Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 104.252.111.239
This IP address has been reported a total of
63
times from
56 distinct
sources.
104.252.111.239 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
Germany
with 14
reports;
Canada
with 5
reports.
The most common categories in these recent reports were:
SSH
59
times;
Brute-Force
58
times;
Port Scan
3
times;
Web App Attack
2
times;
Bad Web Bot
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 104.252.111.239 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direc ...
show more(sshd) Failed SSH login from 104.252.111.239 (FR/France/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 27 06:26:29 aurora sshd-session[283632]: Invalid user mapadmin from 104.252.111.239 port 36344
Sep 27 06:35:22 aurora sshd-session[292276]: Invalid user ftpsecure from 104.252.111.239 port 58194
Sep 27 06:42:25 aurora sshd-session[299034]: Invalid user wahyu from 104.252.111.239 port 52450
Sep 27 06:48:52 aurora sshd-session[305766]: Invalid user pascal from 104.252.111.239 port 44894
Sep 27 06:51:53 aurora sshd-session[309765]: Invalid user github from 104.252.111.239 port 55420
show less
2026-09-27T12:50:45.275045+03:30 da-cat sshd[954708]: Invalid user mapadmin from 104.252.111.239 por ...
show more2026-09-27T12:50:45.275045+03:30 da-cat sshd[954708]: Invalid user mapadmin from 104.252.111.239 port 59472
...
show less
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. So ...
show moreDetected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: honeypot_ssh. Sources: honeypot. First seen: 2026-09-27. Risk score: 30/100.
show less
[fail2ban Auto Report] 2026-09-27T02:47:49.239419-04:00 alpha sshd-session[1413657]: Invalid user ni ...
show more[fail2ban Auto Report] 2026-09-27T02:47:49.239419-04:00 alpha sshd-session[1413657]: Invalid user nikita from 104.252.111.239 port 34126
2026-09-27T02:50:50.234912-04:00 alpha sshd-session[1432932]: Invalid user muhamed from 104.252.111.239 port 49184
...
show less
2026-09-27T07:29:25.404337 ******* sshd[2596617]: Invalid user mqm from 104.252.111.239 port 39474
2 ...
show more2026-09-27T07:29:25.404337 ******* sshd[2596617]: Invalid user mqm from 104.252.111.239 port 39474
2026-09-27T07:29:25.424251 ******* sshd[2596617]: Disconnected from invalid user mqm 104.252.111.239 port 39474 [preauth]
2026-09-27T07:33:09.348729 ******* sshd[2597673]: Invalid user administrador from 104.252.111.239 port 34174
show less
2026-09-27T06:18:37.600231+02:00 rc02 sshd[2403682]: Failed password for invalid user katie from 104 ...
show more2026-09-27T06:18:37.600231+02:00 rc02 sshd[2403682]: Failed password for invalid user katie from 104.252.111.239 port 38052 ssh2
2026-09-27T06:24:57.379936+02:00 rc02 sshd[2403978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.252.111.239 user=root
2026-09-27T06:24:59.341263+02:00 rc02 sshd[2403978]: Failed password for root from 104.252.111.239 port 41452 ssh2
...
show less
2026-09-27T04:17:49.220819Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.252.111.239:48 ...
show more2026-09-27T04:17:49.220819Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.252.111.239:48876 (158.69.22.11:2222) [session: 4b760adef9ae]
2026-09-27T04:24:41.220173Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 104.252.111.239:43996 (158.69.22.11:2222) [session: 7cc9c512179c]
...
show less
Funeypot detected 17 ssh attempts in 42m24s. Last by user "ardi", password "a**i", client "libssh_0. ...
show moreFuneypot detected 17 ssh attempts in 42m24s. Last by user "ardi", password "a**i", client "libssh_0.9.6".
show less
Funeypot detected 11 ssh attempts in 27m17s. Last by user "qwerty", password "1*3", client "libssh_0 ...
show moreFuneypot detected 11 ssh attempts in 27m17s. Last by user "qwerty", password "1*3", client "libssh_0.9.6".
show less
