This IP address has been reported a total of
61
times from
28 distinct
sources.
212.192.252.57 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 27 08:39:13 vm53 sshd[460064]: Connection from 212.192.252.57 port 56480 on 139.162.43.234 port ...
show moreJul 27 08:39:13 vm53 sshd[460064]: Connection from 212.192.252.57 port 56480 on 139.162.43.234 port 22 rdomain ""
Jul 27 08:39:14 vm53 sshd[460064]: Connection closed by authenticating user root 212.192.252.57 port 56480 [preauth]
Jul 27 08:45:52 vm53 sshd[460406]: Connection from 212.192.252.57 port 65001 on 139.162.43.234 port 22 rdomain ""
Jul 27 08:45:53 vm53 sshd[460406]: Connection closed by authenticating user root 212.192.252.57 port 65001 [preauth]
Jul 27 08:52:33 vm53 sshd[460701]: Connection from 212.192.252.57 port 63122 on 139.162.43.234 port 22 rdomain ""
Jul 27 08:52:34 vm53 sshd[460701]: Connection closed by authenticating user root 212.192.252.57 port 63122 [preauth]
...
show less
2026-07-27T02:18:06.615299+02:00 hosting15 sshd[706623]: Failed password for root from 212.192.252.5 ...
show more2026-07-27T02:18:06.615299+02:00 hosting15 sshd[706623]: Failed password for root from 212.192.252.57 port 64547 ssh2
2026-07-27T02:24:34.705916+02:00 hosting15 sshd[708414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.192.252.57 user=root
2026-07-27T02:24:36.295313+02:00 hosting15 sshd[708414]: Failed password for root from 212.192.252.57 port 60970 ssh2
...
show less
SSH brute-force detected: 9 failed login attempts in the last 1 hour.
Brute-Force
SSH
Anonymous
2026-07-26T23:58:33.634730+00:00 srv-190789 sshd-session[38731]: Failed password for root from 212.1 ...
show more2026-07-26T23:58:33.634730+00:00 srv-190789 sshd-session[38731]: Failed password for root from 212.192.252.57 port 53312 ssh2
2026-07-27T00:05:08.182839+00:00 srv-190789 sshd-session[38769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.192.252.57 user=root
2026-07-27T00:05:09.703290+00:00 srv-190789 sshd-session[38769]: Failed password for root from 212.192.252.57 port 59606 ssh2
...
show less
(PERMBLOCK) 212.192.252.57 (TR/Tรผrkiye/Bursa Province/Bursa/hosted.pdservers.net/[redacted]) has had ...
show more(PERMBLOCK) 212.192.252.57 (TR/Tรผrkiye/Bursa Province/Bursa/hosted.pdservers.net/[redacted]) has had more than 4 temp blocks
show less
2026-07-26T23:25:20.724371+00:00 s10925611 sshd[230959]: User root from 212.192.252.57 not allowed b ...
show more2026-07-26T23:25:20.724371+00:00 s10925611 sshd[230959]: User root from 212.192.252.57 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
Jul 27 07:01:50 vm53 sshd[455064]: Connection from 212.192.252.57 port 53103 on 139.162.43.234 port ...
show moreJul 27 07:01:50 vm53 sshd[455064]: Connection from 212.192.252.57 port 53103 on 139.162.43.234 port 22 rdomain ""
Jul 27 07:01:51 vm53 sshd[455064]: Connection closed by authenticating user root 212.192.252.57 port 53103 [preauth]
Jul 27 07:08:15 vm53 sshd[455427]: Connection from 212.192.252.57 port 53006 on 139.162.43.234 port 22 rdomain ""
Jul 27 07:08:16 vm53 sshd[455427]: Connection closed by authenticating user root 212.192.252.57 port 53006 [preauth]
Jul 27 07:14:39 vm53 sshd[455497]: Connection from 212.192.252.57 port 50840 on 139.162.43.234 port 22 rdomain ""
Jul 27 07:14:40 vm53 sshd[455497]: Connection closed by authenticating user root 212.192.252.57 port 50840 [preauth]
...
show less
2026-07-26T22:41:21.205956+00:00 srv-190789 sshd-session[38440]: Failed password for root from 212.1 ...
show more2026-07-26T22:41:21.205956+00:00 srv-190789 sshd-session[38440]: Failed password for root from 212.192.252.57 port 58526 ssh2
2026-07-26T22:47:45.325584+00:00 srv-190789 sshd-session[38498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.192.252.57 user=root
2026-07-26T22:47:46.776298+00:00 srv-190789 sshd-session[38498]: Failed password for root from 212.192.252.57 port 61408 ssh2
...
show less
Jul 26 19:39:13 proxy-03 sshd[3115157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ...
show moreJul 26 19:39:13 proxy-03 sshd[3115157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.192.252.57 user=root
Jul 26 19:39:15 proxy-03 sshd[3115157]: Failed password for root from 212.192.252.57 port 58084 ssh2
...
show less
Brute-Force
SSH
Anonymous
2026-07-27T00:03:00.357297+02:00 hosting15 sshd[659036]: Failed password for root from 212.192.252.5 ...
show more2026-07-27T00:03:00.357297+02:00 hosting15 sshd[659036]: Failed password for root from 212.192.252.57 port 57208 ssh2
2026-07-27T00:09:19.037033+02:00 hosting15 sshd[661482]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.192.252.57 user=root
2026-07-27T00:09:20.914618+02:00 hosting15 sshd[661482]: Failed password for root from 212.192.252.57 port 60258 ssh2
...
show less
Brute-Force
SSH
Anonymous
Jul 27 05:26:41 vm53 sshd[451820]: Connection from 212.192.252.57 port 64102 on 139.162.43.234 port ...
show moreJul 27 05:26:41 vm53 sshd[451820]: Connection from 212.192.252.57 port 64102 on 139.162.43.234 port 22 rdomain ""
Jul 27 05:26:42 vm53 sshd[451820]: Connection closed by authenticating user root 212.192.252.57 port 64102 [preauth]
Jul 27 05:32:38 vm53 sshd[452030]: Connection from 212.192.252.57 port 64842 on 139.162.43.234 port 22 rdomain ""
Jul 27 05:32:39 vm53 sshd[452030]: Connection closed by authenticating user root 212.192.252.57 port 64842 [preauth]
Jul 27 05:38:57 vm53 sshd[452138]: Connection from 212.192.252.57 port 61611 on 139.162.43.234 port 22 rdomain ""
Jul 27 05:38:58 vm53 sshd[452138]: Connection closed by authenticating user root 212.192.252.57 port 61611 [preauth]
...
show less
Brute-Force
SSH
Showing 1 to
15
of 61 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ