address has been reported a total of
44
times from
33 distinct
sources.
104.215.158.157 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
1 attack on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTT ...
show more1 attack on shell probes:
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
show less
2026-04-18T18:41:37.911048+02:00 karoxnet.hu sshd[1817947]: Invalid user admin from 104.215.158.157 ...
show more2026-04-18T18:41:37.911048+02:00 karoxnet.hu sshd[1817947]: Invalid user admin from 104.215.158.157 port 35840
2026-04-18T18:43:24.993823+02:00 karoxnet.hu sshd[1817966]: Invalid user orangepi from 104.215.158.157 port 53586
2026-04-18T18:44:58.059451+02:00 karoxnet.hu sshd[1817976]: User root from 104.215.158.157 not allowed because not listed in AllowUsers
2026-04-18T18:46:43.491139+02:00 karoxnet.hu sshd[1817984]: User root from 104.215.158.157 not allowed because not listed in AllowUsers
2026-04-18T18:48:32.272113+02:00 karoxnet.hu sshd[1817996]: User root from 104.215.158.157 not allowed because not listed in AllowUsers
...
show less
Apr 18 11:09:11 gen sshd[1178002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreApr 18 11:09:11 gen sshd[1178002]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.215.158.157
Apr 18 11:09:12 gen sshd[1178002]: Failed password for invalid user admin from 104.215.158.157 port 56830 ssh2
Apr 18 11:10:18 gen sshd[1178121]: Invalid user orangepi from 104.215.158.157 port 48438
...
show less
(sshd) Failed SSH login from 104.215.158.157 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Di ...
show more(sshd) Failed SSH login from 104.215.158.157 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 18 09:06:30 14238 sshd[7282]: Invalid user admin from 104.215.158.157 port 58260
Apr 18 09:06:33 14238 sshd[7282]: Failed password for invalid user admin from 104.215.158.157 port 58260 ssh2
Apr 18 09:07:10 14238 sshd[7397]: Invalid user orangepi from 104.215.158.157 port 47518
Apr 18 09:07:12 14238 sshd[7397]: Failed password for invalid user orangepi from 104.215.158.157 port 47518 ssh2
Apr 18 09:07:51 14238 sshd[7440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.215.158.157 user=root
show less
(sshd) Failed SSH login from 104.215.158.157 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Di ...
show more(sshd) Failed SSH login from 104.215.158.157 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Apr 18 08:42:09 21438 sshd[8036]: Invalid user admin from 104.215.158.157 port 53820
Apr 18 08:42:11 21438 sshd[8036]: Failed password for invalid user admin from 104.215.158.157 port 53820 ssh2
Apr 18 08:42:46 21438 sshd[8047]: Invalid user orangepi from 104.215.158.157 port 46974
Apr 18 08:42:48 21438 sshd[8047]: Failed password for invalid user orangepi from 104.215.158.157 port 46974 ssh2
Apr 18 08:43:24 21438 sshd[8122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.215.158.157 user=root
show less
Brute-Force
SSH
Showing 1 to
15
of 44 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩