This IP address has been reported a total of
146
times from
90 distinct
sources.
194.59.31.196 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Blocked by UFW (TCP on 60422)
Source port: 60427
TTL: 52
Packet length: 52
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 60422)
Source port: 60427
TTL: 52
Packet length: 52
TOS: 0x14
This report (for 194.59.31.196) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
monitor: on VM-0-7-ubuntu | port: 59949 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporte ...
show moremonitor: on VM-0-7-ubuntu | port: 59949 | ttl: 251 script: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
Blocked by UFW (TCP on 47)
Source port: 34118
TTL: 49
Packet length: 52
TOS: 0x14
This report (for ...
show moreBlocked by UFW (TCP on 47)
Source port: 34118
TTL: 49
Packet length: 52
TOS: 0x14
This report (for 194.59.31.196) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-07-08T18:42:57.378307+08:00 [HOSTNAME] sshd[1981668]: pam_unix(sshd:auth): authentication failu ...
show more2026-07-08T18:42:57.378307+08:00 [HOSTNAME] sshd[1981668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196 user=root
2026-07-08T18:42:59.476272+08:00 [HOSTNAME] sshd[1981668]: Failed password for root from 194.59.31.196 port 55852 ssh2
2026-07-08T18:42:58.319798+08:00 [HOSTNAME] sshd[1981670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196 user=root
2026-07-08T18:43:00.222416+08:00 [HOSTNAME] sshd[1981670]: Failed password for root from 194.59.31.196 port 55864 ssh2
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 60422)
Source port: 53445
TTL: 50
Packet length: 52
TOS: 0x14
This report (f ...
show moreBlocked by UFW (TCP on 60422)
Source port: 53445
TTL: 50
Packet length: 52
TOS: 0x14
This report (for 194.59.31.196) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2026-06-28T19:38:42.723183+08:00 rosemary sshd-session[2777606]: Connection closed by authenticating ...
show more2026-06-28T19:38:42.723183+08:00 rosemary sshd-session[2777606]: Connection closed by authenticating user root 194.59.31.196 port 43098 [preauth]
2026-06-28T19:38:43.063532+08:00 rosemary sshd-session[2777620]: Connection closed by authenticating user root 194.59.31.196 port 43100 [preauth]
...
show less
2026-06-28T18:38:32.755479+08:00 rosemary sshd-session[2739054]: Connection closed by authenticating ...
show more2026-06-28T18:38:32.755479+08:00 rosemary sshd-session[2739054]: Connection closed by authenticating user root 194.59.31.196 port 60122 [preauth]
2026-06-28T18:38:36.692343+08:00 rosemary sshd-session[2739069]: Connection closed by authenticating user root 194.59.31.196 port 34248 [preauth]
2026-06-28T18:38:40.384045+08:00 rosemary sshd-session[2739074]: Connection closed by authenticating user root 194.59.31.196 port 34256 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Blocked by UFW (TCP on 2222)
Source port: 55950
TTL: 51
Packet length: 52
TOS: 0x14
This report (fo ...
show moreBlocked by UFW (TCP on 2222)
Source port: 55950
TTL: 51
Packet length: 52
TOS: 0x14
This report (for 194.59.31.196) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
2023-07-20T00:13:10.123508+02:00 myvps sshd[730492]: Failed password for invalid user node from 194. ...
show more2023-07-20T00:13:10.123508+02:00 myvps sshd[730492]: Failed password for invalid user node from 194.59.31.196 port 36964 ssh2
2023-07-20T00:20:02.411582+02:00 myvps sshd[734205]: Invalid user steam1 from 194.59.31.196 port 56286
2023-07-20T00:20:02.414041+02:00 myvps sshd[734205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
2023-07-20T00:20:04.535280+02:00 myvps sshd[734205]: Failed password for invalid user steam1 from 194.59.31.196 port 56286 ssh2
2023-07-20T00:21:01.926558+02:00 myvps sshd[734740]: Invalid user tcadmin from 194.59.31.196 port 49312
...
show less
Jul 22 11:42:43 gateway22 sshd[815775]: Invalid user test from 194.59.31.196 port 37000
Jul 22 11:42 ...
show moreJul 22 11:42:43 gateway22 sshd[815775]: Invalid user test from 194.59.31.196 port 37000
Jul 22 11:42:43 gateway22 sshd[815775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 11:42:43 gateway22 sshd[815775]: Invalid user test from 194.59.31.196 port 37000
Jul 22 11:42:45 gateway22 sshd[815775]: Failed password for invalid user test from 194.59.31.196 port 37000 ssh2
Jul 22 11:43:38 gateway22 sshd[815791]: Invalid user ubuntu from 194.59.31.196 port 41002
Jul 22 11:43:38 gateway22 sshd[815791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 11:43:38 gateway22 sshd[815791]: Invalid user ubuntu from 194.59.31.196 port 41002
Jul 22 11:43:40 gateway22 sshd[815791]: Failed password for invalid user ubuntu from 194.59.31.196 port 41002 ssh2
Jul 22 11:44:39 gateway22 sshd[815810]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=19
...
show less
Report 586784 with IP 1629119 for SSH brute-force attack by source 1629009 via ssh-honeypot/0.2.0+ht ...
show moreReport 586784 with IP 1629119 for SSH brute-force attack by source 1629009 via ssh-honeypot/0.2.0+http
show less
Jul 22 10:33:40 gateway20 sshd[382224]: Failed password for root from 194.59.31.196 port 36934 ssh2
...
show moreJul 22 10:33:40 gateway20 sshd[382224]: Failed password for root from 194.59.31.196 port 36934 ssh2
Jul 22 10:34:45 gateway20 sshd[382227]: Invalid user test from 194.59.31.196 port 59484
Jul 22 10:34:45 gateway20 sshd[382227]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 10:34:45 gateway20 sshd[382227]: Invalid user test from 194.59.31.196 port 59484
Jul 22 10:34:47 gateway20 sshd[382227]: Failed password for invalid user test from 194.59.31.196 port 59484 ssh2
Jul 22 10:35:53 gateway20 sshd[382229]: Invalid user test1 from 194.59.31.196 port 46904
Jul 22 10:35:53 gateway20 sshd[382229]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 10:35:53 gateway20 sshd[382229]: Invalid user test1 from 194.59.31.196 port 46904
Jul 22 10:35:55 gateway20 sshd[382229]: Failed password for invalid user test1 from 194.59.31.196 port 46904 ssh2
Jul 22 10:37:02 gateway20 sshd[38
...
show less
Jul 22 10:13:39 gateway20 sshd[382104]: Invalid user admin from 194.59.31.196 port 53248
Jul 22 10:1 ...
show moreJul 22 10:13:39 gateway20 sshd[382104]: Invalid user admin from 194.59.31.196 port 53248
Jul 22 10:13:42 gateway20 sshd[382104]: Failed password for invalid user admin from 194.59.31.196 port 53248 ssh2
Jul 22 10:14:38 gateway20 sshd[382107]: Invalid user julie from 194.59.31.196 port 41360
Jul 22 10:14:38 gateway20 sshd[382107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 10:14:38 gateway20 sshd[382107]: Invalid user julie from 194.59.31.196 port 41360
Jul 22 10:14:41 gateway20 sshd[382107]: Failed password for invalid user julie from 194.59.31.196 port 41360 ssh2
Jul 22 10:15:43 gateway20 sshd[382109]: Invalid user admin from 194.59.31.196 port 39854
Jul 22 10:15:43 gateway20 sshd[382109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.59.31.196
Jul 22 10:15:43 gateway20 sshd[382109]: Invalid user admin from 194.59.31.196 port 39854
Jul 22 10:15:44 gateway20 sshd[382109]: F
...
show less