Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 104.238.29.154
This IP address has been reported a total of
56
times from
43 distinct
sources.
104.238.29.154 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 10
reports;
United States of America
with 8
reports;
Japan
with 5
reports.
The most common categories in these recent reports were:
Brute-Force
51
times;
SSH
49
times;
Port Scan
2
times;
FTP Brute-Force
1
time;
IoT Targeted
1
time;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-29T06:25:45.336475+02:00 misaka-vm-s2n-2c4g-ams sshd-session[3060208]: Invalid user patrol f ...
show more2026-09-29T06:25:45.336475+02:00 misaka-vm-s2n-2c4g-ams sshd-session[3060208]: Invalid user patrol from 104.238.29.154 port 53516
2026-09-29T06:34:01.908684+02:00 misaka-vm-s2n-2c4g-ams sshd-session[3060258]: Invalid user salon from 104.238.29.154 port 39410
2026-09-29T06:40:32.864817+02:00 misaka-vm-s2n-2c4g-ams sshd-session[3060324]: Invalid user test from 104.238.29.154 port 52554
...
show less
Botnet credential harvesting via SSH. 3 attempts using leaked credential lists (root/123456, admin/a ...
show moreBotnet credential harvesting via SSH. 3 attempts using leaked credential lists (root/123456, admin/admin).
show less
2026-09-28T20:40:24.049027-06:00 mickey sshd[1580162]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-28T20:40:24.049027-06:00 mickey sshd[1580162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.29.154 user=root
2026-09-28T20:40:25.934295-06:00 mickey sshd[1580162]: Failed password for invalid user root from 104.238.29.154 port 54322 ssh2
2026-09-28T21:00:54.017864-06:00 mickey sshd[1580509]: Invalid user deployer from 104.238.29.154 port 43726
...
show less
2026-09-28T20:42:54.442037-06:00 Host-KLAX-C sshd[555341]: User root from 104.238.29.154 not allowed ...
show more2026-09-28T20:42:54.442037-06:00 Host-KLAX-C sshd[555341]: User root from 104.238.29.154 not allowed because not listed in AllowUsers
...
show less
2026-09-28T17:58:42.114199-06:00 b146-48 sshd[3094365]: pam_sss(sshd:auth): authentication failure; ...
show more2026-09-28T17:58:42.114199-06:00 b146-48 sshd[3094365]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.238.29.154 user=cecftpusr
2026-09-28T17:58:44.085925-06:00 b146-48 sshd[3094365]: Failed password for invalid user cecftpusr from 104.238.29.154 port 55018 ssh2
2026-09-28T18:08:24.347339-06:00 b146-48 sshd[3095498]: User root from 104.238.29.154 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-09-28T20:57:01.933577+00:00 matchpoint sshd[1625211]: Invalid user federica from 104.238.29.154 ...
show more2026-09-28T20:57:01.933577+00:00 matchpoint sshd[1625211]: Invalid user federica from 104.238.29.154 port 56106
2026-09-28T20:57:01.962187+00:00 matchpoint sshd[1625211]: Disconnected from invalid user federica 104.238.29.154 port 56106 [preauth]
2026-09-28T21:05:14.951227+00:00 matchpoint sshd[1665636]: Disconnected from authenticating user root 104.238.29.154 port 32792 [preauth]
...
show less
