This IP address has been reported a total of
341
times from
196 distinct
sources.
175.4.52.243 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 6
reports;
United States of America
with 4
reports;
Canada
with 2
reports.
The most common categories in these recent reports were:
Brute-Force
25
times;
SSH
23
times;
Port Scan
6
times;
Hacking
3
times;
Bad Web Bot
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
2026-07-14T00:53:14.549536ls.fionamaguire-art.com sshd[23726]: Invalid user user from 175.4.52.243 p ...
show more2026-07-14T00:53:14.549536ls.fionamaguire-art.com sshd[23726]: Invalid user user from 175.4.52.243 port 39976
...
show less
2026-07-14T02:49:10.868180+02:00 axisverse sshd-session[2093856]: Invalid user user from 175.4.52.24 ...
show more2026-07-14T02:49:10.868180+02:00 axisverse sshd-session[2093856]: Invalid user user from 175.4.52.243 port 50228
2026-07-14T02:49:12.146658+02:00 axisverse sshd-session[2094022]: Invalid user user from 175.4.52.243 port 51658
2026-07-14T02:49:13.294802+02:00 axisverse sshd-session[2094188]: Invalid user user from 175.4.52.243 port 52610
...
show less
2026-07-14T03:16:12.072285+08:00 us21.cdn.420422709.xyz sshd-session[14970]: Failed password for roo ...
show more2026-07-14T03:16:12.072285+08:00 us21.cdn.420422709.xyz sshd-session[14970]: Failed password for root from 175.4.52.243 port 45300 ssh2
2026-07-14T03:16:14.608865+08:00 us21.cdn.420422709.xyz sshd-session[14973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.4.52.243 user=root
2026-07-14T03:16:16.236175+08:00 us21.cdn.420422709.xyz sshd-session[14973]: Failed password for root from 175.4.52.243 port 48234 ssh2
...
show less
CSF/LFD blocked 175.4.52.243 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH l ...
show moreCSF/LFD blocked 175.4.52.243 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 175.4.52.243 (CN/China/-): 5 in the last 3600 secs. Evidence: Jul 13 07:53:30 paladin sshd-session[2233499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.4.52.243 user=root
show less
Active SSH brute-force detected. Logs: 2026-07-13T06:36:40.287704+05:30 AVM-312579 sshd-session[1793 ...
show moreActive SSH brute-force detected. Logs: 2026-07-13T06:36:40.287704+05:30 AVM-312579 sshd-session[1793592]: Failed password for root from 175.4.52.243 port 33910 ssh2 2026-07-13T06:36:42.816296+05:30 AVM-312579 sshd-session[1793599]: pam_unix(sshd:auth):...
show less
2026-07-12T17:36:43.335Z, an unauthorized access attempt was detected on port 22 (SSH) from source I ...
show more2026-07-12T17:36:43.335Z, an unauthorized access attempt was detected on port 22 (SSH) from source IP address 175.4.52.243.
show less
2026-07-12T18:19:35.668397+02:00 gw-de36-01.guestgw.net sshd[430898]: Connection closed by authentic ...
show more2026-07-12T18:19:35.668397+02:00 gw-de36-01.guestgw.net sshd[430898]: Connection closed by authenticating user root 175.4.52.243 port 58068 [preauth]
2026-07-12T18:19:39.377158+02:00 gw-de36-01.guestgw.net sshd[431414]: Connection closed by authenticating user root 175.4.52.243 port 40098 [preauth]
2026-07-12T18:19:41.840732+02:00 gw-de36-01.guestgw.net sshd[431424]: Connection closed by authenticating user root 175.4.52.243 port 41584 [preauth]
2026-07-12T18:19:43.578695+02:00 gw-de36-01.guestgw.net sshd[431433]: Connection closed by authenticating user root 175.4.52.243 port 42592 [preauth]
2026-07-12T18:19:45.996920+02:00 gw-de36-01.guestgw.net sshd[431443]: Connection closed by authenticating user root 175.4.52.243 port 43234 [preauth]
show less
2026-07-12T07:31:10.266610+02:00 router02.imr-richtsfeld.de sshd[359132]: Connection closed by authe ...
show more2026-07-12T07:31:10.266610+02:00 router02.imr-richtsfeld.de sshd[359132]: Connection closed by authenticating user root 175.4.52.243 port 40256 [preauth]
2026-07-12T07:31:12.372028+02:00 router02.imr-richtsfeld.de sshd[359134]: Connection closed by authenticating user root 175.4.52.243 port 41348 [preauth]
2026-07-12T07:31:13.742858+02:00 router02.imr-richtsfeld.de sshd[359138]: Connection closed by authenticating user root 175.4.52.243 port 42884 [preauth]
2026-07-12T07:31:15.083378+02:00 router02.imr-richtsfeld.de sshd[359141]: Connection closed by authenticating user root 175.4.52.243 port 43874 [preauth]
2026-07-12T07:31:16.370885+02:00 router02.imr-richtsfeld.de sshd[359144]: Connection closed by authenticating user root 175.4.52.243 port 44920 [preauth]
show less
Brute-Force
Anonymous
Failed password for root from 175.4.52.243 port 33816 ssh2
pam_unix(sshd:auth): authentication failu ...
show moreFailed password for root from 175.4.52.243 port 33816 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.4.52.243 user=root
Failed password for root from 175.4.52.243 port 37130 ssh2
pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.4.52.243 user=root
Failed password for root from 175.4.52.243 port 38922 ssh2
show less
2026-07-11T17:42:22.995528+02:00 router02.imr-richtsfeld.de sshd[185100]: Connection closed by authe ...
show more2026-07-11T17:42:22.995528+02:00 router02.imr-richtsfeld.de sshd[185100]: Connection closed by authenticating user root 175.4.52.243 port 58746 [preauth]
2026-07-11T17:42:24.355391+02:00 router02.imr-richtsfeld.de sshd[185103]: Connection closed by authenticating user root 175.4.52.243 port 60402 [preauth]
2026-07-11T17:42:26.397968+02:00 router02.imr-richtsfeld.de sshd[185107]: Connection closed by authenticating user root 175.4.52.243 port 33318 [preauth]
2026-07-11T17:42:27.638888+02:00 router02.imr-richtsfeld.de sshd[185109]: Connection closed by authenticating user root 175.4.52.243 port 35240 [preauth]
2026-07-11T17:42:28.790695+02:00 router02.imr-richtsfeld.de sshd[185112]: Connection closed by authenticating user root 175.4.52.243 port 36462 [preauth]
show less
