This IP address has been reported a total of
1,326
times from
518 distinct
sources.
208.109.52.213 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 208.109.52.213 (US/United States/213.52.109.208.host.secureserver.net): ...
show more(sshd) Failed SSH login from 208.109.52.213 (US/United States/213.52.109.208.host.secureserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 20 07:37:07 14725 sshd[25040]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.52.213 user=root
Jun 20 07:37:09 14725 sshd[25040]: Failed password for root from 208.109.52.213 port 45212 ssh2
Jun 20 07:50:17 14725 sshd[30188]: Invalid user vhserver3 from 208.109.52.213 port 36702
Jun 20 07:50:19 14725 sshd[30188]: Failed password for invalid user vhserver3 from 208.109.52.213 port 36702 ssh2
Jun 20 07:51:59 14725 sshd[30704]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.52.213 user=root
show less
2026-06-20T11:37:05.157764+00:00 kotia sshd-session[652786]: Invalid user frappe from 208.109.52.213 ...
show more2026-06-20T11:37:05.157764+00:00 kotia sshd-session[652786]: Invalid user frappe from 208.109.52.213 port 42652
...
show less
Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-20T10:20:52Z and 2026-06-2 ...
show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2026-06-20T10:20:52Z and 2026-06-20T10:23:05Z
show less
(sshd) Failed SSH login from 208.109.52.213 (US/United States/213.52.109.208.host.secureserver.net): ...
show more(sshd) Failed SSH login from 208.109.52.213 (US/United States/213.52.109.208.host.secureserver.net): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 20 05:13:28 15216 sshd[26488]: Invalid user morgan from 208.109.52.213 port 33456
Jun 20 05:13:31 15216 sshd[26488]: Failed password for invalid user morgan from 208.109.52.213 port 33456 ssh2
Jun 20 05:20:05 15216 sshd[27726]: Invalid user admin from 208.109.52.213 port 46958
Jun 20 05:20:08 15216 sshd[27726]: Failed password for invalid user admin from 208.109.52.213 port 46958 ssh2
Jun 20 05:22:21 15216 sshd[28092]: Invalid user ftpuser2 from 208.109.52.213 port 58396
show less
Brute-Force
SSH
Anonymous
2026-06-20T09:08:32.637206+00:00 de-fra2-ntp1 sshd[1803541]: Invalid user tsserver from 208.109.52.2 ...
show more2026-06-20T09:08:32.637206+00:00 de-fra2-ntp1 sshd[1803541]: Invalid user tsserver from 208.109.52.213 port 55734
2026-06-20T09:19:54.228517+00:00 de-fra2-ntp1 sshd[1803838]: Invalid user user from 208.109.52.213 port 44152
2026-06-20T09:23:10.843998+00:00 de-fra2-ntp1 sshd[1803844]: Invalid user tester from 208.109.52.213 port 35708
...
show less
2026-06-20T09:18:26.686066+00:00 vps1.gnome.moe sshd-session[1529622]: pam_unix(sshd:auth): authenti ...
show more2026-06-20T09:18:26.686066+00:00 vps1.gnome.moe sshd-session[1529622]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.52.213 user=root
2026-06-20T09:18:28.162521+00:00 vps1.gnome.moe sshd-session[1529622]: Failed password for root from 208.109.52.213 port 34030 ssh2
2026-06-20T09:20:10.659467+00:00 vps1.gnome.moe sshd-session[1530441]: Invalid user user from 208.109.52.213 port 46490
2026-06-20T09:20:10.664309+00:00 vps1.gnome.moe sshd-session[1530441]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=208.109.52.213
2026-06-20T09:20:12.529284+00:00 vps1.gnome.moe sshd-session[1530441]: Failed password for invalid user user from 208.109.52.213 port 46490 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 1326 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩