This IP address has been reported a total of
118
times from
64 distinct
sources.
167.99.40.252 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Blocked by UFW (TCP on 1133)
Source port: 61007
TTL: 237
Packet length: 44
TOS: 0x08
This report (f ...
show moreBlocked by UFW (TCP on 1133)
Source port: 61007
TTL: 237
Packet length: 44
TOS: 0x08
This report (for 167.99.40.252) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Oct 30 12:47:55 [host] sshd[1271]: Failed password for invalid user dspace from 167.99.40.252 port 4 ...
show moreOct 30 12:47:55 [host] sshd[1271]: Failed password for invalid user dspace from 167.99.40.252 port 4
Oct 30 12:47:55 [host] sshd[1271]: Connection closed by invalid user dspace 167.99.40.252 port 45782
Oct 30 12:48:27 [host] sshd[1311]: Invalid user dspace from 167.99.40.252 port 58090
Oct 30 12:48:27 [host] sshd[1311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=
Oct 30 12:48:28 [host] sshd[1311]: Failed password for invalid user dspace from 167.99.40.252 port 5
show less
Oct 30 12:43:08 h2930838 sshd[17726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreOct 30 12:43:08 h2930838 sshd[17726]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.40.252
Oct 30 12:43:10 h2930838 sshd[17726]: Failed password for invalid user docker from 167.99.40.252 port 49638 ssh2
show less
2025-10-30T11:38:27.244258 octo sshd[1583619]: Invalid user docker from 167.99.40.252 port 48248
202 ...
show more2025-10-30T11:38:27.244258 octo sshd[1583619]: Invalid user docker from 167.99.40.252 port 48248
2025-10-30T11:39:00.072297 octo sshd[1583659]: Invalid user docker from 167.99.40.252 port 34904
2025-10-30T11:39:33.102599 octo sshd[1583730]: Invalid user docker from 167.99.40.252 port 56134
2025-10-30T11:40:06.819793 octo sshd[1583792]: Invalid user docker from 167.99.40.252 port 39532
2025-10-30T11:40:41.897090 octo sshd[1583826]: Invalid user docker from 167.99.40.252 port 36316
...
show less
Oct 30 07:35:40 thebatforge sshd[653433]: Invalid user developer from 167.99.40.252 port 51264
Oct 3 ...
show moreOct 30 07:35:40 thebatforge sshd[653433]: Invalid user developer from 167.99.40.252 port 51264
Oct 30 07:36:15 thebatforge sshd[653468]: Invalid user docker from 167.99.40.252 port 44560
Oct 30 07:36:50 thebatforge sshd[653502]: Invalid user docker from 167.99.40.252 port 34360
Oct 30 07:37:23 thebatforge sshd[653530]: Invalid user docker from 167.99.40.252 port 60486
Oct 30 07:37:56 thebatforge sshd[653560]: Invalid user docker from 167.99.40.252 port 42312
...
show less
Oct 30 12:31:49 [host] sshd[32180]: Failed password for invalid user developer from 167.99.40.252 po ...
show moreOct 30 12:31:49 [host] sshd[32180]: Failed password for invalid user developer from 167.99.40.252 po
Oct 30 12:31:49 [host] sshd[32180]: Connection closed by invalid user developer 167.99.40.252 port 4
Oct 30 12:32:23 [host] sshd[32264]: Invalid user developer from 167.99.40.252 port 32864
Oct 30 12:32:23 [host] sshd[32264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid
Oct 30 12:32:25 [host] sshd[32264]: Failed password for invalid user developer from 167.99.40.252 po
show less
Oct 30 12:22:52 h2930838 sshd[17593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreOct 30 12:22:52 h2930838 sshd[17593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.40.252
Oct 30 12:22:54 h2930838 sshd[17593]: Failed password for invalid user dev from 167.99.40.252 port 50838 ssh2
show less
Oct 30 12:15:47 [host] sshd[30806]: Failed password for invalid user debian from 167.99.40.252 port ...
show moreOct 30 12:15:47 [host] sshd[30806]: Failed password for invalid user debian from 167.99.40.252 port
Oct 30 12:15:47 [host] sshd[30806]: Connection closed by invalid user debian 167.99.40.252 port 3426
Oct 30 12:16:22 [host] sshd[30845]: Invalid user debian from 167.99.40.252 port 35172
Oct 30 12:16:22 [host] sshd[30845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid
Oct 30 12:16:25 [host] sshd[30845]: Failed password for invalid user debian from 167.99.40.252 port
show less
2025-10-30T11:13:06.234741 octo sshd[1581861]: Invalid user debian from 167.99.40.252 port 47200
202 ...
show more2025-10-30T11:13:06.234741 octo sshd[1581861]: Invalid user debian from 167.99.40.252 port 47200
2025-10-30T11:13:43.200768 octo sshd[1581880]: Invalid user debian from 167.99.40.252 port 41054
2025-10-30T11:14:19.748839 octo sshd[1581936]: Invalid user debian from 167.99.40.252 port 33890
2025-10-30T11:14:54.652055 octo sshd[1581996]: Invalid user debian from 167.99.40.252 port 52152
2025-10-30T11:15:32.249795 octo sshd[1582014]: Invalid user debian from 167.99.40.252 port 54512
...
show less
Oct 30 07:09:53 thebatforge sshd[649457]: User daemon from 167.99.40.252 not allowed because not lis ...
show moreOct 30 07:09:53 thebatforge sshd[649457]: User daemon from 167.99.40.252 not allowed because not listed in AllowUsers
Oct 30 07:10:36 thebatforge sshd[649920]: User daemon from 167.99.40.252 not allowed because not listed in AllowUsers
Oct 30 07:11:16 thebatforge sshd[649949]: User daemon from 167.99.40.252 not allowed because not listed in AllowUsers
Oct 30 07:11:53 thebatforge sshd[649983]: User daemon from 167.99.40.252 not allowed because not listed in AllowUsers
Oct 30 07:12:32 thebatforge sshd[650016]: User daemon from 167.99.40.252 not allowed because not listed in AllowUsers
...
show less
Oct 30 12:02:37 h2930838 sshd[17419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreOct 30 12:02:37 h2930838 sshd[17419]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.40.252 user=backup
Oct 30 12:02:39 h2930838 sshd[17419]: Failed password for invalid user backup from 167.99.40.252 port 39298 ssh2
show less
Brute-Force
SSH
Showing 16 to
30
of 118 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ