This IP address has been reported a total of
19
times from
17 distinct
sources.
212.9.227.249 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 9
reports;
Canada
with 4
reports;
Poland
with 2
reports.
The most common categories in these recent reports were:
SSH
18
times;
Brute-Force
18
times;
Exploited Host
1
time.
Old Reports
The most recent abuse report for this IP address is from
. It is possible that this IP is no
longer involved in abusive activities.
Oct 1 18:52:01 servidor sshd[3665840]: Failed password for root from 212.9.227.249 port 55330 ssh2
...
show moreOct 1 18:52:01 servidor sshd[3665840]: Failed password for root from 212.9.227.249 port 55330 ssh2
Oct 1 18:52:01 servidor sshd[3665840]: Connection closed by authenticating user root 212.9.227.249 port 55330 [preauth]
Oct 1 19:19:37 servidor sshd[3668472]: Connection closed by 212.9.227.249 port 58804 [preauth]
...
show less
Oct 2 03:51:23 h2930838 sshd[17589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreOct 2 03:51:23 h2930838 sshd[17589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.9.227.249 user=root
Oct 2 03:51:26 h2930838 sshd[17589]: Failed password for invalid user root from 212.9.227.249 port 49606 ssh2
show less
2026-10-01 23:42:19,888 fail2ban.actions [3901805]: NOTICE [sshd] Ban 212.9.227.249
2026-10- ...
show more2026-10-01 23:42:19,888 fail2ban.actions [3901805]: NOTICE [sshd] Ban 212.9.227.249
2026-10-02 00:09:09,725 fail2ban.actions [3901805]: NOTICE [sshd] Ban 212.9.227.249
...
show less
2026-10-01T23:56:54.795462+02:00 30p87-server sshd-session[4053408]: Unable to negotiate with 212.9. ...
show more2026-10-01T23:56:54.795462+02:00 30p87-server sshd-session[4053408]: Unable to negotiate with 212.9.227.249 port 59302: no matching key exchange method found. Their offer: curve25519-sha256,[email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha256,diffie-hellman-group16-sha512,diffie-hellman-group14-sha1,ext-info-c,[email protected] [preauth]
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
2026-10-01T22:39:31.547973+02:00 canterlot.jotoma.de sshd[839100]: Connection closed by authenticati ...
show more2026-10-01T22:39:31.547973+02:00 canterlot.jotoma.de sshd[839100]: Connection closed by authenticating user root 212.9.227.249 port 58430 [preauth]
2026-10-01T23:00:16.554962+02:00 canterlot.jotoma.de sshd[858586]: Connection closed by authenticating user root 212.9.227.249 port 39268 [preauth]
2026-10-01T23:27:05.291528+02:00 canterlot.jotoma.de sshd[884894]: Connection closed by authenticating user root 212.9.227.249 port 59416 [preauth]
...
show less
