This IP address has been reported a total of
208
times from
101 distinct
sources.
109.22.130.198 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
This IP address carried out 34 SSH credential attack (attempts) on 23-07-2026. For more information ...
show moreThis IP address carried out 34 SSH credential attack (attempts) on 23-07-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Jul 23 05:38:14 mortgagebase sshd[2945]: Failed password for invalid user vr from 109.22.130.198 por ...
show moreJul 23 05:38:14 mortgagebase sshd[2945]: Failed password for invalid user vr from 109.22.130.198 port 40274 ssh2
Jul 23 05:38:14 mortgagebase sshd[2945]: Disconnected from invalid user vr 109.22.130.198 port 40274 [preauth]
Jul 23 05:43:53 mortgagebase sshd[3157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.22.130.198 user=root
Jul 23 05:43:55 mortgagebase sshd[3157]: Failed password for root from 109.22.130.198 port 36904 ssh2
Jul 23 05:43:56 mortgagebase sshd[3157]: Disconnected from authenticating user root 109.22.130.198 port 36904 [preauth]
...
show less
Jul 23 11:23:10 hermes sshd[2847242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ...
show moreJul 23 11:23:10 hermes sshd[2847242]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.22.130.198
Jul 23 11:23:10 hermes sshd[2847242]: Invalid user manuel from 109.22.130.198 port 32942
Jul 23 11:23:12 hermes sshd[2847242]: Failed password for invalid user manuel from 109.22.130.198 port 32942 ssh2
...
show less
Jul 23 10:08:42 hermes sshd[2743984]: Invalid user sammy from 109.22.130.198 port 51380
Jul 23 10:08 ...
show moreJul 23 10:08:42 hermes sshd[2743984]: Invalid user sammy from 109.22.130.198 port 51380
Jul 23 10:08:44 hermes sshd[2743984]: Failed password for invalid user sammy from 109.22.130.198 port 51380 ssh2
Jul 23 10:16:24 hermes sshd[2754627]: Invalid user git from 109.22.130.198 port 54240
...
show less
2026-07-23T11:11:04.089248+02:00 gw2.wira-gmbh.de sshd[2041378]: Invalid user gao from 109.22.130.19 ...
show more2026-07-23T11:11:04.089248+02:00 gw2.wira-gmbh.de sshd[2041378]: Invalid user gao from 109.22.130.198 port 59392
2026-07-23T11:11:04.120736+02:00 gw2.wira-gmbh.de sshd[2041378]: Disconnected from invalid user gao 109.22.130.198 port 59392 [preauth]
2026-07-23T11:15:00.608691+02:00 gw2.wira-gmbh.de sshd[2041845]: Disconnected from authenticating user root 109.22.130.198 port 37762 [preauth]
2026-07-23T11:18:59.341119+02:00 gw2.wira-gmbh.de sshd[2042478]: Invalid user dvs from 109.22.130.198 port 45630
2026-07-23T11:18:59.378191+02:00 gw2.wira-gmbh.de sshd[2042478]: Disconnected from invalid user dvs 109.22.130.198 port 45630 [preauth]
show less
Jul 23 03:11:51 peterbilt sshd[129243]: Invalid user gao from 109.22.130.198 port 48938
Jul 23 03:11 ...
show moreJul 23 03:11:51 peterbilt sshd[129243]: Invalid user gao from 109.22.130.198 port 48938
Jul 23 03:11:51 peterbilt sshd[129243]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.22.130.198
Jul 23 03:11:52 peterbilt sshd[129243]: Failed password for invalid user gao from 109.22.130.198 port 48938 ssh2
...
show less
2026-07-23T09:05:19.996347+00:00 ro1-hostc-storage sshd[3937658]: Invalid user shares from 109.22.13 ...
show more2026-07-23T09:05:19.996347+00:00 ro1-hostc-storage sshd[3937658]: Invalid user shares from 109.22.130.198 port 44254
2026-07-23T09:05:20.003143+00:00 ro1-hostc-storage sshd[3937658]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.22.130.198
2026-07-23T09:05:21.933373+00:00 ro1-hostc-storage sshd[3937658]: Failed password for invalid user shares from 109.22.130.198 port 44254 ssh2
...
show less
(sshd) Failed SSH login from 109.22.130.198 (FR/-/198.130.22.109.rev.sfr.net): 5 in the last 3600 se ...
show more(sshd) Failed SSH login from 109.22.130.198 (FR/-/198.130.22.109.rev.sfr.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 23 02:52:13 na-s3 sshd[141960]: Invalid user paulo from 109.22.130.198 port 55306
Jul 23 03:11:45 na-s3 sshd[374223]: Invalid user daro from 109.22.130.198 port 37956
Jul 23 03:23:17 na-s3 sshd[504088]: Invalid user flame from 109.22.130.198 port 34634
Jul 23 03:31:05 na-s3 sshd[591422]: Invalid user sahil from 109.22.130.198 port 56548
Jul 23 03:34:56 na-s3 sshd[633615]: Invalid user oracle from 109.22.130.198 port 33374
show less
Fail2Ban automatic report:
SSH brute-force:
Jul 23 07:29:35 serw sshd[58116]: Disconnected from auth ...
show moreFail2Ban automatic report:
SSH brute-force:
Jul 23 07:29:35 serw sshd[58116]: Disconnected from authenticating user root 109.22.130.198 port 42712 [preauth]
Jul 23 07:39:01 serw sshd[58314]: Invalid user www from 109.22.130.198 port 39064
Jul 23 07:39:01 serw sshd[58314]: Disconnected from invalid user www 109.22.130.198 port 39064 [preauth]
show less