This IP address has been reported a total of
107
times from
74 distinct
sources.
81.181.198.252 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
81.181.198.252 (RO/Romania/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more81.181.198.252 (RO/Romania/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 22 23:08:21 15518 sshd[24713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
May 22 23:24:38 15518 sshd[26568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.244.134 user=root
May 22 23:08:23 15518 sshd[24713]: Failed password for root from 81.181.198.252 port 36256 ssh2
May 22 22:58:15 15518 sshd[23552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.220.244.134 user=root
May 22 22:58:17 15518 sshd[23552]: Failed password for root from 171.220.244.134 port 48366 ssh2
IP Addresses Blocked:
show less
May 23 05:54:07 [host] sshd[12246]: Failed password for root from 81.181.198.252 port 48940 ssh2
May ...
show moreMay 23 05:54:07 [host] sshd[12246]: Failed password for root from 81.181.198.252 port 48940 ssh2
May 23 05:54:07 [host] sshd[12246]: Disconnected from authenticating user root 81.181.198.252 port 4
May 23 05:58:49 [host] sshd[12828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid
May 23 05:58:51 [host] sshd[12828]: Failed password for root from 81.181.198.252 port 47664 ssh2
May 23 05:58:51 [host] sshd[12828]: Disconnected from authenticating user root 81.181.198.252 port 4
show less
2026-05-22T23:18:08.181439-04:00 us-east.cbz.pw sshd[106306]: pam_unix(sshd:auth): authentication fa ...
show more2026-05-22T23:18:08.181439-04:00 us-east.cbz.pw sshd[106306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
2026-05-22T23:18:10.112807-04:00 us-east.cbz.pw sshd[106306]: Failed password for root from 81.181.198.252 port 32898 ssh2
2026-05-22T23:22:52.415452-04:00 us-east.cbz.pw sshd[106358]: Invalid user danny from 81.181.198.252 port 54448
2026-05-22T23:22:52.418977-04:00 us-east.cbz.pw sshd[106358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252
2026-05-22T23:22:54.340000-04:00 us-east.cbz.pw sshd[106358]: Failed password for invalid user danny from 81.181.198.252 port 54448 ssh2
...
show less
May 23 05:25:47 [host] sshd[9096]: Failed password for invalid user ubuntu from 81.181.198.252 port ...
show moreMay 23 05:25:47 [host] sshd[9096]: Failed password for invalid user ubuntu from 81.181.198.252 port
May 23 05:25:47 [host] sshd[9096]: Disconnected from invalid user ubuntu 81.181.198.252 port 42622 [
May 23 05:30:30 [host] sshd[9616]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=
May 23 05:30:33 [host] sshd[9616]: Failed password for root from 81.181.198.252 port 33186 ssh2
May 23 05:30:33 [host] sshd[9616]: Disconnected from authenticating user root 81.181.198.252 port 33
show less
May 23 03:02:41 host sshd[1744439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid ...
show moreMay 23 03:02:41 host sshd[1744439]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
May 23 03:02:43 host sshd[1744439]: Failed password for root from 81.181.198.252 port 44882 ssh2
May 23 03:07:24 host sshd[1745519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
May 23 03:07:26 host sshd[1745519]: Failed password for root from 81.181.198.252 port 48112 ssh2
May 23 03:12:07 host sshd[1746541]: Invalid user sonic from 81.181.198.252 port 52140
...
show less
2026-05-22T22:54:38.337843-04:00 us-east.cbz.pw sshd[105990]: pam_unix(sshd:auth): authentication fa ...
show more2026-05-22T22:54:38.337843-04:00 us-east.cbz.pw sshd[105990]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
2026-05-22T22:54:40.033579-04:00 us-east.cbz.pw sshd[105990]: Failed password for root from 81.181.198.252 port 60510 ssh2
2026-05-22T22:59:23.263243-04:00 us-east.cbz.pw sshd[106033]: Invalid user sonic from 81.181.198.252 port 55178
2026-05-22T22:59:23.266603-04:00 us-east.cbz.pw sshd[106033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252
2026-05-22T22:59:25.087694-04:00 us-east.cbz.pw sshd[106033]: Failed password for invalid user sonic from 81.181.198.252 port 55178 ssh2
...
show less
May 23 05:02:20 [host] sshd[6655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ...
show moreMay 23 05:02:20 [host] sshd[6655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=
May 23 05:02:23 [host] sshd[6655]: Failed password for root from 81.181.198.252 port 43906 ssh2
May 23 05:02:23 [host] sshd[6655]: Disconnected from authenticating user root 81.181.198.252 port 43
May 23 05:07:03 [host] sshd[7100]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=
May 23 05:07:05 [host] sshd[7100]: Failed password for root from 81.181.198.252 port 46294 ssh2
show less
SSH brute force on cp.vps.ezscale.tech (3 failures). Detected by fail2ban.
Brute-Force
SSH
Anonymous
May 23 03:57:20 conf sshd[3630290]: Invalid user user from 81.181.198.252 port 38730
May 23 03:57:20 ...
show moreMay 23 03:57:20 conf sshd[3630290]: Invalid user user from 81.181.198.252 port 38730
May 23 03:57:20 conf sshd[3630290]: Disconnected from invalid user user 81.181.198.252 port 38730 [preauth]
May 23 04:03:03 conf sshd[3631319]: Disconnected from authenticating user root 81.181.198.252 port 49264 [preauth]
...
show less
2026-05-23T02:55:26.429761+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3658584]: Failed password for in ...
show more2026-05-23T02:55:26.429761+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3658584]: Failed password for invalid user user from 81.181.198.252 port 59516 ssh2
2026-05-23T03:01:45.869907+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3659072]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
2026-05-23T03:01:48.381750+00:00 edge-tyo-con01.int.pdx.net.uk sshd[3659072]: Failed password for root from 81.181.198.252 port 54850 ssh2
...
show less
81.181.198.252 (RO/Romania/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; P ...
show more81.181.198.252 (RO/Romania/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: May 22 21:50:21 14048 sshd[11145]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.33.242.50 user=root
May 22 21:50:22 14048 sshd[11145]: Failed password for root from 117.33.242.50 port 55588 ssh2
May 22 22:01:07 14048 sshd[16496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.181.198.252 user=root
May 22 22:01:09 14048 sshd[16496]: Failed password for root from 81.181.198.252 port 40096 ssh2
May 22 22:01:36 14048 sshd[16501]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.227.75.197 user=root
IP Addresses Blocked:
117.33.242.50 (CN/China/-)
show less
Brute-Force
SSH
Anonymous
SSH brute force detected
...
Brute-Force
SSH
Showing 1 to
15
of 107 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩