Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
167.99.36.252 has been reported 96
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
60 attempts since 22.12.2025 04:32:03 CET - last one: 2025-12-22T05:12:58.587391+01:00 alpha sshd-session[416479]: Connection closed by invalid user oracle 167.99.36.252 port 47548 [preauth]
38 attempts since 22.12.2025 04:32:03 CET - last one: 2025-12-22T05:00:10.380606+01:00 alpha sshd-session[416236]: Connection closed by invalid user test 167.99.36.252 port 57952 [preauth]
Dec 22 04:51:37 plesk sshd[3982325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.36.252
Dec 22 04:51:39 plesk sshd[3982325]: Failed password for invalid user admin from 167.99.36.252 port 41158 ssh2
...
show moreDec 22 04:51:37 plesk sshd[3982325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.36.252
Dec 22 04:51:39 plesk sshd[3982325]: Failed password for invalid user admin from 167.99.36.252 port 41158 ssh2
Dec 22 04:52:19 plesk sshd[3982508]: Invalid user admin from 167.99.36.252 port 37346
Dec 22 04:52:19 plesk sshd[3982508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.36.252
Dec 22 04:52:20 plesk sshd[3982508]: Failed password for invalid user admin from 167.99.36.252 port 37346 ssh2
...
show less
2025-12-22T04:31:59.340326+01:00 zg0iiuob sshd-session[725699]: Connection closed by authenticating user root 167.99.36.252 port 37232 [preauth]
2025-12-22T04:33:04.572317+01:00 zg0iiuob sshd-session[725705]: Connection closed by authenticating user ...
show more2025-12-22T04:31:59.340326+01:00 zg0iiuob sshd-session[725699]: Connection closed by authenticating user root 167.99.36.252 port 37232 [preauth]
2025-12-22T04:33:04.572317+01:00 zg0iiuob sshd-session[725705]: Connection closed by authenticating user root 167.99.36.252 port 33204 [preauth]
2025-12-22T04:34:10.670068+01:00 zg0iiuob sshd-session[725708]: Connection closed by authenticating user root 167.99.36.252 port 50248 [preauth]
2025-12-22T04:35:15.377876+01:00 zg0iiuob sshd-session[725712]: Connection closed by authenticating user root 167.99.36.252 port 60158 [preauth]
2025-12-22T04:36:17.259610+01:00 zg0iiuob sshd-session[725731]: Connection closed by authenticating user root 167.99.36.252 port 53970 [preauth]
...
show less
2025-12-22T03:33:46.393882+00:00 melon sshd[1520285]: User root from 167.99.36.252 not allowed because none of user's groups are listed in AllowGroups
2025-12-22T03:34:48.996549+00:00 melon sshd[1521989]: Connection from 167.99.36.252 port 38194 on 6 ...
show more2025-12-22T03:33:46.393882+00:00 melon sshd[1520285]: User root from 167.99.36.252 not allowed because none of user's groups are listed in AllowGroups
2025-12-22T03:34:48.996549+00:00 melon sshd[1521989]: Connection from 167.99.36.252 port 38194 on 65.108.201.187 port 22 rdomain ""
2025-12-22T03:34:50.579877+00:00 melon sshd[1521989]: User root from 167.99.36.252 not allowed because none of user's groups are listed in AllowGroups
2025-12-22T03:35:52.296109+00:00 melon sshd[1523377]: Connection from 167.99.36.252 port 50956 on 65.108.201.187 port 22 rdomain ""
2025-12-22T03:35:52.979167+00:00 melon sshd[1523377]: User root from 167.99.36.252 not allowed because none of user's groups are listed in AllowGroups
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown