This IP address has been reported a total of
69
times from
54 distinct
sources.
202.3.72.114 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Repeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed ...
show moreRepeated SSH brute force and user enumeration attempts against a secured web server. Multiple failed authentication attempts from this IP across an extended period.
show less
2026-06-30T23:38:56.400677-03:00 salada-de-fruta sshd[3391931]: Disconnected from authenticating use ...
show more2026-06-30T23:38:56.400677-03:00 salada-de-fruta sshd[3391931]: Disconnected from authenticating user root 202.3.72.114 port 22334 [preauth]
...
show less
Fail2Ban report from jail 'sshd': 2026-07-01T02:19:52.977666+02:00 mail sshd[6172]: Invalid user dem ...
show moreFail2Ban report from jail 'sshd': 2026-07-01T02:19:52.977666+02:00 mail sshd[6172]: Invalid user demo from 202.3.72.114 port 12924
...
show less
202.3.72.114 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports ...
show more202.3.72.114 (IN/India/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jul 1 08:08:34 syd2 sshd[135733]: Failed password for root from 85.192.71.77 port 37236 ssh2
Jul 1 08:12:58 syd2 sshd[136600]: Failed password for root from 184.174.37.3 port 35398 ssh2
Jul 1 08:58:21 syd2 sshd[143606]: Failed password for root from 173.249.52.138 port 47330 ssh2
Jul 1 08:07:37 syd2 sshd[135576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.3.72.114 user=root
Jul 1 08:07:40 syd2 sshd[135576]: Failed password for root from 202.3.72.114 port 13544 ssh2
IP Addresses Blocked:
85.192.71.77 (ES/Spain/iesperebarnils.xtec.cat)
184.174.37.3 (DE/Germany/vmi3149030.contaboserver.net)
173.249.52.138 (DE/Germany/vmi3373769.contaboserver.net)
show less
Jun 30 21:57:08 rcloud sshd[1050216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJun 30 21:57:08 rcloud sshd[1050216]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.3.72.114
Jun 30 21:57:10 rcloud sshd[1050216]: Failed password for invalid user admin from 202.3.72.114 port 10996 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 69 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ