This IP address has been reported a total of
172
times from
90 distinct
sources.
152.228.139.233 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 20 12:34:52 Servo sshd[1005710]: Invalid user ts3 from 152.228.139.233 port 49798
Jul 20 12:37:1 ...
show moreJul 20 12:34:52 Servo sshd[1005710]: Invalid user ts3 from 152.228.139.233 port 49798
Jul 20 12:37:19 Servo sshd[1008979]: Invalid user postgres from 152.228.139.233 port 60352
Jul 20 12:41:19 Servo sshd[1014136]: Invalid user wow from 152.228.139.233 port 44338
...
show less
2026-07-20T11:34:09.272190+01:00 node2 sshd-session[4031538]: Invalid user ts3 from 152.228.139.233 ...
show more2026-07-20T11:34:09.272190+01:00 node2 sshd-session[4031538]: Invalid user ts3 from 152.228.139.233 port 54418
2026-07-20T11:37:04.506262+01:00 node2 sshd-session[4111600]: Invalid user postgres from 152.228.139.233 port 43070
2026-07-20T11:41:06.656367+01:00 node2 sshd-session[29465]: Invalid user wow from 152.228.139.233 port 40418
...
show less
2026-07-20T10:35:31.832210+00:00 vps1.gnome.moe sshd-session[1505403]: Invalid user postgres from 15 ...
show more2026-07-20T10:35:31.832210+00:00 vps1.gnome.moe sshd-session[1505403]: Invalid user postgres from 152.228.139.233 port 38148
2026-07-20T10:35:31.836855+00:00 vps1.gnome.moe sshd-session[1505403]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.139.233
2026-07-20T10:35:34.049481+00:00 vps1.gnome.moe sshd-session[1505403]: Failed password for invalid user postgres from 152.228.139.233 port 38148 ssh2
2026-07-20T10:37:44.513111+00:00 vps1.gnome.moe sshd-session[1506591]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.139.233 user=root
2026-07-20T10:37:46.132883+00:00 vps1.gnome.moe sshd-session[1506591]: Failed password for root from 152.228.139.233 port 32828 ssh2
...
show less
2026-07-20T12:29:37.199713+02:00 router01.gfa-steriltechnik.de sshd[2568276]: Invalid user ts3 from ...
show more2026-07-20T12:29:37.199713+02:00 router01.gfa-steriltechnik.de sshd[2568276]: Invalid user ts3 from 152.228.139.233 port 34334
2026-07-20T12:29:37.223124+02:00 router01.gfa-steriltechnik.de sshd[2568276]: Disconnected from invalid user ts3 152.228.139.233 port 34334 [preauth]
2026-07-20T12:35:31.638926+02:00 router01.gfa-steriltechnik.de sshd[2569167]: Invalid user postgres from 152.228.139.233 port 41502
2026-07-20T12:35:31.662052+02:00 router01.gfa-steriltechnik.de sshd[2569167]: Disconnected from invalid user postgres 152.228.139.233 port 41502 [preauth]
2026-07-20T12:37:44.225707+02:00 router01.gfa-steriltechnik.de sshd[2569438]: Disconnected from authenticating user root 152.228.139.233 port 44806 [preauth]
show less
2026-07-20T10:29:48.469240+00:00 certa-prod-1 sshd[2710015]: Failed password for invalid user ts3 fr ...
show more2026-07-20T10:29:48.469240+00:00 certa-prod-1 sshd[2710015]: Failed password for invalid user ts3 from 152.228.139.233 port 58284 ssh2
2026-07-20T10:35:34.450858+00:00 certa-prod-1 sshd[2710681]: Invalid user postgres from 152.228.139.233 port 45968
2026-07-20T10:35:34.455153+00:00 certa-prod-1 sshd[2710681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.228.139.233
2026-07-20T10:35:36.321011+00:00 certa-prod-1 sshd[2710681]: Failed password for invalid user postgres from 152.228.139.233 port 45968 ssh2
...
show less
SSH brute force attack on honeypot sensor. Credentials tried: francesco/francesco, jin/12345678, roo ...
show moreSSH brute force attack on honeypot sensor. Credentials tried: francesco/francesco, jin/12345678, root/admon Detected by DShield/SANS ISC honeypot sensor.
show less
Brute-Force
SSH
Showing 1 to
15
of 172 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩