This IP address has been reported a total of
43
times from
34 distinct
sources.
2.102.248.194 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-13T12:19:10.077667+00:00 v2202502255267314709 sshd[2350999]: Invalid user rami from 2.102.24 ...
show more2026-06-13T12:19:10.077667+00:00 v2202502255267314709 sshd[2350999]: Invalid user rami from 2.102.248.194 port 56524
2026-06-13T12:20:54.219284+00:00 v2202502255267314709 sshd[2355244]: User root from 2.102.248.194 not allowed because not listed in AllowUsers
2026-06-13T12:22:43.737469+00:00 v2202502255267314709 sshd[2359463]: Invalid user temp from 2.102.248.194 port 56572
2026-06-13T12:26:22.874774+00:00 v2202502255267314709 sshd[2368299]: User root from 2.102.248.194 not allowed because not listed in AllowUsers
2026-06-13T12:28:11.815902+00:00 v2202502255267314709 sshd[2372611]: Invalid user patrol from 2.102.248.194 port 42552
...
show less
2026-06-13T12:00:15.180215+00:00 v2202502255267314709 sshd[2305836]: Invalid user user from 2.102.24 ...
show more2026-06-13T12:00:15.180215+00:00 v2202502255267314709 sshd[2305836]: Invalid user user from 2.102.248.194 port 56190
2026-06-13T12:02:09.526794+00:00 v2202502255267314709 sshd[2310325]: Invalid user socks from 2.102.248.194 port 42094
2026-06-13T12:04:08.909586+00:00 v2202502255267314709 sshd[2315135]: User root from 2.102.248.194 not allowed because not listed in AllowUsers
2026-06-13T12:05:50.395626+00:00 v2202502255267314709 sshd[2319190]: User root from 2.102.248.194 not allowed because not listed in AllowUsers
2026-06-13T12:07:36.180144+00:00 v2202502255267314709 sshd[2323446]: Invalid user marko from 2.102.248.194 port 56314
...
show less
2026-06-13T11:42:03.590275+00:00 v2202502255267314709 sshd[2262432]: Invalid user lemon from 2.102.2 ...
show more2026-06-13T11:42:03.590275+00:00 v2202502255267314709 sshd[2262432]: Invalid user lemon from 2.102.248.194 port 55912
2026-06-13T11:43:56.213925+00:00 v2202502255267314709 sshd[2266821]: Invalid user jenkins from 2.102.248.194 port 41818
2026-06-13T11:45:49.605545+00:00 v2202502255267314709 sshd[2271363]: Invalid user nextcloud from 2.102.248.194 port 55954
2026-06-13T11:47:35.230093+00:00 v2202502255267314709 sshd[2275560]: Invalid user postgres from 2.102.248.194 port 41854
2026-06-13T11:49:21.702971+00:00 v2202502255267314709 sshd[2279831]: Invalid user admin from 2.102.248.194 port 55982
...
show less
Brute-Force
SSH
Anonymous
Honeypot hit: Brute-force attack detected on 22/SSH
โข Credentials: vbox:vbox1234, lemon:lemon, nextc ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
โข Credentials: vbox:vbox1234, lemon:lemon, nextcloud:123456
โข Number of login attempts: 3
โข 2 command(s) were executed during the session
โข Client: SSH-2.0-libssh_0.9.6
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-13T11:36:32.005607+00:00 ASIA-SGP-1 sshd-session[571603]: Failed password for invalid user v ...
show more2026-06-13T11:36:32.005607+00:00 ASIA-SGP-1 sshd-session[571603]: Failed password for invalid user vbox from 2.102.248.194 port 52286 ssh2
2026-06-13T11:42:51.080355+00:00 ASIA-SGP-1 sshd-session[571685]: Invalid user lemon from 2.102.248.194 port 34116
2026-06-13T11:42:51.085304+00:00 ASIA-SGP-1 sshd-session[571685]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.102.248.194
2026-06-13T11:42:53.723762+00:00 ASIA-SGP-1 sshd-session[571685]: Failed password for invalid user lemon from 2.102.248.194 port 34116 ssh2
2026-06-13T11:44:45.674543+00:00 ASIA-SGP-1 sshd-session[571698]: Invalid user jenkins from 2.102.248.194 port 48254
...
show less
Jun 13 11:33:13 robotstxt-wpvulnerability sshd[2200579]: Invalid user vbox from 2.102.248.194 port 4 ...
show moreJun 13 11:33:13 robotstxt-wpvulnerability sshd[2200579]: Invalid user vbox from 2.102.248.194 port 48980
Jun 13 11:42:24 robotstxt-wpvulnerability sshd[2201007]: Invalid user lemon from 2.102.248.194 port 46152
Jun 13 11:44:18 robotstxt-wpvulnerability sshd[2201080]: Invalid user jenkins from 2.102.248.194 port 60290
...
show less
Jun 13 14:14:46 tuotantolaitos sshd[140005]: pam_unix(sshd:auth): authentication failure; logname= u ...
show moreJun 13 14:14:46 tuotantolaitos sshd[140005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.102.248.194
Jun 13 14:14:48 tuotantolaitos sshd[140005]: Failed password for invalid user sean from 2.102.248.194 port 53420 ssh2
...
show less
Jun 13 13:59:41 tuotantolaitos sshd[139589]: pam_unix(sshd:auth): authentication failure; logname= u ...
show moreJun 13 13:59:41 tuotantolaitos sshd[139589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.102.248.194
Jun 13 13:59:43 tuotantolaitos sshd[139589]: Failed password for invalid user sae from 2.102.248.194 port 52748 ssh2
...
show less
Jun 13 13:43:10 tuotantolaitos sshd[139203]: pam_unix(sshd:auth): authentication failure; logname= u ...
show moreJun 13 13:43:10 tuotantolaitos sshd[139203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.102.248.194
Jun 13 13:43:12 tuotantolaitos sshd[139203]: Failed password for invalid user rahul from 2.102.248.194 port 37978 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 43 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ