This IP address has been reported a total of
66
times from
40 distinct
sources.
149.248.52.23 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-17T20:27:09.447797-04:00 debian sshd[1153690]: Invalid user abd from 149.248.52.23 port 5945 ...
show more2026-07-17T20:27:09.447797-04:00 debian sshd[1153690]: Invalid user abd from 149.248.52.23 port 59450
2026-07-17T20:27:09.451339-04:00 debian sshd[1153690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23
2026-07-17T20:27:11.717814-04:00 debian sshd[1153690]: Failed password for invalid user abd from 149.248.52.23 port 59450 ssh2
2026-07-17T20:29:22.961902-04:00 debian sshd[1155203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=root
2026-07-17T20:29:24.822104-04:00 debian sshd[1155203]: Failed password for root from 149.248.52.23 port 53588 ssh2
...
show less
[rede-44-49] (sshd) Failed SSH login from 149.248.52.23 (CA/Canada/149.248.52.23.vultrusercontent.co ...
show more[rede-44-49] (sshd) Failed SSH login from 149.248.52.23 (CA/Canada/149.248.52.23.vultrusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 17 21:02:25 sshd[3317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=[USERNAME]
Jul 17 21:02:27 sshd[3317]: Failed password for [USERNAME] from 149.248.52.23 port 33286 ssh2
Jul 17 21:04:46 sshd[3504]: Invalid user [USERNAME] from 149.248.52.23 port 55654
Jul 17 21:04:48 sshd[3504]: Failed password for invalid user [USERNAME] from 149.248.52.23 port 55654 ssh2
Jul 17 21:07:04 sshd[3628]: Invalid user [USERNAME] from 149.248.52.23
show less
2026-07-18T00:00:11.913252+00:00 mailcow sshd[88916]: Failed password for invalid user stu from 149. ...
show more2026-07-18T00:00:11.913252+00:00 mailcow sshd[88916]: Failed password for invalid user stu from 149.248.52.23 port 43458 ssh2
2026-07-18T00:02:21.299450+00:00 mailcow sshd[90591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=root
2026-07-18T00:02:23.291621+00:00 mailcow sshd[90591]: Failed password for root from 149.248.52.23 port 37604 ssh2
2026-07-18T00:04:42.427348+00:00 mailcow sshd[91929]: Invalid user pos from 149.248.52.23 port 59968
...
show less
2026-07-17T23:44:21.829131+00:00 mailcow sshd[79663]: Failed password for invalid user mk from 149.2 ...
show more2026-07-17T23:44:21.829131+00:00 mailcow sshd[79663]: Failed password for invalid user mk from 149.248.52.23 port 56300 ssh2
2026-07-17T23:46:33.490924+00:00 mailcow sshd[80962]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=root
2026-07-17T23:46:35.006380+00:00 mailcow sshd[80962]: Failed password for root from 149.248.52.23 port 50436 ssh2
2026-07-17T23:48:45.781810+00:00 mailcow sshd[82175]: Invalid user reolink from 149.248.52.23 port 44566
...
show less
2026-07-17T23:28:28.076615+00:00 mailcow sshd[70517]: Failed password for invalid user ociistst from ...
show more2026-07-17T23:28:28.076615+00:00 mailcow sshd[70517]: Failed password for invalid user ociistst from 149.248.52.23 port 40904 ssh2
2026-07-17T23:30:37.461696+00:00 mailcow sshd[71747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=root
2026-07-17T23:30:39.735025+00:00 mailcow sshd[71747]: Failed password for root from 149.248.52.23 port 35040 ssh2
2026-07-17T23:32:58.818442+00:00 mailcow sshd[73057]: Invalid user zenith from 149.248.52.23 port 57406
...
show less
2026-07-17T16:57:59.923046-06:00 b146-18 sshd[2938]: pam_sss(sshd:auth): authentication failure; log ...
show more2026-07-17T16:57:59.923046-06:00 b146-18 sshd[2938]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23 user=piuser
2026-07-17T16:58:01.730008-06:00 b146-18 sshd[2938]: Failed password for invalid user piuser from 149.248.52.23 port 44332 ssh2
2026-07-17T17:00:37.676652-06:00 b146-18 sshd[2954]: User root from 149.248.52.23 not allowed because none of user's groups are listed in AllowGroups
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-07-17T20:44:47.747162+00:00 mailcow sshd[4167428]: Invalid user samson from 149.248.52.23 port ...
show more2026-07-17T20:44:47.747162+00:00 mailcow sshd[4167428]: Invalid user samson from 149.248.52.23 port 53546
2026-07-17T20:44:47.752931+00:00 mailcow sshd[4167428]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23
2026-07-17T20:44:49.731206+00:00 mailcow sshd[4167428]: Failed password for invalid user samson from 149.248.52.23 port 53546 ssh2
2026-07-17T20:47:02.397967+00:00 mailcow sshd[4168947]: Invalid user dockeruser from 149.248.52.23 port 49918
...
show less
2026-07-17T20:15:27.933758+00:00 mailcow sshd[4150239]: Failed password for root from 149.248.52.23 ...
show more2026-07-17T20:15:27.933758+00:00 mailcow sshd[4150239]: Failed password for root from 149.248.52.23 port 44184 ssh2
2026-07-17T20:17:35.384359+00:00 mailcow sshd[4151507]: Invalid user odoo from 149.248.52.23 port 40554
2026-07-17T20:17:35.390690+00:00 mailcow sshd[4151507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.248.52.23
2026-07-17T20:17:37.323965+00:00 mailcow sshd[4151507]: Failed password for invalid user odoo from 149.248.52.23 port 40554 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 66 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩