This IP address has been reported a total of
194
times from
130 distinct
sources.
165.22.52.238 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-03T02:29:34.515085+02:00 root260 sshd-session[3732941]: pam_unix(sshd:auth): authentication ...
show more2026-06-03T02:29:34.515085+02:00 root260 sshd-session[3732941]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238 user=root
2026-06-03T02:29:36.828784+02:00 root260 sshd-session[3732941]: Failed password for root from 165.22.52.238 port 42166 ssh2
2026-06-03T02:32:29.156160+02:00 root260 sshd-session[3780889]: Invalid user information from 165.22.52.238 port 45054
2026-06-03T02:32:29.157742+02:00 root260 sshd-session[3780889]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238
2026-06-03T02:32:31.624497+02:00 root260 sshd-session[3780889]: Failed password for invalid user information from 165.22.52.238 port 45054 ssh2
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T00:12:38Z and 2026-06-0 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-03T00:12:38Z and 2026-06-03T00:14:36Z
show less
Lines containing failures of 165.22.52.238
Nov 7 05:20:06 node83 sshd[12107]: pam_unix(sshd:auth): ...
show moreLines containing failures of 165.22.52.238
Nov 7 05:20:06 node83 sshd[12107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238 user=r.r
Nov 7 05:20:08 node83 sshd[12107]: Failed password for r.r from 165.22.52.238 port 35094 ssh2
Nov 7 05:20:08 node83 sshd[12107]: Received disconnect from 165.22.52.238 port 35094:11: Bye Bye [preauth]
Nov 7 05:20:08 node83 sshd[12107]: Disconnected from authenticating user r.r 165.22.52.238 port 35094 [preauth]
Nov 7 05:27:16 node83 sshd[13035]: AD user ai from 165.22.52.238 port 53502
Nov 7 05:27:16 node83 sshd[13035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238
Nov 7 05:27:19 node83 sshd[13035]: Failed password for AD user ai from 165.22.52.238 port 53502 ssh2
Nov 7 05:27:19 node83 sshd[13035]: Received disconnect from 165.22.52.238 port 53502:11: Bye Bye [preauth]
Nov 7 05:27:19 node83 sshd[13035]: Disconnected from........
------------------------------
show less
Lines containing failures of 165.22.52.238
Nov 7 05:20:06 node83 sshd[12107]: pam_unix(sshd:auth): ...
show moreLines containing failures of 165.22.52.238
Nov 7 05:20:06 node83 sshd[12107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238 user=r.r
Nov 7 05:20:08 node83 sshd[12107]: Failed password for r.r from 165.22.52.238 port 35094 ssh2
Nov 7 05:20:08 node83 sshd[12107]: Received disconnect from 165.22.52.238 port 35094:11: Bye Bye [preauth]
Nov 7 05:20:08 node83 sshd[12107]: Disconnected from authenticating user r.r 165.22.52.238 port 35094 [preauth]
Nov 7 05:27:16 node83 sshd[13035]: AD user ai from 165.22.52.238 port 53502
Nov 7 05:27:16 node83 sshd[13035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238
Nov 7 05:27:19 node83 sshd[13035]: Failed password for AD user ai from 165.22.52.238 port 53502 ssh2
Nov 7 05:27:19 node83 sshd[13035]: Received disconnect from 165.22.52.238 port 53502:11: Bye Bye [preauth]
Nov 7 05:27:19 node83 sshd[13035]: Disconnected from........
------------------------------
show less
Nov 7 16:31:26 vps-e0685356 sshd[137429]: Failed password for invalid user demo from 165.22.52.238 ...
show moreNov 7 16:31:26 vps-e0685356 sshd[137429]: Failed password for invalid user demo from 165.22.52.238 port 50716 ssh2
Nov 7 16:35:06 vps-e0685356 sshd[137463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.52.238 user=root
Nov 7 16:35:08 vps-e0685356 sshd[137463]: Failed password for root from 165.22.52.238 port 57766 ssh2
...
show less
Brute-Force
SSH
Showing 151 to
165
of 194 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩