JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

5.202.248.104

Neutral Activity

Abuse Confidence Score

0% Low Risk

225 reports

133 reporters · latest 6 months ago

ISP: Pishgaman Toseeh Ertebatat Company (Private Joint Stock)
Usage Type: Fixed Line ISP
ASN: AS49100
Domain Name: pishgaman.net
Country: 🇮🇷 Iran (Islamic Republic of)
City: Tehran, Tehran

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

5.202.248.104 has been reported 225 times. The most recent report is from 6 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

225 from 133 distinct reporters

First reported

July 30th 2025

Most recent report

6 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 thetomtaylor.co.uk	2026-05-05 13:09:27 UTC · (6 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [mx01,mx03]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-09 05:07:01 UTC · (7 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [ice01,ice02,wa02]	Brute-Force SSH
🇬🇧 thetomtaylor.co.uk	2026-04-07 08:33:22 UTC · (7 months ago)	Fail2Ban - [SSH]Brute-force login attempts on sshd ... [wa01]	Brute-Force SSH
🇨🇳 ThreatBook.io	2025-09-05 00:21:22 UTC · (1 year ago)	ThreatBook Intelligence: Zombie,Dynamic IP more details on https://threatbook.io/ip/5.202.248.104	SSH
🇨🇭 NetEye	2025-09-04 05:21:44 UTC · (1 year ago)	SSH brute force login attempt	Brute-Force SSH
🇳🇱 bontekoe.technology	2025-09-04 05:15:42 UTC · (1 year ago)	5.202.248.104 banned on rtr - Threshold reached: 5 failures	SSH
🇺🇸 iwle	2025-09-04 04:51:33 UTC · (1 year ago)	2025-09-04T00:51:18.718552 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 2025-09-04T00:51:23.077516 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port ... show more 2025-09-04T00:51:18.718552 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 2025-09-04T00:51:23.077516 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 2025-09-04T00:51:25.674531 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 2025-09-04T00:51:29.612799 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 2025-09-04T00:51:31.864518 main.justuptowntowngames.com sshd[1540897]: Failed password for root from 5.202.248.104 port 34910 ssh2 ... show less	Brute-Force SSH
Anonymous	2025-09-04 04:33:17 UTC · (1 year ago)	Knocking on port 22 (endlessh)	SSH
🇺🇸 RAP	2025-09-04 03:34:12 UTC · (1 year ago)	2025-09-04 03:34:12 UTC Unauthorized activity to TCP port 22. SSH	SSH
🇩🇪 John Doe	2025-09-04 01:25:18 UTC · (1 year ago)	$f2bV_matches	Brute-Force SSH
🇭🇰 Paschen J Ki	2025-09-04 00:12:12 UTC · (1 year ago)	2025-09-04T08:11:58.555425+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T08:12:02.060996+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T0 ... show more 2025-09-04T08:11:58.555425+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T08:12:02.060996+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T08:12:05.091752+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T08:12:08.459156+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 2025-09-04T08:12:12.154795+08:00 rbm-BIDbKZig sshd[15024]: Failed password for root from 5.202.248.104 port 53516 ssh2 ... show less	Brute-Force SSH
🇺🇸 juguemosalacarioca.com	2025-09-03 22:44:07 UTC · (1 year ago)	(sshd) Failed SSH login from 5.202.248.104 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 22:43:47 instance-20200224-1146 sshd[378]: error: maximum authentication attempts exceeded for root from 5.202 ... show more (sshd) Failed SSH login from 5.202.248.104 (IR/Iran/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Sep 3 22:43:47 instance-20200224-1146 sshd[378]: error: maximum authentication attempts exceeded for root from 5.202.248.104 port 49846 ssh2 [preauth] Sep 3 22:43:51 instance-20200224-1146 sshd[384]: error: maximum authentication attempts exceeded for root from 5.202.248.104 port 50184 ssh2 [preauth] Sep 3 22:43:54 instance-20200224-1146 sshd[390]: error: maximum authentication attempts exceeded for root from 5.202.248.104 port 50430 ssh2 [preauth] Sep 3 22:43:59 instance-20200224-1146 sshd[399]: Invalid user admin from 5.202.248.104 port 50834 Sep 3 22:44:03 instance-20200224-1146 sshd[404]: Invalid user admin from 5.202.248.104 port 51086 show less	Port Scan
🇺🇸 yzfdude1	2025-09-03 22:37:41 UTC · (1 year ago)	Sep 3 16:37:35 b146-05 sshd[248639]: error: maximum authentication attempts exceeded for root from 5.202.248.104 port 41510 ssh2 [preauth] Sep 3 16:37:38 b146-05 sshd[248641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=s ... show more Sep 3 16:37:35 b146-05 sshd[248639]: error: maximum authentication attempts exceeded for root from 5.202.248.104 port 41510 ssh2 [preauth] Sep 3 16:37:38 b146-05 sshd[248641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.202.248.104 user=root Sep 3 16:37:40 b146-05 sshd[248641]: Failed password for root from 5.202.248.104 port 42870 ssh2 ... show less	Brute-Force SSH
🇹🇷 rtbh.com.tr	2025-09-03 20:08:35 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force
🇹🇷 rtbh.com.tr	2025-09-02 20:08:34 UTC · (1 year ago)	list.rtbh.com.tr report: tcp/0	Brute-Force

Showing 1 to 15 of 225 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 195.184.76.173

🇵🇰 182.189.92.41

🇸🇬 146.190.103.59

🇩🇪 104.165.18.128

🇺🇸 52.20.198.190

🇹🇷 213.153.174.18

🇹🇭 203.156.108.110

🇮🇩 182.11.33.23

🇧🇩 144.48.111.188

🇨🇳 111.9.22.102

🇺🇸 20.106.75.210

🇺🇸 152.163.242.146

🇳🇱 151.245.151.79

🇺🇸 147.185.132.150

🇬🇧 35.203.210.156

🇺🇸 34.70.185.6

🇮🇪 20.191.45.212

🇰🇷 218.157.163.203

🇺🇦 195.62.24.204

🇫🇷 167.86.102.159