This IP address has been reported a total of
19
times from
17 distinct
sources.
202.194.98.215 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 25 16:49:26 15127 sshd[21231]: Did not receive identification string from 202.194.98.215 port 60172
Jun 25 16:49:28 15127 sshd[21232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 16:49:30 15127 sshd[21232]: Failed password for root from 202.194.98.215 port 60174 ssh2
Jun 25 16:49:32 15127 sshd[21234]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 16:49:34 15127 sshd[21234]: Failed password for root from 202.194.98.215 port 59894 ssh2
show less
(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 25 19:44:22 22243 sshd[21027]: Did not receive identification string from 202.194.98.215 port 38446
Jun 25 19:44:23 22243 sshd[21028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 19:44:25 22243 sshd[21028]: Failed password for root from 202.194.98.215 port 38454 ssh2
Jun 25 19:44:27 22243 sshd[21080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 19:44:29 22243 sshd[21080]: Failed password for root from 202.194.98.215 port 38466 ssh2
show less
(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directi ...
show more(sshd) Failed SSH login from 202.194.98.215 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 25 05:00:37 13586 sshd[797]: Did not receive identification string from 202.194.98.215 port 33214
Jun 25 05:00:38 13586 sshd[798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 05:00:40 13586 sshd[798]: Failed password for root from 202.194.98.215 port 33226 ssh2
Jun 25 05:00:42 13586 sshd[800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.194.98.215 user=root
Jun 25 05:00:44 13586 sshd[800]: Failed password for root from 202.194.98.215 port 39722 ssh2
show less
SSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoin ...
show moreSSH honeypot interaction detected. The source host initiated a connection to a monitored SSH endpoint, behavior consistent with automated SSH scanning or brute-force reconnaissance.
show less
Honeypot [fra-de-honeypot]: Empty payload (likely service probe); 6022 [1] TCP
Reported by DisPaisy ...
show moreHoneypot [fra-de-honeypot]: Empty payload (likely service probe); 6022 [1] TCP
Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
2026-06-24T22:26:16.469090Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 202.194.98.215:528 ...
show more2026-06-24T22:26:16.469090Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 202.194.98.215:52872 (158.69.22.11:2222) [session: d322e86b323d]
2026-06-24T22:26:17.002048Z [cowrie.ssh.factory.CowrieSSHFactory] New connection: 202.194.98.215:52876 (158.69.22.11:2222) [session: 34f5c739aed7]
...
show less
Jun 24 09:07:57 server01 sshd[5333]: Failed password for root from 202.194.98.215 port 38010 ssh2
Ju ...
show moreJun 24 09:07:57 server01 sshd[5333]: Failed password for root from 202.194.98.215 port 38010 ssh2
Jun 24 09:08:00 server01 sshd[5335]: Failed password for root from 202.194.98.215 port 38018 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 19 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩