Log in to view charts and search reports for this IP.
Log In
Reports Activity
Example preview
Report Categories (Last 60 Days)
Example preview
Top Reporter Countries (Last 60 Days)
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 182.149.104.197
This IP address has been reported a total of
84
times from
71 distinct
sources.
182.149.104.197 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 21
reports;
United States of America
with 8
reports;
France
with 7
reports.
The most common categories in these recent reports were:
SSH
80
times;
Brute-Force
79
times;
Port Scan
2
times;
Web App Attack
2
times;
Bad Web Bot
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-09-29T15:58:47.408512+08:00 vmi996132.contaboserver.net sshd[1694407]: Connection closed by 182 ...
show more2026-09-29T15:58:47.408512+08:00 vmi996132.contaboserver.net sshd[1694407]: Connection closed by 182.149.104.197 port 47514 [preauth]
...
show less
2026-09-29T07:41:24.131837+00:00 de2.cbz.pw sshd[3454748]: Invalid user bp from 182.149.104.197 port ...
show more2026-09-29T07:41:24.131837+00:00 de2.cbz.pw sshd[3454748]: Invalid user bp from 182.149.104.197 port 53470
2026-09-29T07:41:24.135707+00:00 de2.cbz.pw sshd[3454748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.149.104.197
2026-09-29T07:41:25.677716+00:00 de2.cbz.pw sshd[3454748]: Failed password for invalid user bp from 182.149.104.197 port 53470 ssh2
2026-09-29T07:43:05.487149+00:00 de2.cbz.pw sshd[3454770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.149.104.197 user=root
2026-09-29T07:43:07.561761+00:00 de2.cbz.pw sshd[3454770]: Failed password for root from 182.149.104.197 port 54938 ssh2
...
show less
Sep 29 07:13:50 mail sshd[3963246]: Invalid user ftptest from 182.149.104.197 port 50782
Sep 29 07:3 ...
show moreSep 29 07:13:50 mail sshd[3963246]: Invalid user ftptest from 182.149.104.197 port 50782
Sep 29 07:36:46 mail sshd[3965417]: Invalid user steam from 182.149.104.197 port 49576
...
show less
2026-09-29T15:27:13.700376+08:00 vmi996132.contaboserver.net sshd[1668126]: pam_unix(sshd:auth): aut ...
show more2026-09-29T15:27:13.700376+08:00 vmi996132.contaboserver.net sshd[1668126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.149.104.197 user=root
2026-09-29T15:27:15.749464+08:00 vmi996132.contaboserver.net sshd[1668126]: Failed password for root from 182.149.104.197 port 39638 ssh2
2026-09-29T15:27:17.527208+08:00 vmi996132.contaboserver.net sshd[1668126]: Disconnected from authenticating user root 182.149.104.197 port 39638 [preauth]
...
show less
2026-09-29T15:12:03.127748+08:00 vmi996132.contaboserver.net sshd[1655389]: pam_unix(sshd:auth): aut ...
show more2026-09-29T15:12:03.127748+08:00 vmi996132.contaboserver.net sshd[1655389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.149.104.197
2026-09-29T15:12:04.914382+08:00 vmi996132.contaboserver.net sshd[1655389]: Failed password for invalid user ftptest from 182.149.104.197 port 58166 ssh2
2026-09-29T15:12:05.652396+08:00 vmi996132.contaboserver.net sshd[1655389]: Disconnected from invalid user ftptest 182.149.104.197 port 58166 [preauth]
...
show less
2026-09-29T09:10:09.116014+02:00 v2202408231204281807 sshd-session[70997]: Invalid user ftptest from ...
show more2026-09-29T09:10:09.116014+02:00 v2202408231204281807 sshd-session[70997]: Invalid user ftptest from 182.149.104.197 port 51332
...
show less
Automated sensor: 23 SSH brute-force attempts over the last 24h (latest 2026-09-29T03:58Z). Username ...
show moreAutomated sensor: 23 SSH brute-force attempts over the last 24h (latest 2026-09-29T03:58Z). Usernames tried: root, aaaa, user1.
show less
Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:azerty123, ...
show moreHoneypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH
• Credentials: root:azerty123, root:!@#QWEasdZXC
• Number of login attempts: 2
• Client: SSH-2.0-libssh_0.9.6
show less
2026-09-29T11:26:05.630023+08:00 vps-ebd448c1 sshd-session[2338691]: Disconnected from authenticatin ...
show more2026-09-29T11:26:05.630023+08:00 vps-ebd448c1 sshd-session[2338691]: Disconnected from authenticating user root 182.149.104.197 port 56748 [preauth]
2026-09-29T11:27:31.838628+08:00 vps-ebd448c1 sshd-session[2339417]: Connection from 182.149.104.197 port 37410 on 51.79.161.204 port 22 rdomain ""
2026-09-29T11:27:34.288445+08:00 vps-ebd448c1 sshd-session[2339417]: Invalid user www from 182.149.104.197 port 37410
show less
