Log in to view charts and search reports for this IP.
Log In
Top Reporter Countries (Last 60 Days)
Example preview
Report Categories (Last 60 Days)
Example preview
Reports Activity
Example preview
Account required for the enhanced features
Log inSign up
IP Abuse Reports for 109.198.18.148:
This IP address has been reported a total of
48
times from
36 distinct
sources.
109.198.18.148 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 15
reports;
Germany
with 12
reports;
Finland
with 4
reports.
The most common categories in these recent reports were:
Brute-Force
43
times;
SSH
41
times;
Port Scan
2
times;
DDoS Attack
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-08-28T14:13:39.210490+00:00 sg-jumphost-server sshd[1429442]: Connection closed by authenticati ...
show more2026-08-28T14:13:39.210490+00:00 sg-jumphost-server sshd[1429442]: Connection closed by authenticating user root 109.198.18.148 port 4634 [preauth]
...
show less
2026-08-28T12:44:53.429246+00:00 sg-jumphost-server sshd[1422784]: Connection closed by authenticati ...
show more2026-08-28T12:44:53.429246+00:00 sg-jumphost-server sshd[1422784]: Connection closed by authenticating user root 109.198.18.148 port 59672 [preauth]
...
show less
2026-08-28T12:04:10.146611+00:00 sg-jumphost-server sshd[1417640]: Connection closed by authenticati ...
show more2026-08-28T12:04:10.146611+00:00 sg-jumphost-server sshd[1417640]: Connection closed by authenticating user root 109.198.18.148 port 7924 [preauth]
2026-08-28T12:08:02.908528+00:00 sg-jumphost-server sshd[1418156]: Connection closed by authenticating user root 109.198.18.148 port 25640 [preauth]
...
show less
2026-08-28T11:06:10.702144+00:00 sg-jumphost-server sshd[1412457]: Invalid user matic from 109.198.1 ...
show more2026-08-28T11:06:10.702144+00:00 sg-jumphost-server sshd[1412457]: Invalid user matic from 109.198.18.148 port 56764
2026-08-28T11:06:10.889478+00:00 sg-jumphost-server sshd[1412457]: Connection closed by invalid user matic 109.198.18.148 port 56764 [preauth]
2026-08-28T11:14:11.052809+00:00 sg-jumphost-server sshd[1413215]: Invalid user matic from 109.198.18.148 port 5745
...
show less
2026-08-28T10:57:48.135063shield sshd\[3183\]: Invalid user matic from 109.198.18.148 port 17097
202 ...
show more2026-08-28T10:57:48.135063shield sshd\[3183\]: Invalid user matic from 109.198.18.148 port 17097
2026-08-28T10:57:48.247313shield sshd\[3183\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.pinoutletdoo.com
2026-08-28T10:57:50.314314shield sshd\[3183\]: Failed password for invalid user matic from 109.198.18.148 port 17097 ssh2
2026-08-28T11:04:53.944809shield sshd\[4625\]: Invalid user matic from 109.198.18.148 port 18469
2026-08-28T11:04:54.055315shield sshd\[4625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.pinoutletdoo.com
show less
Aug 28 09:37:11 mx sshd[1142422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ...
show moreAug 28 09:37:11 mx sshd[1142422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.198.18.148 user=root
Aug 28 09:37:12 mx sshd[1142422]: Failed password for root from 109.198.18.148 port 29726 ssh2
Aug 28 10:40:45 mx sshd[1146938]: Invalid user matic from 109.198.18.148 port 9047
...
show less
2026-08-28T04:20:33.752577-04:00 site sshd-session[114259]: User root from 109.198.18.148 not allowe ...
show more2026-08-28T04:20:33.752577-04:00 site sshd-session[114259]: User root from 109.198.18.148 not allowed because not listed in AllowUsers
2026-08-28T05:15:35.420126-04:00 site sshd-session[115633]: User root from 109.198.18.148 not allowed because not listed in AllowUsers
2026-08-28T06:17:19.041781-04:00 site sshd-session[117284]: Invalid user matic from 109.198.18.148 port 45432
...
show less
Automated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T08:17Z). Usernames ...
show moreAutomated sensor: 3 SSH brute-force attempts over the last 24h (latest 2026-08-28T08:17Z). Usernames tried: root.
show less
