This IP address has been reported a total of
21
times from
20 distinct
sources.
109.122.252.102 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Sep 3 06:32:06 pinkypie sshd[746172]: Failed password for root from 109.122.252.102 port 39928 ssh2 ...
show moreSep 3 06:32:06 pinkypie sshd[746172]: Failed password for root from 109.122.252.102 port 39928 ssh2
Sep 3 06:32:10 pinkypie sshd[746172]: Failed password for root from 109.122.252.102 port 39928 ssh2
Sep 3 06:32:14 pinkypie sshd[746172]: Failed password for root from 109.122.252.102 port 39928 ssh2
...
show less
2026-09-03T01:35:19.739183cv7877333.novalocal sshd[16342]: Failed password for root from 109.122.252 ...
show more2026-09-03T01:35:19.739183cv7877333.novalocal sshd[16342]: Failed password for root from 109.122.252.102 port 36152 ssh2
2026-09-03T01:35:22.351038cv7877333.novalocal sshd[16342]: Failed password for root from 109.122.252.102 port 36152 ssh2
2026-09-03T01:35:26.305399cv7877333.novalocal sshd[16342]: Failed password for root from 109.122.252.102 port 36152 ssh2
...
show less
2026-09-02T22:27:03.034054+00:00 sshd[113819]: Failed password for root from 109.122.252.102 port 3 ...
show more2026-09-02T22:27:03.034054+00:00 sshd[113819]: Failed password for root from 109.122.252.102 port 36230 ssh2
...
show less
2026-09-02T22:52:20.367809+02:00 kenny sshd[656398]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-09-02T22:52:20.367809+02:00 kenny sshd[656398]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.122.252.102 user=root
2026-09-02T22:52:21.986022+02:00 kenny sshd[656398]: Failed password for root from 109.122.252.102 port 40466 ssh2
2026-09-02T22:52:24.903920+02:00 kenny sshd[656398]: Failed password for root from 109.122.252.102 port 40466 ssh2
2026-09-02T22:52:28.940733+02:00 kenny sshd[656398]: Failed password for root from 109.122.252.102 port 40466 ssh2
...
show less
2026-09-01T20:56:05.693111+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.1 ...
show more2026-09-01T20:56:05.693111+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.122.252.102 port 56666 ssh2
2026-09-01T20:56:08.143691+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.122.252.102 port 56666 ssh2
2026-09-01T20:56:11.908610+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.122.252.102 port 56666 ssh2
2026-09-01T20:56:15.537421+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.122.252.102 port 56666 ssh2
2026-09-01T20:56:19.745203+00:00 bananapir4 sshd-session[36330]: Failed password for root from 109.122.252.102 port 56666 ssh2
...
show less
SSH brute force on port 22 -- 4 attempts, 1 successful. Credentials: root:123456. Active: 2026-09-01 ...
show moreSSH brute force on port 22 -- 4 attempts, 1 successful. Credentials: root:123456. Active: 2026-09-01T03:20 to 2026-09-01T03:20. Post-login: /usr/sbin/sshd -D -R; /usr/bin/env python3 /usr/local/bin/honeypot_pam.py; ausearch -i -k command --checkpoint /var/lib/honeypot/audit_. Malware: trojan (critical); miner (critical); botnet (high). Source: AS60631 Vandad Vira Hooman LLC (Tehran, IR). Data from SSH honeypot — not a production system.
show less
Brute-Force
SSH
IoT Targeted
Anonymous
2026-09-01T03:36:47.167487+00:00 arrow-ch2 sshd-session[35268]: Failed password for root from 109.12 ...
show more2026-09-01T03:36:47.167487+00:00 arrow-ch2 sshd-session[35268]: Failed password for root from 109.122.252.102 port 51286 ssh2
2026-09-01T03:36:49.590316+00:00 arrow-ch2 sshd-session[35268]: Failed password for root from 109.122.252.102 port 51286 ssh2
2026-09-01T03:36:51.754962+00:00 arrow-ch2 sshd-session[35268]: Failed password for root from 109.122.252.102 port 51286 ssh2
...
show less
2026-09-01T04:36:46.913166+01:00 naomi sshd[300377]: Failed password for root from 109.122.252.102 p ...
show more2026-09-01T04:36:46.913166+01:00 naomi sshd[300377]: Failed password for root from 109.122.252.102 port 57260 ssh2
2026-09-01T04:36:49.356926+01:00 naomi sshd[300377]: Failed password for root from 109.122.252.102 port 57260 ssh2
2026-09-01T04:36:52.232733+01:00 naomi sshd[300377]: Failed password for root from 109.122.252.102 port 57260 ssh2
...
show less
Brute-Force
SSH
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-08-31T20:57:52.410664+00:00 vps-00682d5f sshd[2843582]: Failed password for root from 109.122.2 ...
show more2026-08-31T20:57:52.410664+00:00 vps-00682d5f sshd[2843582]: Failed password for root from 109.122.252.102 port 34928 ssh2
2026-08-31T20:58:06.525198+00:00 vps-00682d5f sshd[2843582]: Disconnecting authenticating user root 109.122.252.102 port 34928: Change of username or service not allowed: (root,ssh-connection) -> (test,ssh-connection) [preauth]
2026-08-31T20:58:07.187984+00:00 vps-00682d5f sshd[2843589]: Invalid user test from 109.122.252.102 port 38038
...
show less
Multiple SSH login attempts from 109.122.252.102 targeting user(s): root | Server Managed by Focusni ...
show moreMultiple SSH login attempts from 109.122.252.102 targeting user(s): root | Server Managed by Focusnic
show less
Brute-Force
SSH
Showing 1 to
15
of 21 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩