This IP address has been reported a total of
67
times from
48 distinct
sources.
130.94.11.31 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-07-13T11:14:04.249396+02:00 zrh02-ch-pop.as202427.net sshd[297401]: Invalid user ftp2 from 130. ...
show more2026-07-13T11:14:04.249396+02:00 zrh02-ch-pop.as202427.net sshd[297401]: Invalid user ftp2 from 130.94.11.31 port 39896
2026-07-13T11:15:59.520329+02:00 zrh02-ch-pop.as202427.net sshd[297427]: User root from 130.94.11.31 not allowed because not listed in AllowUsers
2026-07-13T11:17:46.573277+02:00 zrh02-ch-pop.as202427.net sshd[297498]: Invalid user tester from 130.94.11.31 port 36074
...
show less
2026-07-13T09:08:12.840725+00:00 ubuntu1 sshd[609187]: Disconnected from authenticating user root 13 ...
show more2026-07-13T09:08:12.840725+00:00 ubuntu1 sshd[609187]: Disconnected from authenticating user root 130.94.11.31 port 41492 [preauth]
2026-07-13T09:14:51.045992+00:00 ubuntu1 sshd[613448]: Invalid user ftp2 from 130.94.11.31 port 56384
2026-07-13T09:14:51.200819+00:00 ubuntu1 sshd[613448]: Disconnected from invalid user ftp2 130.94.11.31 port 56384 [preauth]
...
show less
Repeated authentication failures via SSH from 130.94.11.31 targeting user root. Observed 2 failed at ...
show moreRepeated authentication failures via SSH from 130.94.11.31 targeting user root. Observed 2 failed attempt(s) in the reporting window. Blocked by automated intrusion prevention.
show less
2026-07-13T10:38:50.572083+02:00 chat.me.ke sshd[3747873]: Invalid user tes from 130.94.11.31 port 5 ...
show more2026-07-13T10:38:50.572083+02:00 chat.me.ke sshd[3747873]: Invalid user tes from 130.94.11.31 port 52384
...
show less
2026-07-13T09:56:59.467800+02:00 chat.me.ke sshd[3546773]: Invalid user excel from 130.94.11.31 port ...
show more2026-07-13T09:56:59.467800+02:00 chat.me.ke sshd[3546773]: Invalid user excel from 130.94.11.31 port 54096
2026-07-13T09:56:59.472154+02:00 chat.me.ke sshd[3546773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.11.31
2026-07-13T09:57:01.588740+02:00 chat.me.ke sshd[3546773]: Failed password for invalid user excel from 130.94.11.31 port 54096 ssh2
2026-07-13T09:56:59.472154+02:00 chat.me.ke sshd[3546773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.11.31
2026-07-13T09:57:01.588740+02:00 chat.me.ke sshd[3546773]: Failed password for invalid user excel from 130.94.11.31 port 54096 ssh2
...
show less
Brute-Force
SSH
Anonymous
Automated Report: Fail2Ban block triggered by sshd jail.
Brute-Force
SSH
Anonymous
2026-07-13T09:19:03.300650+02:00 polaris sshd-session[15499]: Invalid user mohammad from 130.94.11.3 ...
show more2026-07-13T09:19:03.300650+02:00 polaris sshd-session[15499]: Invalid user mohammad from 130.94.11.31 port 37970
2026-07-13T09:26:55.010012+02:00 polaris sshd-session[15547]: Invalid user sistemas from 130.94.11.31 port 56460
2026-07-13T09:30:42.720179+02:00 polaris sshd-session[15567]: Invalid user user53 from 130.94.11.31 port 57010
...
show less
Jul 13 07:19:09 antti-vps2 sshd[411817]: Invalid user mohammad from 130.94.11.31 port 38310
Jul 13 0 ...
show moreJul 13 07:19:09 antti-vps2 sshd[411817]: Invalid user mohammad from 130.94.11.31 port 38310
Jul 13 07:21:10 antti-vps2 sshd[411997]: Connection from 130.94.11.31 port 53020 on 10.0.0.124 port 22 rdomain ""
Jul 13 07:21:11 antti-vps2 sshd[411997]: User root from 130.94.11.31 not allowed because none of user's groups are listed in AllowGroups
Jul 13 07:23:08 antti-vps2 sshd[412177]: Connection from 130.94.11.31 port 49438 on 10.0.0.124 port 22 rdomain ""
Jul 13 07:23:08 antti-vps2 sshd[412177]: User root from 130.94.11.31 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-07-13T09:18:12.156304+02:00 chat.me.ke sshd[3360407]: Failed password for invalid user mohammad ...
show more2026-07-13T09:18:12.156304+02:00 chat.me.ke sshd[3360407]: Failed password for invalid user mohammad from 130.94.11.31 port 58414 ssh2
2026-07-13T09:20:13.127732+02:00 chat.me.ke sshd[3370324]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.11.31 user=root
2026-07-13T09:20:14.397724+02:00 chat.me.ke sshd[3370324]: Failed password for root from 130.94.11.31 port 57146 ssh2
2026-07-13T09:22:12.796429+02:00 chat.me.ke sshd[3379986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=130.94.11.31 user=root
2026-07-13T09:22:14.737833+02:00 chat.me.ke sshd[3379986]: Failed password for root from 130.94.11.31 port 37470 ssh2
...
show less
Jul 13 02:22:08 vps-1 sshd-session[158906]: Invalid user bryan from 130.94.11.31 port 33064
Jul 13 0 ...
show moreJul 13 02:22:08 vps-1 sshd-session[158906]: Invalid user bryan from 130.94.11.31 port 33064
Jul 13 02:24:23 vps-1 sshd-session[159012]: Invalid user alex from 130.94.11.31 port 57660
...
show less
Jul 13 01:46:55 vps-1 sshd-session[157633]: Invalid user work from 130.94.11.31 port 38694
Jul 13 01 ...
show moreJul 13 01:46:55 vps-1 sshd-session[157633]: Invalid user work from 130.94.11.31 port 38694
Jul 13 01:49:08 vps-1 sshd-session[157727]: Invalid user admin from 130.94.11.31 port 47606
Jul 13 01:51:22 vps-1 sshd-session[157817]: Invalid user ark from 130.94.11.31 port 54306
...
show less
2026-07-13T05:09:04.267638+02:00 helmgartner sshd[687505]: User root from 130.94.11.31 not allowed b ...
show more2026-07-13T05:09:04.267638+02:00 helmgartner sshd[687505]: User root from 130.94.11.31 not allowed because not listed in AllowUsers
2026-07-13T05:11:03.785661+02:00 helmgartner sshd[687752]: Invalid user chris from 130.94.11.31 port 59918
2026-07-13T05:13:03.820392+02:00 helmgartner sshd[687931]: Invalid user admin from 130.94.11.31 port 42020
...
show less
Brute-Force
Showing 1 to
15
of 67 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩