This IP address has been reported a total of
14
times from
14 distinct
sources.
82.25.58.49 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 17/100 (low) ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 17/100 (low) | Phase: reconnaissance (pre-auth probing / scanning)
Failed auth: 16 (16 bad password, 0 invalid user) | 0 success | 32 total SSH log events | seen on 1 sensor(s)
Origin: The Netherlands (NL) | AS57043 HOSTKEY B.V. | 82.25.58.0/24
First seen: 2026-08-23 02:15:01 UTC | Last seen: 2026-08-23 02:18:29 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
2026-08-22T23:18:36.858767cowgrassland sshd[3448183]: Connection closed by authenticating user root ...
show more2026-08-22T23:18:36.858767cowgrassland sshd[3448183]: Connection closed by authenticating user root 82.25.58.49 port 44182 [preauth]
2026-08-22T23:18:50.742774cowgrassland sshd[3449127]: Connection closed by authenticating user root 82.25.58.49 port 47914 [preauth]
2026-08-22T23:19:03.108481cowgrassland sshd[3449357]: Connection closed by authenticating user root 82.25.58.49 port 60504 [preauth]
2026-08-22T23:19:15.549752cowgrassland sshd[3449461]: Connection closed by authenticating user root 82.25.58.49 port 45330 [preauth]
show less
Aug 22 23:06:38 backup sshd[2605126]: Failed password for root from 82.25.58.49 port 57094 ssh2
Aug ...
show moreAug 22 23:06:38 backup sshd[2605126]: Failed password for root from 82.25.58.49 port 57094 ssh2
Aug 22 23:06:51 backup sshd[2605128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.58.49 user=root
Aug 22 23:06:53 backup sshd[2605128]: Failed password for root from 82.25.58.49 port 34942 ssh2
Aug 22 23:07:06 backup sshd[2605131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.58.49 user=root
Aug 22 23:07:08 backup sshd[2605131]: Failed password for root from 82.25.58.49 port 41066 ssh2
...
show less
Blocked by UFW (TCP on 22)
Source port: 33038
TTL: 49
Packet length: 60
TOS: 0x08
This report (for ...
show moreBlocked by UFW (TCP on 22)
Source port: 33038
TTL: 49
Packet length: 60
TOS: 0x08
This report (for 82.25.58.49) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Aug 22 09:36:23 obsidian sshd[3136617]: Failed password for root from 82.25.58.49 port 40232 ssh2
Au ...
show moreAug 22 09:36:23 obsidian sshd[3136617]: Failed password for root from 82.25.58.49 port 40232 ssh2
Aug 22 09:36:45 obsidian sshd[3137095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.25.58.49 user=root
Aug 22 09:36:47 obsidian sshd[3137095]: Failed password for root from 82.25.58.49 port 46972 ssh2
...
show less
2026-08-22T05:47:30.537078+00:00 fra-mc-1 sshd[3866017]: Invalid user user from 82.25.58.49 port 451 ...
show more2026-08-22T05:47:30.537078+00:00 fra-mc-1 sshd[3866017]: Invalid user user from 82.25.58.49 port 45110
2026-08-22T05:47:44.205513+00:00 fra-mc-1 sshd[3871198]: Invalid user user from 82.25.58.49 port 44252
2026-08-22T05:47:57.561878+00:00 fra-mc-1 sshd[3876476]: Invalid user user from 82.25.58.49 port 53188
2026-08-22T05:48:12.329840+00:00 fra-mc-1 sshd[3882890]: Invalid user user from 82.25.58.49 port 59128
2026-08-22T05:48:25.783903+00:00 fra-mc-1 sshd[3888172]: Invalid user user from 82.25.58.49 port 54664
...
show less
2026-08-22T03:27:58.607048+00:00 kocer-main-webserver sshd[1643118]: Connection closed by authentica ...
show more2026-08-22T03:27:58.607048+00:00 kocer-main-webserver sshd[1643118]: Connection closed by authenticating user root 82.25.58.49 port 51876 [preauth]
2026-08-22T03:28:17.862164+00:00 kocer-main-webserver sshd[1643123]: Connection closed by authenticating user root 82.25.58.49 port 41664 [preauth]
2026-08-22T03:28:36.383001+00:00 kocer-main-webserver sshd[1643216]: Connection closed by authenticating user root 82.25.58.49 port 50634 [preauth]
...
show less
Aug 22 03:18:41 sanyalnet-oracle-vps2 sshd[3818892]: Failed none for invalid user root from 82.25.58 ...
show moreAug 22 03:18:41 sanyalnet-oracle-vps2 sshd[3818892]: Failed none for invalid user root from 82.25.58.49 port 33390 ssh2
Aug 22 03:18:46 sanyalnet-oracle-vps2 sshd[3818904]: Connection from 82.25.58.49 port 56064 on 10.0.0.93 port 22 rdomain ""
Aug 22 03:18:57 sanyalnet-oracle-vps2 sshd[3818904]: User root from 82.25.58.49 not allowed because not listed in AllowUsers
...
show less
Brute-Force
Showing 1 to
14
of 14 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩