This IP address has been reported a total of
16
times from
14 distinct
sources.
149.30.252.204 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
United States of America
with 3
reports;
United Kingdom of Great Britain and Northern Ireland
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
16
times;
SSH
13
times;
FTP Brute-Force
1
time;
Port Scan
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-25T13:52:26.410791+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[1825449]: Failed password for r ...
show more2026-10-25T13:52:26.410791+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[1825449]: Failed password for root from 149.30.252.204 port 52812 ssh2
2026-10-25T13:52:28.993677+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[1825453]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.30.252.204 user=root
2026-10-25T13:52:31.591979+00:00 smokeping-thn-lhr01.pdx.net.uk sshd[1825453]: Failed password for root from 149.30.252.204 port 52826 ssh2
...
show less
2026-10-25T21:16:21.399398+08:00 CVM24121 sshd[3006605]: Failed password for root from 149.30.252.20 ...
show more2026-10-25T21:16:21.399398+08:00 CVM24121 sshd[3006605]: Failed password for root from 149.30.252.204 port 34756 ssh2
2026-10-25T21:16:26.192600+08:00 CVM24121 sshd[3006622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.30.252.204 user=root
2026-10-25T21:16:27.982608+08:00 CVM24121 sshd[3006622]: Failed password for root from 149.30.252.204 port 54548 ssh2
...
show less
[AUTORAVALT][[24/10/2026 - 10:55:37 -03:00 UTC]
Attack from [Cogent Communications, LLC]
[149.30.252 ...
show more[AUTORAVALT][[24/10/2026 - 10:55:37 -03:00 UTC]
Attack from [Cogent Communications, LLC]
[149.30.252.204] Action: BLocKed
FTP Brute-Force -> Running brute force credentials on the FTP server.
Brute-Force -> Credential brute-force attacks on webpage logins and services like SSH, FTP, SIP, SMTP, RDP, etc.
]
...
show less
FTP Brute-Force
Brute-Force
Anonymous
SSH brute force: repeated failed logins and invalid usernames. Reported by fail2ban.
2026-10-24T10:47:51.026985+02:00 serengeti sshd-session[4117538]: Failed password for root from 149. ...
show more2026-10-24T10:47:51.026985+02:00 serengeti sshd-session[4117538]: Failed password for root from 149.30.252.204 port 38998 ssh2
2026-10-24T10:47:55.053042+02:00 serengeti sshd-session[4117541]: Failed password for root from 149.30.252.204 port 42522 ssh2
2026-10-24T10:47:56.596751+02:00 serengeti sshd-session[4117558]: Failed password for root from 149.30.252.204 port 42532 ssh2
2026-10-24T10:47:58.863784+02:00 serengeti sshd-session[4117564]: Failed password for root from 149.30.252.204 port 42548 ssh2
2026-10-24T10:48:00.376214+02:00 serengeti sshd-session[4117566]: Failed password for root from 149.30.252.204 port 42562 ssh2
...
show less
Oct 24 07:26:34 pxe sshd[597866]: Failed password for root from 149.30.252.204 port 51448 ssh2
Oct 2 ...
show moreOct 24 07:26:34 pxe sshd[597866]: Failed password for root from 149.30.252.204 port 51448 ssh2
Oct 24 07:26:37 pxe sshd[597872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=149.30.252.204 user=root
Oct 24 07:26:39 pxe sshd[597872]: Failed password for root from 149.30.252.204 port 54472 ssh2
...
show less
