This IP address has been reported a total of
10
times from
6 distinct
sources.
192.245.121.228 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
192.245.121.228 (BO/Bolivia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; ...
show more192.245.121.228 (BO/Bolivia/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 29 19:03:35 14969 sshd[27507]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.245.121.228 user=root
Jun 29 19:03:36 14969 sshd[27507]: Failed password for root from 192.245.121.228 port 46944 ssh2
Jun 29 18:57:59 14969 sshd[24289]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.245.121.228 user=root
Jun 29 18:58:02 14969 sshd[24289]: Failed password for root from 192.245.121.228 port 50750 ssh2
Jun 29 18:24:34 14969 sshd[6308]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.79.120.189 user=root
IP Addresses Blocked:
show less
2026-06-30T01:11:11.833851+02:00 srv02 sshd[147895]: Invalid user ubuntu from 192.245.121.228 port 3 ...
show more2026-06-30T01:11:11.833851+02:00 srv02 sshd[147895]: Invalid user ubuntu from 192.245.121.228 port 38396
2026-06-30T01:15:29.250432+02:00 srv02 sshd[149681]: Invalid user dev from 192.245.121.228 port 50574
2026-06-30T01:21:59.556023+02:00 srv02 sshd[152343]: Invalid user ubuntu from 192.245.121.228 port 40538
...
show less
Jun 29 17:13:23 do1 sshd[2611631]: Disconnected from authenticating user root 192.245.121.228 port 4 ...
show moreJun 29 17:13:23 do1 sshd[2611631]: Disconnected from authenticating user root 192.245.121.228 port 47200 [preauth]
Jun 29 17:18:05 do1 sshd[2615567]: Disconnected from authenticating user root 192.245.121.228 port 39088 [preauth]
Jun 29 17:20:13 do1 sshd[2617917]: Disconnected from authenticating user root 192.245.121.228 port 45502 [preauth]
Jun 29 17:22:20 do1 sshd[2619077]: Invalid user adminer from 192.245.121.228 port 51946
Jun 29 17:22:20 do1 sshd[2619077]: Disconnected from invalid user adminer 192.245.121.228 port 51946 [preauth]
...
show less
2026-06-29T07:35:18.686071-06:00 yms sshd[2989492]: Disconnected from authenticating user root 192.2 ...
show more2026-06-29T07:35:18.686071-06:00 yms sshd[2989492]: Disconnected from authenticating user root 192.245.121.228 port 52786 [preauth]
2026-06-29T07:37:35.284109-06:00 yms sshd[3038784]: Disconnected from authenticating user root 192.245.121.228 port 60814 [preauth]
...
show less
2026-06-29T07:08:16.385008-06:00 yms sshd[2856912]: Disconnected from authenticating user root 192.2 ...
show more2026-06-29T07:08:16.385008-06:00 yms sshd[2856912]: Disconnected from authenticating user root 192.245.121.228 port 59490 [preauth]
2026-06-29T07:16:59.022002-06:00 yms sshd[2872763]: Disconnected from authenticating user root 192.245.121.228 port 45006 [preauth]
2026-06-29T07:19:10.934814-06:00 yms sshd[2876829]: Disconnected from authenticating user root 192.245.121.228 port 53036 [preauth]
...
show less
(sshd) Failed SSH login from 192.245.121.228 (BO/Bolivia/-): 5 in the last 3600 secs; Ports: *; Dire ...
show more(sshd) Failed SSH login from 192.245.121.228 (BO/Bolivia/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 29 06:11:07 15851 sshd[17348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.245.121.228 user=root
Jun 29 06:11:09 15851 sshd[17348]: Failed password for root from 192.245.121.228 port 58464 ssh2
Jun 29 06:17:26 15851 sshd[21095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.245.121.228 user=root
Jun 29 06:17:28 15851 sshd[21095]: Failed password for root from 192.245.121.228 port 59834 ssh2
Jun 29 06:19:37 15851 sshd[22367]: Invalid user user1 from 192.245.121.228 port 40210
show less
Brute-Force
SSH
Showing 1 to
10
of 10 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ