This IP address has been reported a total of
56
times from
50 distinct
sources.
1.94.198.108 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 13
reports;
Netherlands
with 8
reports;
France
with 4
reports.
The most common categories in these recent reports were:
SSH
46
times;
Brute-Force
43
times;
Web App Attack
6
times;
Port Scan
4
times;
Exploited Host
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T21:07:01+0200. Last: 2026-10-18T21:07:01+0200.
Samples:
- 2026-10-18 00:34:10,280 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 1.94.198.108
show less
Oct 18 17:07:27 hermes sshd[1279009]: Failed password for root from 1.94.198.108 port 50062 ssh2
Oct ...
show moreOct 18 17:07:27 hermes sshd[1279009]: Failed password for root from 1.94.198.108 port 50062 ssh2
Oct 18 17:07:30 hermes sshd[1279104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.198.108 user=root
Oct 18 17:07:32 hermes sshd[1279104]: Failed password for root from 1.94.198.108 port 53348 ssh2
...
show less
Oct 18 18:24:19 javastart sshd[27427]: Failed password for root from 1.94.198.108 port 45430 ssh2
Oc ...
show moreOct 18 18:24:19 javastart sshd[27427]: Failed password for root from 1.94.198.108 port 45430 ssh2
Oct 18 18:24:24 javastart sshd[27429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.198.108 user=root
Oct 18 18:24:26 javastart sshd[27429]: Failed password for root from 1.94.198.108 port 50658 ssh2
Oct 18 18:24:36 javastart sshd[27465]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.198.108 user=root
Oct 18 18:24:38 javastart sshd[27465]: Failed password for root from 1.94.198.108 port 58110 ssh2
...
show less
Oct 18 16:38:53 wh02 sshd[3630340]: Connection closed by authenticating user root 1.94.198.108 port ...
show moreOct 18 16:38:53 wh02 sshd[3630340]: Connection closed by authenticating user root 1.94.198.108 port 40540 [preauth]
Oct 18 16:38:54 wh02 sshd[3630365]: Connection closed by authenticating user root 1.94.198.108 port 44274 [preauth]
Oct 18 16:39:17 wh02 sshd[3630389]: Connection closed by authenticating user root 1.94.198.108 port 45466 [preauth]
Oct 18 16:39:19 wh02 sshd[3630516]: Connection closed by authenticating user root 1.94.198.108 port 39430 [preauth]
Oct 18 16:39:21 wh02 sshd[3630518]: Connection closed by authenticating user root 1.94.198.108 port 40462 [preauth]
Oct 18 16:39:41 wh02 sshd[3630546]: Connection closed by authenticating user root 1.94.198.108 port 42278 [preauth]
Oct 18 16:39:43 wh02 sshd[3650617]: Connection closed by authenticating user root 1.94.198.108 port 33338 [preauth]
Oct 18 16:39:47 wh02 sshd[3650619]: Connection closed by authenticating user root 1.94.198.108 port 35108 [preauth]
Oct 18 16:39:51 wh02 sshd[3650665]: Connection closed by authenticating
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T16:07:02+0200. Last: 2026-10-18T16:07:02+0200.
Samples:
- 2026-10-18 00:34:10,280 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 1.94.198.108
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T11:07:01+0200. Last: 2026-10-18T11:07:01+0200.
Samples:
- 2026-10-18 00:34:10,280 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 1.94.198.108
show less
2026-10-18T06:11:46.676350+00:00 server sshd[2344829]: Invalid user user from 1.94.198.108 port 4417 ...
show more2026-10-18T06:11:46.676350+00:00 server sshd[2344829]: Invalid user user from 1.94.198.108 port 44174
2026-10-18T06:11:47.969829+00:00 server sshd[2344831]: Invalid user user from 1.94.198.108 port 45290
2026-10-18T06:11:49.889817+00:00 server sshd[2344833]: Invalid user user from 1.94.198.108 port 46956
show less
Brute-Force
SSH
Anonymous
Blocked by firewall on hugin [22/tcp] | Rule: UFW | SPT: 58460 | TTL: 35 | LEN: 60 | TOS: 0x00 • Rep ...
show moreBlocked by firewall on hugin [22/tcp] | Rule: UFW | SPT: 58460 | TTL: 35 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T ...
show moreAuto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-10-18T06:07:01+0200. Last: 2026-10-18T06:07:01+0200.
Samples:
- 2026-10-18 00:34:10,280 fail2ban.actions [858]: NOTICE [abuseipdb] Ban 1.94.198.108
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detec ...
show moreFail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
show less
2026-10-18T04:29:29.758324+02:00 node6.eu.respawnhost.com sshd-session[2299985]: Connection closed b ...
show more2026-10-18T04:29:29.758324+02:00 node6.eu.respawnhost.com sshd-session[2299985]: Connection closed by authenticating user root 1.94.198.108 port 42516 [preauth]
2026-10-18T04:29:30.749021+02:00 node6.eu.respawnhost.com sshd-session[2300605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.198.108 user=root
2026-10-18T04:29:33.268388+02:00 node6.eu.respawnhost.com sshd-session[2300605]: Failed password for root from 1.94.198.108 port 46718 ssh2
...
show less
