Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 5, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-10-29..2026-10-29. Reported by an SSH honeypot network; no production service ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 5, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (us1) over 2026-10-29..2026-10-29. Reported by an SSH honeypot network; no production service involved.
show less
2026-10-29T00:48:55.982358 mail2.akcurate.de sshd-session[180750]: Invalid user sandeep from 89.134.198.105 port 35794
2026-10-29T00:48:56.010682 mail2.akcurate.de sshd-session[180750]: Disconnected from invalid user sandeep 89.134.198.105 port 35794 ...
show more2026-10-29T00:48:55.982358 mail2.akcurate.de sshd-session[180750]: Invalid user sandeep from 89.134.198.105 port 35794
2026-10-29T00:48:56.010682 mail2.akcurate.de sshd-session[180750]: Disconnected from invalid user sandeep 89.134.198.105 port 35794 [preauth]
2026-10-29T00:59:32.621029 mail2.akcurate.de sshd-session[181526]: Invalid user shahsavandi from 89.134.198.105 port 46540
...
show less
2026-10-29T02:46:20.275799+03:00 grape sshd-session[1978282]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-29T02:47:09.675761+03:00 grape sshd-session[1979470]: Connection from 89.134.198.1 ...
show more2026-10-29T02:46:20.275799+03:00 grape sshd-session[1978282]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-29T02:47:09.675761+03:00 grape sshd-session[1979470]: Connection from 89.134.198.105 port 44792 on 192.168.0.100 port 22 rdomain ""
2026-10-29T02:47:10.080478+03:00 grape sshd-session[1979470]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-29T02:48:05.527000+03:00 grape sshd-session[1980942]: Connection from 89.134.198.105 port 49784 on 192.168.0.100 port 22 rdomain ""
2026-10-29T02:48:05.921127+03:00 grape sshd-session[1980942]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-10-28T23:27:55.415981maoyue-lax1 sshd[173195]: Invalid user frankendancer from 89.134.198.105 port 57242
2026-10-28T23:27:55.599277maoyue-lax1 sshd[173195]: Disconnected from invalid user frankendancer 89.134.198.105 port 57242 [preauth]
2026-10 ...
show more2026-10-28T23:27:55.415981maoyue-lax1 sshd[173195]: Invalid user frankendancer from 89.134.198.105 port 57242
2026-10-28T23:27:55.599277maoyue-lax1 sshd[173195]: Disconnected from invalid user frankendancer 89.134.198.105 port 57242 [preauth]
2026-10-28T23:33:18.892507maoyue-lax1 sshd[177011]: Invalid user munin from 89.134.198.105 port 49560
2026-10-28T23:33:19.078145maoyue-lax1 sshd[177011]: Disconnected from invalid user munin 89.134.198.105 port 49560 [preauth]
show less
Fail2ban ban on jail 'sshd'. Repeated failed authentication attempts against a monitored host. Detected and correlated by Wazuh SIEM (rule 100110, level 10). Reported automatically.
2026-10-28T23:18:08.149167+00:00 relay-fi05 sshd-session[139250]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-28T23:19:41.566242+00:00 relay-fi05 sshd-session[139260]: Connection from 89.1 ...
show more2026-10-28T23:18:08.149167+00:00 relay-fi05 sshd-session[139250]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-28T23:19:41.566242+00:00 relay-fi05 sshd-session[139260]: Connection from 89.134.198.105 port 35052 on 87.58.151.218 port 22 rdomain ""
2026-10-28T23:19:41.934640+00:00 relay-fi05 sshd-session[139260]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
2026-10-28T23:21:03.907272+00:00 relay-fi05 sshd-session[139269]: Connection from 89.134.198.105 port 38294 on 87.58.151.218 port 22 rdomain ""
2026-10-28T23:21:04.255873+00:00 relay-fi05 sshd-session[139269]: User root from 89.134.198.105 not allowed because none of user's groups are listed in AllowGroups
...
show less
(sshd) Failed SSH login from 89.134.198.105 (HU/Hungary/catv-89-134-198-105.catv.fixed.one.hu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 29 00:01:23 web02 sshd[1753606]: Invalid user dev from 89.134.198.105 por ...
show more(sshd) Failed SSH login from 89.134.198.105 (HU/Hungary/catv-89-134-198-105.catv.fixed.one.hu): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 29 00:01:23 web02 sshd[1753606]: Invalid user dev from 89.134.198.105 port 58732
Oct 29 00:01:25 web02 sshd[1753606]: Failed password for invalid user dev from 89.134.198.105 port 58732 ssh2
Oct 29 00:02:43 web02 sshd[1753763]: Invalid user vps from 89.134.198.105 port 50268
Oct 29 00:02:45 web02 sshd[1753763]: Failed password for invalid user vps from 89.134.198.105 port 50268 ssh2
Oct 29 00:04:02 web02 sshd[1754114]: Invalid user david from 89.134.198.105 port 45190
show less
2026-10-28T23:01:09.582894+00:00 kansas1 sshd[55387]: Invalid user dev from 89.134.198.105 port 43208
2026-10-28T23:01:09.586263+00:00 kansas1 sshd[55387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.134 ...
show more2026-10-28T23:01:09.582894+00:00 kansas1 sshd[55387]: Invalid user dev from 89.134.198.105 port 43208
2026-10-28T23:01:09.586263+00:00 kansas1 sshd[55387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.134.198.105
2026-10-28T23:01:11.642144+00:00 kansas1 sshd[55387]: Failed password for invalid user dev from 89.134.198.105 port 43208 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown
