This IP address has been reported a total of
73
times from
71 distinct
sources.
152.42.203.248 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: root:MoeClub.org, r ...
show moreHoneypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: root:MoeClub.org, root:cxthhhhh.com, root:Minijer.com, root:LeitboGi0ro, root:IdcOffer.com, root:Pwd@CentOS, root:Pwd@Linux
• Number of login attempts: 7
• 1 command(s) were executed during the session
• Client: SSH-2.0-Go
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Jun 11 11:05:35 vps-9f3cdc33 sshd[437201]: Failed password for root from 152.42.203.248 port 34232 s ...
show moreJun 11 11:05:35 vps-9f3cdc33 sshd[437201]: Failed password for root from 152.42.203.248 port 34232 ssh2
Jun 11 11:05:35 vps-9f3cdc33 sshd[437202]: Failed password for root from 152.42.203.248 port 34242 ssh2
Jun 11 11:05:35 vps-9f3cdc33 sshd[437204]: Failed password for root from 152.42.203.248 port 34222 ssh2
Jun 11 11:05:35 vps-9f3cdc33 sshd[437203]: Failed password for root from 152.42.203.248 port 34206 ssh2
Jun 11 11:05:36 vps-9f3cdc33 sshd[437211]: Failed password for root from 152.42.203.248 port 34230 ssh2
...
show less
2026-06-11T09:04:52.254922+00:00 edge-con-sjc01.int.pdx.net.uk sshd[3884624]: Failed password for ro ...
show more2026-06-11T09:04:52.254922+00:00 edge-con-sjc01.int.pdx.net.uk sshd[3884624]: Failed password for root from 152.42.203.248 port 38518 ssh2
2026-06-11T09:04:50.482115+00:00 edge-con-sjc01.int.pdx.net.uk sshd[3884627]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.203.248 user=root
2026-06-11T09:04:52.255014+00:00 edge-con-sjc01.int.pdx.net.uk sshd[3884627]: Failed password for root from 152.42.203.248 port 38578 ssh2
...
show less
Active SSH brute-force detected. Logs: Jun 11 11:04:00 AVM-708122 sshd[28296]: Failed password for r ...
show moreActive SSH brute-force detected. Logs: Jun 11 11:04:00 AVM-708122 sshd[28296]: Failed password for root from 152.42.203.248 port 58166 ssh2 Jun 11 11:03:58 AVM-708122 sshd[28297]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s...
show less
Jun 11 09:02:04 host sshd[1455300]: Failed password for root from 152.42.203.248 port 48844 ssh2
Jun ...
show moreJun 11 09:02:04 host sshd[1455300]: Failed password for root from 152.42.203.248 port 48844 ssh2
Jun 11 09:02:02 host sshd[1455301]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.203.248 user=root
Jun 11 09:02:04 host sshd[1455301]: Failed password for root from 152.42.203.248 port 48880 ssh2
Jun 11 09:02:02 host sshd[1455302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.42.203.248 user=root
Jun 11 09:02:04 host sshd[1455302]: Failed password for root from 152.42.203.248 port 48868 ssh2
...
show less
Jun 11 11:01:40 themis sshd-session[612514]: User root from 152.42.203.248 not allowed because none ...
show moreJun 11 11:01:40 themis sshd-session[612514]: User root from 152.42.203.248 not allowed because none of user's groups are listed in AllowGroups
Jun 11 11:01:40 themis sshd-session[612517]: User root from 152.42.203.248 not allowed because none of user's groups are listed in AllowGroups
Jun 11 11:01:40 themis sshd-session[612513]: User root from 152.42.203.248 not allowed because none of user's groups are listed in AllowGroups
...
show less
UFW BLOCK Report:
Total attempts: 8
Top ports and details:
- Port 22 (8x): SSH Brute-Force (e. ...
show moreUFW BLOCK Report:
Total attempts: 8
Top ports and details:
- Port 22 (8x): SSH Brute-Force (e.g., CVE-2024-6387 regreSSHion, botnets like Mirai, Mozi)
Source IP: 152.42.203.248
| this report is autogenerated by ZIME Cloud
show less
Brute-Force
SSH
Showing 1 to
15
of 73 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩