This IP address has been reported a total of
60
times from
56 distinct
sources.
194.226.99.80 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 17
reports;
France
with 8
reports;
United States of America
with 8
reports.
The most common categories in these recent reports were:
SSH
57
times;
Brute-Force
53
times;
Port Scan
4
times;
FTP Brute-Force
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-26T08:06:35.234945+01:00 psifactor sshd-session[2945075]: Disconnected from authenticating u ...
show more2026-10-26T08:06:35.234945+01:00 psifactor sshd-session[2945075]: Disconnected from authenticating user root 194.226.99.80 port 48842 [preauth]
... (mode: instant ban, root access or sth similar)
show less
2026-10-26T05:47:42.875634+00:00 edge-sea-con01.int.pdx.net.uk sshd[2643998]: Invalid user curl from ...
show more2026-10-26T05:47:42.875634+00:00 edge-sea-con01.int.pdx.net.uk sshd[2643998]: Invalid user curl from 194.226.99.80 port 44994
2026-10-26T05:47:42.891909+00:00 edge-sea-con01.int.pdx.net.uk sshd[2643998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.226.99.80
2026-10-26T05:47:45.035159+00:00 edge-sea-con01.int.pdx.net.uk sshd[2643998]: Failed password for invalid user curl from 194.226.99.80 port 44994 ssh2
...
show less
Brute-Force
SSH
Anonymous
194.226.99.80 (RU/Russia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Por ...
show more194.226.99.80 (RU/Russia/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 26 01:34:42 server5 sshd[30023]: Failed password for root from 116.228.233.93 port 40873 ssh2
Oct 26 01:29:56 server5 sshd[29062]: Failed password for root from 129.121.139.180 port 39304 ssh2
Oct 26 01:28:56 server5 sshd[28908]: Failed password for root from 27.155.120.131 port 52052 ssh2
Oct 26 01:34:40 server5 sshd[30023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.233.93 user=root
Oct 26 01:29:54 server5 sshd[29062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.121.139.180 user=root
Oct 26 01:37:15 server5 sshd[30722]: Failed password for root from 194.226.99.80 port 45926 ssh2
IP Addresses Blocked:
116.228.233.93 (CN/China/-)
129.121.139.180 (US/United States/-)
27.155.120.131 (CN/China/-)
show less
Failed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 13/100 (info ...
show moreFailed SSH authentication attempts recorded by a honeypot sensor network.
Threat score: 13/100 (info) | Phase: reconnaissance (low-volume probing)
Failed auth: 11 (5 bad password, 6 invalid user) | 0 success | 27 total SSH log events | seen on 1 sensor(s)
Origin: Russia (RU) | AS56384 JSC Avantel | 194.226.99.0/24
First seen: 2026-10-26 05:20:57 UTC | Last seen: 2026-10-26 05:34:13 UTC
Source: Linux OpenSSH journalctl telemetry, multi-sensor CERT honeypot.
show less
