Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-05T21:34:55.126597+00:00 debian-4gb-hel1-2 sshd[1095212]: Invalid user vas from 191.252.205.12 port 54304
2026-11-05T21:34:55.128727+00:00 debian-4gb-hel1-2 sshd[1095212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty ...
show more2026-11-05T21:34:55.126597+00:00 debian-4gb-hel1-2 sshd[1095212]: Invalid user vas from 191.252.205.12 port 54304
2026-11-05T21:34:55.128727+00:00 debian-4gb-hel1-2 sshd[1095212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.205.12
2026-11-05T21:34:57.606486+00:00 debian-4gb-hel1-2 sshd[1095212]: Failed password for invalid user vas from 191.252.205.12 port 54304 ssh2
2026-11-05T21:35:51.209301+00:00 debian-4gb-hel1-2 sshd[1100082]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.205.12 user=root
2026-11-05T21:35:53.706603+00:00 debian-4gb-hel1-2 sshd[1100082]: Failed password for root from 191.252.205.12 port 33832 ssh2
...
show less
2026-11-05T14:55:02.862499+03:30 digitalogic sshd-session[3350920]: Failed password for root from 191.252.205.12 port 39002 ssh2
2026-11-05T14:55:04.602442+03:30 digitalogic sshd-session[3350920]: Disconnected from authenticating user root 191.252.20 ...
show more2026-11-05T14:55:02.862499+03:30 digitalogic sshd-session[3350920]: Failed password for root from 191.252.205.12 port 39002 ssh2
2026-11-05T14:55:04.602442+03:30 digitalogic sshd-session[3350920]: Disconnected from authenticating user root 191.252.205.12 port 39002 [preauth]
2026-11-05T14:58:17.951753+03:30 digitalogic sshd-session[3354524]: Invalid user tyr from 191.252.205.12 port 44600
...
show less
Brute-Force
SSH
Anonymous
Nov 5 09:38:49 dcd-gentoo-vm sshd-session[378032]: Invalid user ansible from 191.252.205.12 port 39584
Nov 5 09:39:47 dcd-gentoo-vm sshd-session[378059]: Invalid user ubuntu from 191.252.205.12 port 45722
Nov 5 09:40:43 dcd-gentoo-vm sshd-session[ ...
show moreNov 5 09:38:49 dcd-gentoo-vm sshd-session[378032]: Invalid user ansible from 191.252.205.12 port 39584
Nov 5 09:39:47 dcd-gentoo-vm sshd-session[378059]: Invalid user ubuntu from 191.252.205.12 port 45722
Nov 5 09:40:43 dcd-gentoo-vm sshd-session[378091]: Invalid user adminuser from 191.252.205.12 port 48746
...
show less
2026-11-04T11:10:49.671429+01:00 adycoaduanas sshd[2402445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.205.12 user=root
2026-11-04T11:10:52.366405+01:00 adycoaduanas sshd[2402445]: Failed passwor ...
show more2026-11-04T11:10:49.671429+01:00 adycoaduanas sshd[2402445]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.205.12 user=root
2026-11-04T11:10:52.366405+01:00 adycoaduanas sshd[2402445]: Failed password for invalid user root from 191.252.205.12 port 59120 ssh2
2026-11-04T12:16:43.704984+01:00 adycoaduanas sshd[3260558]: User root from 191.252.205.12 not allowed because not listed in AllowUsers
...
show less
2026-11-04T09:55:33.062593+00:00 abhweb sshd-session[3312975]: Failed password for root from 191.252.205.12 port 60724 ssh2
2026-11-04T09:56:23.773532+00:00 abhweb sshd-session[3313072]: Invalid user pp from 191.252.205.12 port 53862
2026-11-04T09:56 ...
show more2026-11-04T09:55:33.062593+00:00 abhweb sshd-session[3312975]: Failed password for root from 191.252.205.12 port 60724 ssh2
2026-11-04T09:56:23.773532+00:00 abhweb sshd-session[3313072]: Invalid user pp from 191.252.205.12 port 53862
2026-11-04T09:56:23.787038+00:00 abhweb sshd-session[3313072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.252.205.12
2026-11-04T09:56:26.286728+00:00 abhweb sshd-session[3313072]: Failed password for invalid user pp from 191.252.205.12 port 53862 ssh2
2026-11-04T09:57:19.362109+00:00 abhweb sshd-session[3313167]: Invalid user mohamed from 191.252.205.12 port 54382
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown