This IP address has been reported a total of
81
times from
66 distinct
sources.
49.212.152.153 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 14
reports;
United States of America
with 12
reports;
France
with 7
reports.
The most common categories in these recent reports were:
SSH
78
times;
Brute-Force
74
times;
Port Scan
4
times;
Web App Attack
2
times;
Bad Web Bot
2
times;
Other
3
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-15T17:44:13.106793-06:00 b146-19 sshd[3775107]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-15T17:44:13.106793-06:00 b146-19 sshd[3775107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.152.153 user=root
2026-10-15T17:44:15.435550-06:00 b146-19 sshd[3775107]: Failed password for invalid user root from 49.212.152.153 port 57504 ssh2
2026-10-15T17:52:41.446833-06:00 b146-19 sshd[3775274]: User root from 49.212.152.153 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-10-15T19:06:17.296453-04:00 fiveohm sshd-session[3559]: Invalid user stephen from 49.212.152.15 ...
show more2026-10-15T19:06:17.296453-04:00 fiveohm sshd-session[3559]: Invalid user stephen from 49.212.152.153 port 41774
2026-10-15T19:08:43.310602-04:00 fiveohm sshd-session[3561]: Connection from 49.212.152.153 port 42104 on 10.0.0.172 port 22 rdomain ""
2026-10-15T19:08:44.218963-04:00 fiveohm sshd-session[3561]: User root from 49.212.152.153 not allowed because not listed in AllowUsers
...
show less
2026-10-15T16:54:52.429503-06:00 ramon sshd[1740067]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-10-15T16:54:52.429503-06:00 ramon sshd[1740067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.152.153
2026-10-15T16:54:52.472486-06:00 ramon sshd[1740067]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.152.153 user=pagano
2026-10-15T16:54:53.974760-06:00 ramon sshd[1740067]: Failed password for invalid user pagano from 49.212.152.153 port 48294 ssh2
...
show less
2026-10-16T00:52:47.515831+02:00 h2970155 sshd[12187]: User root from 49.212.152.153 not allowed bec ...
show more2026-10-16T00:52:47.515831+02:00 h2970155 sshd[12187]: User root from 49.212.152.153 not allowed because not listed in AllowUsers
...
show less
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Oct 16 00:00:27 host sshd[2736593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreOct 16 00:00:27 host sshd[2736593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.152.153
Oct 16 00:00:29 host sshd[2736593]: Failed password for invalid user john from 49.212.152.153 port 46456 ssh2
Oct 16 00:02:51 host sshd[2737785]: Invalid user debian from 49.212.152.153 port 58366
Oct 16 00:02:51 host sshd[2737785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.212.152.153
Oct 16 00:02:54 host sshd[2737785]: Failed password for invalid user debian from 49.212.152.153 port 58366 ssh2
...
show less
2026-10-15T23:05:34.281813+02:00 epyc02 sshd-session[3167901]: Connection from 49.212.152.153 port 5 ...
show more2026-10-15T23:05:34.281813+02:00 epyc02 sshd-session[3167901]: Connection from 49.212.152.153 port 59398 on 5.231.248.233 port 22 rdomain ""
2026-10-15T23:05:35.654766+02:00 epyc02 sshd-session[3167901]: Invalid user tp from 49.212.152.153 port 59398
2026-10-15T23:15:18.826659+02:00 epyc02 sshd-session[3175650]: Connection from 49.212.152.153 port 43842 on 5.231.248.233 port 22 rdomain ""
2026-10-15T23:15:20.134195+02:00 epyc02 sshd-session[3175650]: Invalid user ben from 49.212.152.153 port 43842
...
show less
Brute-Force
SSH
Anonymous
2026-10-15T21:58:22.739146+02:00 dasec-proxy-ssh sshd[972956]: Invalid user nexus from 49.212.152.15 ...
show more2026-10-15T21:58:22.739146+02:00 dasec-proxy-ssh sshd[972956]: Invalid user nexus from 49.212.152.153 port 43730
2026-10-15T21:58:22.995803+02:00 dasec-proxy-ssh sshd[972956]: Disconnected from invalid user nexus 49.212.152.153 port 43730 [preauth]
2026-10-15T22:04:29.397648+02:00 dasec-proxy-ssh sshd[972970]: Disconnected from authenticating user root 49.212.152.153 port 36028 [preauth]
2026-10-15T22:12:34.201489+02:00 dasec-proxy-ssh sshd[973002]: Invalid user donald from 49.212.152.153 port 57220
2026-10-15T22:12:34.457395+02:00 dasec-proxy-ssh sshd[973002]: Disconnected from invalid user donald 49.212.152.153 port 57220 [preauth]
2026-10-15T22:17:33.205546+02:00 dasec-proxy-ssh sshd[973029]: Invalid user marmot from 49.212.152.153 port 46256
2026-10-15T22:17:33.471819+02:00 dasec-proxy-ssh sshd[973029]: Disconnected from invalid user marmot 49.212.152.153 port 46256 [preauth]
2026-10-15T22:20:00.526181+02:00 dasec-proxy-ssh sshd[973036]: Disconnected from authenticating user root 4
...
show less
2026-10-15T20:02:48.405621+00:00 stn5122 sshd[4264]: Invalid user nexus from 49.212.152.153 port 345 ...
show more2026-10-15T20:02:48.405621+00:00 stn5122 sshd[4264]: Invalid user nexus from 49.212.152.153 port 34530
2026-10-15T20:13:45.634097+00:00 stn5122 sshd[5633]: Invalid user donald from 49.212.152.153 port 48196
2026-10-15T20:16:20.210448+00:00 stn5122 sshd[5942]: Invalid user testuser from 49.212.152.153 port 43470
...
show less
Brute-Force
SSH
Anonymous
Oct 15 15:55:54 localhost sshd[2726]: Invalid user nexus from 49.212.152.153
Oct 15 16:09:08 localho ...
show moreOct 15 15:55:54 localhost sshd[2726]: Invalid user nexus from 49.212.152.153
Oct 15 16:09:08 localhost sshd[3980]: Invalid user auser from 49.212.152.153
Oct 15 16:14:22 localhost sshd[4466]: Invalid user testuser from 49.212.152.153
show less
