This IP address has been reported a total of
201
times from
141 distinct
sources.
38.252.213.122 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-29T19:48:29.307217+02:00 webmail sshd[1611076]: Invalid user photos from 38.252.213.122 port ...
show more2026-06-29T19:48:29.307217+02:00 webmail sshd[1611076]: Invalid user photos from 38.252.213.122 port 48372
...
show less
2026-06-29T19:22:22.559297+02:00 router01.hotel-kniep.com sshd-session[1541410]: Invalid user umc fr ...
show more2026-06-29T19:22:22.559297+02:00 router01.hotel-kniep.com sshd-session[1541410]: Invalid user umc from 38.252.213.122 port 48804
2026-06-29T19:22:22.752498+02:00 router01.hotel-kniep.com sshd-session[1541410]: Disconnected from invalid user umc 38.252.213.122 port 48804 [preauth]
2026-06-29T19:31:26.484790+02:00 router01.hotel-kniep.com sshd-session[1543811]: Invalid user profkom from 38.252.213.122 port 38692
2026-06-29T19:31:26.678464+02:00 router01.hotel-kniep.com sshd-session[1543811]: Disconnected from invalid user profkom 38.252.213.122 port 38692 [preauth]
2026-06-29T19:33:43.742628+02:00 router01.hotel-kniep.com sshd-session[1544361]: Invalid user phone from 38.252.213.122 port 51714
show less
2026-06-29T19:29:06.876558+02:00 webmail sshd[1606366]: Invalid user umc from 38.252.213.122 port 50 ...
show more2026-06-29T19:29:06.876558+02:00 webmail sshd[1606366]: Invalid user umc from 38.252.213.122 port 50066
2026-06-29T19:32:35.043011+02:00 webmail sshd[1607198]: Invalid user profkom from 38.252.213.122 port 49156
...
show less
Jun 29 10:51:33 b146-72 sshd[70743]: Invalid user user from 38.252.213.122 port 59062
Jun 29 10:51:3 ...
show moreJun 29 10:51:33 b146-72 sshd[70743]: Invalid user user from 38.252.213.122 port 59062
Jun 29 10:51:33 b146-72 sshd[70743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.252.213.122
Jun 29 10:51:35 b146-72 sshd[70743]: Failed password for invalid user user from 38.252.213.122 port 59062 ssh2
...
show less
Jun 29 16:15:06 mk-bgp sshd[752993]: Invalid user admin from 38.252.213.122 port 48400
Jun 29 16:24: ...
show moreJun 29 16:15:06 mk-bgp sshd[752993]: Invalid user admin from 38.252.213.122 port 48400
Jun 29 16:24:09 mk-bgp sshd[753049]: Invalid user test from 38.252.213.122 port 41136
Jun 29 16:26:06 mk-bgp sshd[753063]: Invalid user testuser from 38.252.213.122 port 59946
Jun 29 16:28:01 mk-bgp sshd[753073]: Invalid user ftpuser from 38.252.213.122 port 44170
Jun 29 16:29:47 mk-bgp sshd[753088]: Invalid user jenkins from 38.252.213.122 port 40034
...
show less
38.252.213.122 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 s ...
show more38.252.213.122 (US/United States/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 29 11:24:31 server5 sshd[9201]: Failed password for root from 172.174.72.225 port 38822 ssh2
Jun 29 11:24:34 server5 sshd[9208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.252.213.122 user=root
Jun 29 11:24:29 server5 sshd[9201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.174.72.225 user=root
Jun 29 11:23:49 server5 sshd[9098]: Failed password for root from 51.75.194.44 port 41552 ssh2
Jun 29 11:23:13 server5 sshd[9016]: Failed password for root from 72.240.125.133 port 50342 ssh2
IP Addresses Blocked:
172.174.72.225 (DE/Germany/-)
show less
Jun 29 06:44:23 <server> sshd[67624]: Invalid user stp from 38.252.213.122 port 58990
Jun 29 06:56:2 ...
show moreJun 29 06:44:23 <server> sshd[67624]: Invalid user stp from 38.252.213.122 port 58990
Jun 29 06:56:21 <server> sshd[68700]: Invalid user gtc from 38.252.213.122 port 36654
Jun 29 06:58:15 <server> sshd[68730]: Invalid user fleet from 38.252.213.122 port 52962
Jun 29 07:00:11 <server> sshd[68752]: Invalid user madrid from 38.252.21
show less
Jun 29 07:09:44 brown sshd[51070]: Failed password for root from 38.252.213.122 port 45534 ssh2
Jun ...
show moreJun 29 07:09:44 brown sshd[51070]: Failed password for root from 38.252.213.122 port 45534 ssh2
Jun 29 07:12:34 brown sshd[51145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=38.252.213.122 user=root
Jun 29 07:12:36 brown sshd[51145]: Failed password for root from 38.252.213.122 port 52278 ssh2
...
show less
Brute-Force
SSH
Anonymous
Large amount of failed SSH access attempts (brute-force)
Brute-Force
SSH
Anonymous
2026-06-29T12:34:57.058956+00:00 de-fra2-srt1 sshd[1591143]: Invalid user elasticsearch from 38.252. ...
show more2026-06-29T12:34:57.058956+00:00 de-fra2-srt1 sshd[1591143]: Invalid user elasticsearch from 38.252.213.122 port 39582
2026-06-29T12:45:42.472791+00:00 de-fra2-srt1 sshd[1591268]: Invalid user ftp1 from 38.252.213.122 port 49828
2026-06-29T12:51:18.630967+00:00 de-fra2-srt1 sshd[1591577]: Invalid user esuser from 38.252.213.122 port 54618
...
show less
Brute-Force
SSH
Showing 1 to
15
of 201 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩