This IP address has been reported a total of
28
times from
24 distinct
sources.
202.46.28.140 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Honeypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: ubuntu:ubuntu20, dp ...
show moreHoneypot [fra-de-honeypot]: Brute-force attack detected on 22/SSH
• Credentials: ubuntu:ubuntu20, dp:dp, root:abc@2023, tabata:tabata, 345gs5662d34:345gs5662d34, tabata:3245gs5662d34
• Number of login attempts: 6
• 20 command(s) were executed during the session
• Client: SSH-2.0-libssh_0.9.6
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Sep 1 17:59:16 nova sshd[38116]: Invalid user ubuntu from 202.46.28.140 port 46614
Sep 1 18:05:49 ...
show moreSep 1 17:59:16 nova sshd[38116]: Invalid user ubuntu from 202.46.28.140 port 46614
Sep 1 18:05:49 nova sshd[38143]: Invalid user dp from 202.46.28.140 port 59948
Sep 1 18:08:39 nova sshd[38153]: Invalid user tabata from 202.46.28.140 port 41442
show less
2026-09-01T19:59:25.620410+02:00 wels sshd[1553877]: Invalid user ubuntu from 202.46.28.140 port 552 ...
show more2026-09-01T19:59:25.620410+02:00 wels sshd[1553877]: Invalid user ubuntu from 202.46.28.140 port 55284
2026-09-01T19:59:25.931027+02:00 wels sshd[1553877]: Disconnected from invalid user ubuntu 202.46.28.140 port 55284 [preauth]
2026-09-01T20:05:51.115416+02:00 wels sshd[1553888]: Invalid user dp from 202.46.28.140 port 52922
...
show less
SSH Brute force: 41 attempts were recorded from 202.46.28.140
2026-09-01T14:55:11+02:00 Disconnected ...
show moreSSH Brute force: 41 attempts were recorded from 202.46.28.140
2026-09-01T14:55:11+02:00 Disconnected from authenticating user root 202.46.28.140 port 56188 [preauth]
2026-09-01T15:03:02+02:00 Disconnected from authenticating user root 202.46.28.140 port 56234 [preauth]
2026-09-01T15:04:00+02:00 Disconnected from authenticating user root 202.46.28.140 port 57304 [preauth]
2026-09-01T15:04:57+02:00 Disconnected from authenticating user root 202.46.28.140 port 58842 [preauth]
2026-09-01T15:06:22+02:00 Disconnected from authenticating user root 202.46.28.140 port 56716 [preauth]
2026-09-01T15:07:19+02:00 Invalid user adshare from 202.46.28.140 port 48972
2026-09-01T15:08:17+02:00 Disconnected from authenticating user root 202.46.28.140 port 35460 [preauth]
2026-09-01T15:09:14+02:00 Invalid user user from 202.46.28.140 port 55802
2026-09-01T15:10:11+02:00 Disconnected from authenticating user
show less
Brute-Force
SSH
Anonymous
2026-09-01T15:04:47+02:00 exit-1 sshd[27089]: pam_unix(sshd:auth): authentication failure; logname= ...
show more2026-09-01T15:04:47+02:00 exit-1 sshd[27089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.28.140 user=root
2026-09-01T15:04:49+02:00 exit-1 sshd[27089]: Failed password for root from 202.46.28.140 port 49374 ssh2
2026-09-01T15:05:43+02:00 exit-1 sshd[27116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.28.140 user=root
2026-09-01T15:05:44+02:00 exit-1 sshd[27116]: Failed password for root from 202.46.28.140 port 52992 ssh2
...
show less
2026-09-01T15:03:15.337564+02:00 ns3124905 sshd-session[2226416]: Failed password for root from 202. ...
show more2026-09-01T15:03:15.337564+02:00 ns3124905 sshd-session[2226416]: Failed password for root from 202.46.28.140 port 51280 ssh2
2026-09-01T15:04:12.141891+02:00 ns3124905 sshd-session[2226896]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.28.140 user=root
2026-09-01T15:04:14.201419+02:00 ns3124905 sshd-session[2226896]: Failed password for root from 202.46.28.140 port 37724 ssh2
...
show less
2026-09-01T06:56:21.649143-06:00 b146-63 sshd[860779]: pam_unix(sshd:auth): authentication failure; ...
show more2026-09-01T06:56:21.649143-06:00 b146-63 sshd[860779]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.46.28.140 user=root
2026-09-01T06:56:23.726485-06:00 b146-63 sshd[860779]: Failed password for invalid user root from 202.46.28.140 port 47796 ssh2
2026-09-01T07:03:10.999796-06:00 b146-63 sshd[860917]: User root from 202.46.28.140 not allowed because none of user's groups are listed in AllowGroups
...
show less