This IP address has been reported a total of
69
times from
34 distinct
sources.
5.252.154.164 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Multiple SSH login attempts from 5.252.154.164 targeting user(s): root,user1 | Server Managed by Foc ...
show moreMultiple SSH login attempts from 5.252.154.164 targeting user(s): root,user1 | Server Managed by Focusnic
show less
Multiple SSH login attempts from 5.252.154.164 targeting user(s): nutanix,username | Server Managed ...
show moreMultiple SSH login attempts from 5.252.154.164 targeting user(s): nutanix,username | Server Managed by Focusnic
show less
5.252.154.164 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more5.252.154.164 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 3s. Total bytes sent by tarpit: 266B. Report generated by Endlessh Report Generator v1.2.3
show less
Multiple SSH login attempts from 5.252.154.164 targeting user(s): admin2,adminuser | Server Managed ...
show moreMultiple SSH login attempts from 5.252.154.164 targeting user(s): admin2,adminuser | Server Managed by Focusnic
show less
2026-07-30T12:18:05.108825+09:00 *** sshd-session[2495374]: Invalid user admin2 from 5.252.154.164 ...
show more2026-07-30T12:18:05.108825+09:00 *** sshd-session[2495374]: Invalid user admin2 from 5.252.154.164 port 44624
2026-07-30T12:18:05.526138+09:00 *** sshd-session[2495374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.154.164
2026-07-30T12:18:07.757715+09:00 *** sshd-session[2495374]: Failed password for invalid user admin2 from 5.252.154.164 port 44624 ssh2
show less
Automated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credent ...
show moreAutomated report by DataDream Sentinel.
Repeated SSH authentication failures consistent with credential brute-force activity were detected against infrastructure monitored by DataDream.
20 failed-authentication event references were correlated between 2026-07-30 02:21:21 and 02:30:37 UTC.
No successful SSH authentication was observed in the available telemetry.
Reference: DD-AIPDB-20260730-1BA1335D
show less
Brute-Force
SSH
Anonymous
$f2bV_matches
Brute-Force
SSH
Anonymous
2026-07-29T22:19:51.909399+02:00 hosting15 sshd[2192634]: Invalid user admin2 from 5.252.154.164 por ...
show more2026-07-29T22:19:51.909399+02:00 hosting15 sshd[2192634]: Invalid user admin2 from 5.252.154.164 port 40700
2026-07-29T22:19:52.206405+02:00 hosting15 sshd[2192634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.154.164
2026-07-29T22:19:53.862349+02:00 hosting15 sshd[2192634]: Failed password for invalid user admin2 from 5.252.154.164 port 40700 ssh2
...
show less
The dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
. ...
show moreThe dark side is strong with this IP, but our firewall is stronger. You are going down, young one.
...
show less
2026-07-29T06:46:15.508315-03:00 vps69191 sshd-session[137707]: pam_unix(sshd:auth): authentication ...
show more2026-07-29T06:46:15.508315-03:00 vps69191 sshd-session[137707]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.252.154.164
2026-07-29T06:46:17.685627-03:00 vps69191 sshd-session[137707]: Failed password for invalid user oscar from 5.252.154.164 port 55970 ssh2
2026-07-29T06:47:08.121367-03:00 vps69191 sshd-session[137709]: Invalid user gitlab from 5.252.154.164 port 56138
...
show less
Brute-Force
SSH
Showing 1 to
15
of 69 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩