This IP address has been reported a total of
257
times from
153 distinct
sources.
148.222.212.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-04-26T01:43:22.829232+02:00 HETZNER-FI-1 sshd[585655]: Invalid user traccar from 148.222.212.72 ...
show more2026-04-26T01:43:22.829232+02:00 HETZNER-FI-1 sshd[585655]: Invalid user traccar from 148.222.212.72 port 42232
2026-04-26T01:47:06.203658+02:00 HETZNER-FI-1 sshd[605638]: Invalid user dev from 148.222.212.72 port 41577
2026-04-26T01:50:47.299983+02:00 HETZNER-FI-1 sshd[625239]: Invalid user bot from 148.222.212.72 port 40152
...
show less
2026-04-26T00:59:05.476013+02:00 mail sshd-session[1643150]: Invalid user rtc from 148.222.212.72 po ...
show more2026-04-26T00:59:05.476013+02:00 mail sshd-session[1643150]: Invalid user rtc from 148.222.212.72 port 33191
2026-04-26T00:59:07.488380+02:00 mail sshd-session[1643150]: Failed password for invalid user rtc from 148.222.212.72 port 33191 ssh2
2026-04-26T01:02:54.499191+02:00 mail sshd-session[1643233]: Invalid user steam from 148.222.212.72 port 33294
2026-04-26T01:02:56.614600+02:00 mail sshd-session[1643233]: Failed password for invalid user steam from 148.222.212.72 port 33294 ssh2
2026-04-26T01:06:47.833208+02:00 mail sshd-session[1643330]: Failed password for root from 148.222.212.72 port 34284 ssh2
...
show less
2026-04-25T22:28:54.067542+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[3996681]: Invalid user p ...
show more2026-04-25T22:28:54.067542+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[3996681]: Invalid user postgres from 148.222.212.72 port 39323
2026-04-25T22:35:22.144594+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[3997057]: Invalid user sammy from 148.222.212.72 port 43840
2026-04-25T22:39:16.762406+00:00 edge-nik-ams01.int.pdx.net.uk sshd-session[3997329]: Invalid user vmuser from 148.222.212.72 port 42239
...
show less
2026-04-26T00:26:53.354433+02:00 gw9.nodesafety.com sshd-session[2272163]: Disconnected from invalid ...
show more2026-04-26T00:26:53.354433+02:00 gw9.nodesafety.com sshd-session[2272163]: Disconnected from invalid user postgres 148.222.212.72 port 51392 [preauth]
2026-04-26T00:34:44.643664+02:00 gw9.nodesafety.com sshd-session[2274053]: Invalid user sammy from 148.222.212.72 port 43864
2026-04-26T00:34:44.916033+02:00 gw9.nodesafety.com sshd-session[2274053]: Disconnected from invalid user sammy 148.222.212.72 port 43864 [preauth]
2026-04-26T00:38:37.663110+02:00 gw9.nodesafety.com sshd-session[2275008]: Invalid user vmuser from 148.222.212.72 port 42745
2026-04-26T00:38:37.934292+02:00 gw9.nodesafety.com sshd-session[2275008]: Disconnected from invalid user vmuser 148.222.212.72 port 42745 [preauth]
show less
2026-04-26T03:57:20.313490+05:30 fr1-racknerd sshd[255178]: pam_unix(sshd:auth): authentication fail ...
show more2026-04-26T03:57:20.313490+05:30 fr1-racknerd sshd[255178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.222.212.72
2026-04-26T03:57:21.794073+05:30 fr1-racknerd sshd[255178]: Failed password for invalid user postgres from 148.222.212.72 port 58200 ssh2
2026-04-26T04:04:53.915710+05:30 fr1-racknerd sshd[347033]: Invalid user sammy from 148.222.212.72 port 47484
...
show less
(sshd) Failed SSH login from 148.222.212.72 (AR/Argentina/customer.bnssarg1.isp.starlink.com)
Brute-Force
SSH
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured server. Multiple failed aut ...
show moreRepeated SSH brute force and user enumeration attempts against a secured server. Multiple failed authentication attempts from this IP across an extended period.
show less
Brute-Force
SSH
Showing 61 to
75
of 257 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩