Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 26 09:46:56 mx1 sshd[2616589]: Failed password for root from 198.20.133.100 port 59734 ssh2
Oct 26 09:48:33 mx1 sshd[2616696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 2 ...
show moreOct 26 09:46:56 mx1 sshd[2616589]: Failed password for root from 198.20.133.100 port 59734 ssh2
Oct 26 09:48:33 mx1 sshd[2616696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 09:48:35 mx1 sshd[2616696]: Failed password for root from 198.20.133.100 port 43224 ssh2
Oct 26 09:50:14 mx1 sshd[2616793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 09:50:16 mx1 sshd[2616793]: Failed password for root from 198.20.133.100 port 44622 ssh2
...
show less
Oct 26 01:44:58 koppa sshd[598151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 01:45:01 koppa sshd[598151]: Failed password for invalid user root from 198.20.133.100 port 5 ...
show moreOct 26 01:44:58 koppa sshd[598151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 01:45:01 koppa sshd[598151]: Failed password for invalid user root from 198.20.133.100 port 51044 ssh2
Oct 26 01:52:24 koppa sshd[598225]: User root from 198.20.133.100 not allowed because none of user's groups are listed in AllowGroups
...
show less
Oct 26 07:36:46 mail sshd[3416224]: Failed password for root from 198.20.133.100 port 45352 ssh2
Oct 26 07:38:22 mail sshd[3421205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct ...
show moreOct 26 07:36:46 mail sshd[3416224]: Failed password for root from 198.20.133.100 port 45352 ssh2
Oct 26 07:38:22 mail sshd[3421205]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 07:38:24 mail sshd[3421205]: Failed password for root from 198.20.133.100 port 39436 ssh2
Oct 26 07:40:01 mail sshd[3422367]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.20.133.100 user=root
Oct 26 07:40:04 mail sshd[3422367]: Failed password for root from 198.20.133.100 port 49224 ssh2
...
show less
2026-10-26T07:14:36.852148+00:00 ubuntu sshd[133748]: Received disconnect from 198.20.133.100 port 50240:11: Bye Bye [preauth]
2026-10-26T07:17:19.256782+00:00 ubuntu sshd[133775]: Received disconnect from 198.20.133.100 port 57156:11: Bye Bye [preau ...
show more2026-10-26T07:14:36.852148+00:00 ubuntu sshd[133748]: Received disconnect from 198.20.133.100 port 50240:11: Bye Bye [preauth]
2026-10-26T07:17:19.256782+00:00 ubuntu sshd[133775]: Received disconnect from 198.20.133.100 port 57156:11: Bye Bye [preauth]
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown