This IP address has been reported a total of
33
times from
27 distinct
sources.
152.169.164.2 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-01T17:13:42.803534+02:00 router01.kfz-heimchen.de sshd-session[1332208]: Disconnected from a ...
show more2026-07-01T17:13:42.803534+02:00 router01.kfz-heimchen.de sshd-session[1332208]: Disconnected from authenticating user root 152.169.164.2 port 44188 [preauth]
2026-07-01T17:15:56.676233+02:00 router01.kfz-heimchen.de sshd-session[1332575]: Invalid user demo from 152.169.164.2 port 60048
2026-07-01T17:15:56.947716+02:00 router01.kfz-heimchen.de sshd-session[1332575]: Disconnected from invalid user demo 152.169.164.2 port 60048 [preauth]
2026-07-01T17:19:15.884333+02:00 router01.kfz-heimchen.de sshd-session[1333150]: Invalid user user from 152.169.164.2 port 55430
2026-07-01T17:19:16.836142+02:00 router01.kfz-heimchen.de sshd-session[1333150]: Disconnected from invalid user user 152.169.164.2 port 55430 [preauth]
show less
2026-07-01T18:09:56.161712 tradext sshd[346825]: Invalid user admin from 152.169.164.2 port 55616
20 ...
show more2026-07-01T18:09:56.161712 tradext sshd[346825]: Invalid user admin from 152.169.164.2 port 55616
2026-07-01T18:15:31.889392 tradext sshd[348382]: Invalid user demo from 152.169.164.2 port 38258
2026-07-01T18:18:35.936753 tradext sshd[349305]: Invalid user user from 152.169.164.2 port 39002
...
show less
2026-07-01T21:17:53.118024+08:00 nice-lasers-1.localdomain sshd[286829]: Disconnected from authentic ...
show more2026-07-01T21:17:53.118024+08:00 nice-lasers-1.localdomain sshd[286829]: Disconnected from authenticating user root 152.169.164.2 port 43396 [preauth]
2026-07-01T21:20:41.726088+08:00 nice-lasers-1.localdomain sshd[286832]: Disconnected from authenticating user root 152.169.164.2 port 35864 [preauth]
2026-07-01T21:23:32.141302+08:00 nice-lasers-1.localdomain sshd[286838]: Disconnected from authenticating user root 152.169.164.2 port 40750 [preauth]
...
show less
2026-06-30T00:49:13.313082+08:00 VM-8-9-debian sshd[1247230]: Failed password for root from 152.169. ...
show more2026-06-30T00:49:13.313082+08:00 VM-8-9-debian sshd[1247230]: Failed password for root from 152.169.164.2 port 48910 ssh2
2026-06-30T00:51:48.794903+08:00 VM-8-9-debian sshd[1247594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.169.164.2 user=root
2026-06-30T00:51:51.492541+08:00 VM-8-9-debian sshd[1247594]: Failed password for root from 152.169.164.2 port 42360 ssh2
...
show less
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
SSH Brute force: 13 attempts were recorded from 152.169.164.2
2026-06-29T17:39:08+02:00 Invalid user ...
show moreSSH Brute force: 13 attempts were recorded from 152.169.164.2
2026-06-29T17:39:08+02:00 Invalid user user02 from 152.169.164.2 port 52296
2026-06-29T17:46:23+02:00 Disconnected from authenticating user root 152.169.164.2 port 54614 [preauth]
2026-06-29T17:48:58+02:00 Invalid user alex from 152.169.164.2 port 34098
2026-06-29T17:51:46+02:00 Disconnected from authenticating user root 152.169.164.2 port 36442 [preauth]
2026-06-29T17:54:32+02:00 Invalid user teamspeak from 152.169.164.2 port 52506
2026-06-29T17:57:22+02:00 Invalid user dayz from 152.169.164.2 port 55234
2026-06-29T18:00:17+02:00 Invalid user deployer from 152.169.164.2 port 56028
2026-06-29T18:03:15+02:00 Invalid user alex from 152.169.164.2 port 60276
2026-06-29T18:06:12+02:00 Invalid user ubuntu from 152.169.164.2 port 58238
2026-06-29T18:09:12+02:00 Invalid user steam from 152.169.164.2 port 41128
2026-06-29T18:12:13+02:0
show less
Brute-Force
SSH
Showing 1 to
15
of 33 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ