This IP address has been reported a total of
21
times from
16 distinct
sources.
204.48.29.202 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-10-18T22:38:20.632906+00:00 NexNode sshd[410479]: Invalid user odoo12 from 204.48.29.202 port 5 ...
show more2026-10-18T22:38:20.632906+00:00 NexNode sshd[410479]: Invalid user odoo12 from 204.48.29.202 port 58018
2026-10-18T22:40:13.800290+00:00 NexNode sshd[412841]: Invalid user db2das from 204.48.29.202 port 51230
2026-10-18T22:41:12.614199+00:00 NexNode sshd[413357]: Invalid user user from 204.48.29.202 port 55714
2026-10-18T22:44:49.908000+00:00 NexNode sshd[418152]: Invalid user trx from 204.48.29.202 port 47232
2026-10-18T22:49:25.924664+00:00 NexNode sshd[424313]: Invalid user tecnica from 204.48.29.202 port 53570
...
show less
2026-10-18T16:11:14.618066-06:00 coyote sshd[2230236]: pam_sss(sshd:auth): authentication failure; l ...
show more2026-10-18T16:11:14.618066-06:00 coyote sshd[2230236]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.29.202 user=jeff
2026-10-18T16:11:16.694813-06:00 coyote sshd[2230236]: Failed password for invalid user jeff from 204.48.29.202 port 38106 ssh2
2026-10-18T16:14:25.140623-06:00 coyote sshd[2230291]: User root from 204.48.29.202 not allowed because none of user's groups are listed in AllowGroups
...
show less
Failed password for jeff from 204.48.29.202 port 34362 ssh2
Disconnected from jeff 204.48.29.202 por ...
show moreFailed password for jeff from 204.48.29.202 port 34362 ssh2
Disconnected from jeff 204.48.29.202 port 34362 [preauth]
Failed password for root from 204.48.29.202 port 46840 ssh2
Disconnected from authenticating user root 204.48.29.202 port 46840 [preauth]
show less
2026-10-07T03:37:44.322144+02:00 ns3006402 sshd[2654053]: Failed password for root from 204.48.29.20 ...
show more2026-10-07T03:37:44.322144+02:00 ns3006402 sshd[2654053]: Failed password for root from 204.48.29.202 port 36144 ssh2
2026-10-07T03:37:59.478687+02:00 ns3006402 sshd[2654090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.29.202 user=root
2026-10-07T03:38:01.630946+02:00 ns3006402 sshd[2654090]: Failed password for root from 204.48.29.202 port 55986 ssh2
...
show less
(sshd) Failed SSH login from 204.48.29.202 (US/United States/-): 5 in the last 3600 secs; Ports: *; ...
show more(sshd) Failed SSH login from 204.48.29.202 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 3 23:05:29 15649 sshd[31621]: Invalid user web from 204.48.29.202 port 58328
Jun 3 23:05:31 15649 sshd[31621]: Failed password for invalid user web from 204.48.29.202 port 58328 ssh2
Jun 3 23:13:43 15649 sshd[3396]: Invalid user eder from 204.48.29.202 port 36782
Jun 3 23:13:45 15649 sshd[3396]: Failed password for invalid user eder from 204.48.29.202 port 36782 ssh2
Jun 3 23:15:48 15649 sshd[4502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.29.202 user=root
show less
2026-06-04T06:10:34.909938+02:00 milkyway sshd[2415815]: pam_unix(sshd:auth): authentication failure ...
show more2026-06-04T06:10:34.909938+02:00 milkyway sshd[2415815]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.29.202
2026-06-04T06:10:37.315877+02:00 milkyway sshd[2415815]: Failed password for invalid user web from 204.48.29.202 port 57606 ssh2
2026-06-04T06:14:32.844045+02:00 milkyway sshd[2416203]: Invalid user eder from 204.48.29.202 port 39822
...
show less
Jun 4 05:25:43 kronos sshd-session[803672]: Invalid user tw from 204.48.29.202 port 54492
Jun 4 05 ...
show moreJun 4 05:25:43 kronos sshd-session[803672]: Invalid user tw from 204.48.29.202 port 54492
Jun 4 05:28:01 kronos sshd-session[804453]: Invalid user share from 204.48.29.202 port 35532
Jun 4 05:30:21 kronos sshd-session[805206]: Invalid user halo from 204.48.29.202 port 33780
...
show less
2026-06-04T05:25:02.933857+02:00 git-lab-runner02 sshd-session[4153268]: Failed password for invalid ...
show more2026-06-04T05:25:02.933857+02:00 git-lab-runner02 sshd-session[4153268]: Failed password for invalid user tw from 204.48.29.202 port 55980 ssh2
2026-06-04T05:27:19.408508+02:00 git-lab-runner02 sshd-session[4154100]: Invalid user share from 204.48.29.202 port 42144
2026-06-04T05:27:19.413550+02:00 git-lab-runner02 sshd-session[4154100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.29.202
2026-06-04T05:27:21.449998+02:00 git-lab-runner02 sshd-session[4154100]: Failed password for invalid user share from 204.48.29.202 port 42144 ssh2
2026-06-04T05:29:38.626504+02:00 git-lab-runner02 sshd-session[4155002]: Invalid user halo from 204.48.29.202 port 48228
...
show less
Brute-Force
SSH
Showing 1 to
15
of 21 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩