Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
58.252.54.52 has been reported 44
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
2026-09-10T13:59:39.312264+00:00 rc01-hur-fmt01 sshd[2590593]: Invalid user ftpadmin from 58.252.54.52 port 1070
2026-09-10T14:00:31.259820+00:00 rc01-hur-fmt01 sshd[2590625]: Invalid user claude from 58.252.54.52 port 2490
2026-09-10T14:01:05.444992 ...
show more2026-09-10T13:59:39.312264+00:00 rc01-hur-fmt01 sshd[2590593]: Invalid user ftpadmin from 58.252.54.52 port 1070
2026-09-10T14:00:31.259820+00:00 rc01-hur-fmt01 sshd[2590625]: Invalid user claude from 58.252.54.52 port 2490
2026-09-10T14:01:05.444992+00:00 rc01-hur-fmt01 sshd[2590656]: Invalid user iptv from 58.252.54.52 port 2402
...
show less
2026-09-10T14:01:54.596143+02:00 router01.dreibaeumen.de sshd[3068122]: Disconnected from invalid user giulio 58.252.54.52 port 2895 [preauth]
2026-09-10T14:11:21.262897+02:00 router01.dreibaeumen.de sshd[3069569]: Connection closed by 58.252.54.52 p ...
show more2026-09-10T14:01:54.596143+02:00 router01.dreibaeumen.de sshd[3068122]: Disconnected from invalid user giulio 58.252.54.52 port 2895 [preauth]
2026-09-10T14:11:21.262897+02:00 router01.dreibaeumen.de sshd[3069569]: Connection closed by 58.252.54.52 port 2352 [preauth]
2026-09-10T14:12:06.365533+02:00 router01.dreibaeumen.de sshd[3069720]: Disconnected from authenticating user root 58.252.54.52 port 2240 [preauth]
2026-09-10T14:16:10.039880+02:00 router01.dreibaeumen.de sshd[3070322]: Invalid user jerry from 58.252.54.52 port 1376
2026-09-10T14:16:10.372083+02:00 router01.dreibaeumen.de sshd[3070322]: Disconnected from invalid user jerry 58.252.54.52 port 1376 [preauth]
show less
2026-09-10T01:31:23.228331+00:00 offbeat-record.ptr.network sshd[344663]: Failed password for invalid user ubuntu from 58.252.54.52 port 5048 ssh2
2026-09-10T01:41:24.741833+00:00 offbeat-record.ptr.network sshd[344695]: pam_unix(sshd:auth): authenti ...
show more2026-09-10T01:31:23.228331+00:00 offbeat-record.ptr.network sshd[344663]: Failed password for invalid user ubuntu from 58.252.54.52 port 5048 ssh2
2026-09-10T01:41:24.741833+00:00 offbeat-record.ptr.network sshd[344695]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.252.54.52 user=root
2026-09-10T01:41:26.557858+00:00 offbeat-record.ptr.network sshd[344695]: Failed password for root from 58.252.54.52 port 2578 ssh2
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
2026-09-09T21:42:56.475538+08:00 *hostname* sshd-session[3915945]: Invalid user pgadmin from 58.252.54.52 port 4374
2026-09-09T21:46:44.915470+08:00 *hostname* sshd-session[3915970]: Connection from 58.252.54.52 port 2285 on 10.66.0.230 port 22 rdoma ...
show more2026-09-09T21:42:56.475538+08:00 *hostname* sshd-session[3915945]: Invalid user pgadmin from 58.252.54.52 port 4374
2026-09-09T21:46:44.915470+08:00 *hostname* sshd-session[3915970]: Connection from 58.252.54.52 port 2285 on 10.66.0.230 port 22 rdomain ""
2026-09-09T21:46:45.057188+08:00 *hostname* sshd-session[3915970]: Invalid user weblogic from 58.252.54.52 port 2285
2026-09-09T21:49:25.222783+08:00 *hostname* sshd-session[3915985]: Connection from 58.252.54.52 port 2965 on 10.66.0.230 port 22 rdomain ""
2026-09-09T21:49:25.433304+08:00 *hostname* sshd-session[3915985]: Invalid user sysadmin from 58.252.54.52 port 2965
show less
2026-09-09T03:06:57.322086+02:00 gigacity.eu sshd[2294923]: Failed password for invalid user edu from 58.252.54.52 port 2298 ssh2
2026-09-09T03:07:21.883096+02:00 gigacity.eu sshd[2294974]: Invalid user dtl from 58.252.54.52 port 2640
2026-09-09T03:0 ...
show more2026-09-09T03:06:57.322086+02:00 gigacity.eu sshd[2294923]: Failed password for invalid user edu from 58.252.54.52 port 2298 ssh2
2026-09-09T03:07:21.883096+02:00 gigacity.eu sshd[2294974]: Invalid user dtl from 58.252.54.52 port 2640
2026-09-09T03:07:21.887052+02:00 gigacity.eu sshd[2294974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.252.54.52
2026-09-09T03:07:23.683985+02:00 gigacity.eu sshd[2294974]: Failed password for invalid user dtl from 58.252.54.52 port 2640 ssh2
...
show less
2026-09-09T06:26:50.376394 redacted sshd[220663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.252.54.52
2026-09-09T06:26:52.675777 redacted sshd[220663]: Failed password for invalid user sales1 from 58.2 ...
show more2026-09-09T06:26:50.376394 redacted sshd[220663]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.252.54.52
2026-09-09T06:26:52.675777 redacted sshd[220663]: Failed password for invalid user sales1 from 58.252.54.52 port 2116 ssh2
2026-09-09T06:27:10.082280 redacted sshd[220665]: User root from 58.252.54.52 not allowed because not listed in AllowUsers
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown