This IP address has been reported a total of
31
times from
27 distinct
sources.
191.252.178.42 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
191.252.178.42 (BR/Brazil/vps66067.publiccloud.com.br), 2 distributed sshd attacks on account [ubunt ...
show more191.252.178.42 (BR/Brazil/vps66067.publiccloud.com.br), 2 distributed sshd attacks on account [ubuntu] in the last 900 secs
show less
SSH Brute force: 1 attempts were recorded from 191.252.178.42
2026-07-09T06:45:31+02:00 Invalid user ...
show moreSSH Brute force: 1 attempts were recorded from 191.252.178.42
2026-07-09T06:45:31+02:00 Invalid user ubuntu from 191.252.178.42 port 43404
show less
Brute-Force
SSH
Anonymous
191.252.178.42 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ...
show more191.252.178.42 (BR/Brazil/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 8 12:37:55 server5 sshd[18197]: Failed password for root from 43.242.203.160 port 36236 ssh2
Jul 8 12:44:05 server5 sshd[20909]: Failed password for root from 67.205.177.48 port 52662 ssh2
Jul 8 12:42:30 server5 sshd[20440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.224.97.244 user=root
Jul 8 12:42:32 server5 sshd[20440]: Failed password for root from 45.224.97.244 port 34006 ssh2
Jul 8 12:45:50 server5 sshd[23190]: Failed password for root from 191.252.178.42 port 33558 ssh2
IP Addresses Blocked:
43.242.203.160 (HK/Hong Kong/-)
67.205.177.48 (US/United States/-)
45.224.97.244 (EC/Ecuador/-)
show less
Jul 6 08:30:57 vmi1858823 sshd[2363588]: Invalid user oracle from 191.252.178.42 port 58698
Jul 6 ...
show moreJul 6 08:30:57 vmi1858823 sshd[2363588]: Invalid user oracle from 191.252.178.42 port 58698
Jul 6 08:30:59 vmi1858823 sshd[2363588]: Failed password for invalid user oracle from 191.252.178.42 port 58698 ssh2
...
show less
SSH Brute force: 1 attempts were recorded from 191.252.178.42
2026-07-04T14:26:26+02:00 Disconnected ...
show moreSSH Brute force: 1 attempts were recorded from 191.252.178.42
2026-07-04T14:26:26+02:00 Disconnected from authenticating user root 191.252.178.42 port 42534 [preauth]
show less
Jul 3 21:10:11 setebos sshd[176092]: Invalid user ng from 191.252.178.42 port 60158
Jul 3 21:10:11 ...
show moreJul 3 21:10:11 setebos sshd[176092]: Invalid user ng from 191.252.178.42 port 60158
Jul 3 21:10:11 setebos sshd[176092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.178.42
Jul 3 21:10:13 setebos sshd[176092]: Failed password for invalid user ng from 191.252.178.42 port 60158 ssh2
Jul 3 21:24:52 setebos sshd[176423]: Invalid user mailc from 191.252.178.42 port 41510
...
show less
Jul 3 18:19:30 v4bgp sshd[1567723]: Failed password for invalid user ec2-user from 191.252.178.42 p ...
show moreJul 3 18:19:30 v4bgp sshd[1567723]: Failed password for invalid user ec2-user from 191.252.178.42 port 36282 ssh2
Jul 3 18:42:16 v4bgp sshd[1568444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.178.42 user=root
Jul 3 18:42:18 v4bgp sshd[1568444]: Failed password for root from 191.252.178.42 port 47034 ssh2
...
show less
SSH Brute force: 2 attempts were recorded from 191.252.178.42
2026-06-29T01:06:32+02:00 Disconnected ...
show moreSSH Brute force: 2 attempts were recorded from 191.252.178.42
2026-06-29T01:06:32+02:00 Disconnected from authenticating user root 191.252.178.42 port 59150 [preauth]
2026-06-29T01:16:02+02:00 Disconnected from authenticating user root 191.252.178.42 port 36438 [preauth]
show less
SSH Brute force: 2 attempts were recorded from 191.252.178.42
2026-06-27T13:42:06+02:00 Invalid user ...
show moreSSH Brute force: 2 attempts were recorded from 191.252.178.42
2026-06-27T13:42:06+02:00 Invalid user admin from 191.252.178.42 port 53092
2026-06-27T13:49:58+02:00 Invalid user dima from 191.252.178.42 port 48346
show less
Brute-Force
SSH
Showing 1 to
15
of 31 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩