JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

1.94.170.244

Neutral Activity

Abuse Confidence Score

0% Low Risk

101 reports

43 reporters · latest 11 months ago

ISP: Beijing Teletron Telecom Engineering Co., Ltd.
Usage Type: Data Center/Web Hosting/Transit
ASN: AS55990
Domain Name: drpeng.com.cn
Country: 🇨🇳 China
City: Shanghai, Shanghai

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

1.94.170.244 has been reported 101 times. The most recent report is from 11 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

101 from 43 distinct reporters

First reported

November 28th 2025

Most recent report

11 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 BSG Webmaster	2025-12-06 08:30:05 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 10s. Total bytes sent by tarpit: 0B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇩🇪 SiyCah	2025-12-05 07:00:05 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 507B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-12-04 08:30:05 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 10s. Total bytes sent by tarpit: 0B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇩🇪 SiyCah	2025-12-04 07:00:05 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 507B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇺🇸 BSG Webmaster	2025-12-03 08:30:04 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 10s. Total bytes sent by tarpit: 0B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇺🇸 anon333	2025-12-02 14:33:03 UTC · (11 months ago)	Hacker syslog review 1764685982	Hacking
Anonymous	2025-12-02 10:23:30 UTC · (11 months ago)	SSH BruteForce attack 2	SSH
🇬🇧 Birdo	2025-12-02 09:58:28 UTC · (11 months ago)	[Birdo SSH Honeypot] SSH login attempt	Port Scan Hacking Brute-Force Exploited Host SSH
🇺🇸 bigscoots.com	2025-12-02 09:10:44 UTC · (11 months ago)	1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 08:31:59 24022 sshd[31126]: Failed password for root f ... show more 1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 08:31:59 24022 sshd[31126]: Failed password for root from 101.126.88.203 port 33868 ssh2 Dec 2 09:10:36 24022 sshd[1918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.170.244 user=root Dec 2 09:10:38 24022 sshd[1918]: Failed password for root from 1.94.170.244 port 42846 ssh2 Dec 2 08:39:08 24022 sshd[31789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.190.39.222 user=root Dec 2 08:39:10 24022 sshd[31789]: Failed password for root from 115.190.39.222 port 41186 ssh2 IP Addresses Blocked: 101.126.88.203 (CN/China/-) show less	Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-02 08:14:30 UTC · (11 months ago)	1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 01:46:16 17970 sshd[21886]: pam_unix(sshd:auth): authe ... show more 1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 01:46:16 17970 sshd[21886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.114.120 user=root Dec 2 01:46:19 17970 sshd[21886]: Failed password for root from 103.52.114.120 port 60442 ssh2 Dec 2 02:14:20 17970 sshd[24069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.170.244 user=root Dec 2 01:23:07 17970 sshd[20068]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.78.219.130 user=root Dec 2 01:50:01 17970 sshd[22141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.52.114.120 user=root IP Addresses Blocked: 103.52.114.120 (ID/Indonesia/ip103-52-114-120.cloudhost.web.id) show less	Brute-Force SSH
🇧🇪 sid3windr	2025-12-02 07:55:10 UTC · (11 months ago)	SSH port scan (Tarpitted for 30s, wasted 32B)	Port Scan SSH
🇺🇸 bigscoots.com	2025-12-02 07:20:31 UTC · (11 months ago)	1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 01:20:23 9756 sshd[24010]: pam_unix(sshd:auth): authen ... show more 1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 01:20:23 9756 sshd[24010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.170.244 user=root Dec 2 00:56:00 9756 sshd[20211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.178.94.73 user=root Dec 2 00:56:02 9756 sshd[20211]: Failed password for root from 180.178.94.73 port 49686 ssh2 Dec 2 00:58:29 9756 sshd[20636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.178.94.73 user=root Dec 2 00:58:32 9756 sshd[20636]: Failed password for root from 180.178.94.73 port 44100 ssh2 IP Addresses Blocked: show less	Brute-Force SSH
🇩🇪 SiyCah	2025-12-02 07:00:04 UTC · (11 months ago)	1.94.170.244 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 507B. Report generated by Endlessh Report Generator v1.2.3	Port Scan Hacking Brute-Force SSH
🇺🇸 bigscoots.com	2025-12-02 06:57:49 UTC · (11 months ago)	1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 00:03:47 18887 sshd[12475]: pam_unix(sshd:auth): authe ... show more 1.94.170.244 (CN/China/ecs-1-94-170-244.compute.hwclouds-dns.com), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: ; Direction: 1; Trigger: LF_DISTATTACK; Logs: Dec 2 00:03:47 18887 sshd[12475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.172.130.40 user=root Dec 2 00:57:40 18887 sshd[16719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.236.74.199 user=root Dec 2 00:48:14 18887 sshd[16046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.60.198.238 user=root Dec 2 00:09:44 18887 sshd[12917]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.170.244 user=root Dec 2 00:09:47 18887 sshd[12917]: Failed password for root from 1.94.170.244 port 46660 ssh2 IP Addresses Blocked: 172.172.130.40 (US/United States/-) 156.236.74.199 (HK/Hong Kong/-) 62.60.198.238 (IR/Iran/-) show less	Brute-Force SSH
🇺🇸 rscott.us	2025-12-02 03:00:24 UTC · (11 months ago)	SSH login attempts with user root.	Brute-Force SSH

Showing 1 to 15 of 101 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇦🇷 198.41.230.122

🇩🇴 148.101.38.144

🇸🇬 104.22.66.180

🇧🇪 35.210.145.127

🇸🇬 34.21.148.247

🇬🇧 31.14.254.38

🇧🇪 198.235.24.164

🇩🇪 194.88.98.111

🇻🇪 190.97.243.61

🇨🇳 171.8.138.180

🇮🇩 103.94.164.111

🇬🇧 92.207.4.157

🇳🇱 64.205.72.223

🇬🇧 35.203.211.192

🇰🇷 27.102.102.170

🇺🇸 216.180.246.42

🇺🇸 207.171.254.176

🇱🇹 194.165.16.26

🇭🇰 165.154.60.176

🇭🇰 156.225.1.98