This IP address has been reported a total of
1,069
times from
491 distinct
sources.
192.252.215.125 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-06-02T02:44:13.172447+02:00 r00tbase-TX150-S8 sshd-session[3701897]: Invalid user user from 192 ...
show more2026-06-02T02:44:13.172447+02:00 r00tbase-TX150-S8 sshd-session[3701897]: Invalid user user from 192.252.215.125 port 47512
2026-06-02T02:44:18.713215+02:00 r00tbase-TX150-S8 sshd-session[3702175]: Invalid user user from 192.252.215.125 port 51734
2026-06-02T02:44:25.003469+02:00 r00tbase-TX150-S8 sshd-session[3702394]: Invalid user user from 192.252.215.125 port 51740
2026-06-02T02:44:30.407172+02:00 r00tbase-TX150-S8 sshd-session[3702607]: Invalid user user from 192.252.215.125 port 38178
2026-06-02T02:44:36.249383+02:00 r00tbase-TX150-S8 sshd-session[3702790]: Invalid user user from 192.252.215.125 port 56066
2026-06-02T02:44:40.556301+02:00 r00tbase-TX150-S8 sshd-session[3702967]: Invalid user user from 192.252.215.125 port 56072
2026-06-02T02:44:46.898839+02:00 r00tbase-TX150-S8 sshd-session[3703199]: Invalid user user from 192.252.215.125 port 34488
2026-06-02T02:44:52.705519+02:00 r00tbase-TX150-S8 sshd-session[3703548]: Invalid user user from 192.252.215.125 port 34492
2026-06-
...
show less
2026-06-01T20:59:36.698688+02:00 mail.srvfarm.net sshd-session[771647]: Connection closed by authent ...
show more2026-06-01T20:59:36.698688+02:00 mail.srvfarm.net sshd-session[771647]: Connection closed by authenticating user root 192.252.215.125 port 55088 [preauth]
2026-06-01T20:59:49.961808+02:00 mail.srvfarm.net sshd-session[771680]: Connection closed by authenticating user root 192.252.215.125 port 37038 [preauth]
2026-06-01T20:59:54.500052+02:00 mail.srvfarm.net sshd-session[771685]: Connection closed by authenticating user root 192.252.215.125 port 37052 [preauth]
2026-06-01T21:00:00.224462+02:00 mail.srvfarm.net sshd-session[771694]: Connection closed by authenticating user root 192.252.215.125 port 46200 [preauth]
2026-06-01T21:00:13.362273+02:00 mail.srvfarm.net sshd-session[772378]: Connection closed by authenticating user root 192.252.215.125 port 53306 [preauth]
show less
Brute-Force
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
2026-06-01T03:14:32.426717-04:00 main-nyc3 sshd[1475911]: Invalid user user from 192.252.215.125 por ...
show more2026-06-01T03:14:32.426717-04:00 main-nyc3 sshd[1475911]: Invalid user user from 192.252.215.125 port 48028
2026-06-01T03:14:37.532844-04:00 main-nyc3 sshd[1475913]: Invalid user user from 192.252.215.125 port 51882
2026-06-01T03:14:41.941869-04:00 main-nyc3 sshd[1475915]: Invalid user user from 192.252.215.125 port 51888
2026-06-01T03:14:48.736208-04:00 main-nyc3 sshd[1475917]: Invalid user user from 192.252.215.125 port 40752
2026-06-01T03:14:54.634632-04:00 main-nyc3 sshd[1475919]: Invalid user user from 192.252.215.125 port 44204
...
show less