This IP address has been reported a total of
361
times from
195 distinct
sources.
104.248.202.139 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
SSH Honeypot attack.
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request wit ...
show moreSSH Honeypot attack.
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"root","server_version":"SSH-2.0-OpenSSH_7.4","src":"104.248.202.139","time":"2026-02-12T20:44:52.081291577+01:00"}
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"1","server_version":"SSH-2.0-OpenSSH_7.4","src":"104.248.202.139","time":"2026-02-12T20:45:44.146839575+01:00"}
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"12","server_version":"SSH-2.0-OpenSSH_7.4","src":"104.248.202.139","time":"2026-02-12T20:46:34.030450171+01:00"}
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"123","server_version":"SSH-2.0-OpenSSH_7.4","src":"104.248.202.139","time":"2026-02-12T20:47:25.564935937+01:00"}
{"client_version":"SSH-2.0-Go","duser":"root","level":"info","msg":"Request with password","password":"1234","server_version":"SSH-2.
...
show less
Feb 12 12:46:41 mortgagebase sshd[14585]: Failed password for root from 104.248.202.139 port 43406 s ...
show moreFeb 12 12:46:41 mortgagebase sshd[14585]: Failed password for root from 104.248.202.139 port 43406 ssh2
Feb 12 12:47:31 mortgagebase sshd[14611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.202.139 user=root
Feb 12 12:47:33 mortgagebase sshd[14611]: Failed password for root from 104.248.202.139 port 60398 ssh2
Feb 12 12:48:23 mortgagebase sshd[14633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.202.139 user=root
Feb 12 12:48:25 mortgagebase sshd[14633]: Failed password for root from 104.248.202.139 port 52872 ssh2
...
show less
Fail2ban sshd: 2026-02-12T20:46:38.693556+01:00 proxmox sshd[1516739]: Failed password for root from ...
show moreFail2ban sshd: 2026-02-12T20:46:38.693556+01:00 proxmox sshd[1516739]: Failed password for root from 104.248.202.139 port 56176 ssh2
2026-02-12T20:47:28.183960+01:00 proxmox sshd[1517413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.202.139 user=root
2026-02-12T20:47:30.022594+01:00 proxmox sshd[1517413]: Failed password for root from 104.248.202.139 port 36536 ssh2
2026-02-12T20:48:20.307181+01:00 proxmox sshd[1518025]: pam_unix(sshd:auth): authentication f
show less
Brute-Force
SSH
Showing 1 to
15
of 361 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩