This IP address has been reported a total of
280
times from
196 distinct
sources.
94.138.209.214 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Suricata Detected 8 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; Po ...
show moreSuricata Detected 8 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; Ports: 33136; Direction: to_server; Trigger: SCAN; Category: Attempted Information Leak; Severity: 2
show less
Suricata Detected 4 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; Po ...
show moreSuricata Detected 4 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; Ports: 55330; Direction: to_server; Trigger: SCAN; Category: Attempted Information Leak; Severity: 2
show less
Suricata Detected 22 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; P ...
show moreSuricata Detected 22 attacks from 94.138.209.214.; ET SCAN Potential SSH Scan; IP: 94.138.209.214; Ports: 48892; Direction: to_server; Trigger: SCAN; Category: Attempted Information Leak; Severity: 2
show less
Jul 6 03:43:57 do1 sshd[1511249]: Disconnected from authenticating user root 94.138.209.214 port 40 ...
show moreJul 6 03:43:57 do1 sshd[1511249]: Disconnected from authenticating user root 94.138.209.214 port 40304 [preauth]
Jul 6 03:45:44 do1 sshd[1513507]: Disconnected from authenticating user root 94.138.209.214 port 43518 [preauth]
Jul 6 03:47:27 do1 sshd[1514561]: Disconnected from authenticating user mailman 94.138.209.214 port 53890 [preauth]
Jul 6 03:49:07 do1 sshd[1515347]: Invalid user edna from 94.138.209.214 port 56928
Jul 6 03:49:07 do1 sshd[1515347]: Disconnected from invalid user edna 94.138.209.214 port 56928 [preauth]
...
show less
2026-07-06T09:30:07.193590+02:00 ns3006402 sshd[731785]: Failed password for invalid user admin from ...
show more2026-07-06T09:30:07.193590+02:00 ns3006402 sshd[731785]: Failed password for invalid user admin from 94.138.209.214 port 53874 ssh2
2026-07-06T09:43:35.439917+02:00 ns3006402 sshd[733993]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.138.209.214 user=root
2026-07-06T09:43:37.339953+02:00 ns3006402 sshd[733993]: Failed password for root from 94.138.209.214 port 50622 ssh2
...
show less
2026-07-06T08:58:05.028809+02:00 lufischer04 sshd[3392479]: Invalid user newuser from 94.138.209.214 ...
show more2026-07-06T08:58:05.028809+02:00 lufischer04 sshd[3392479]: Invalid user newuser from 94.138.209.214 port 33748
2026-07-06T08:59:43.012503+02:00 lufischer04 sshd[3394038]: Invalid user test from 94.138.209.214 port 34566
2026-07-06T09:06:02.188124+02:00 lufischer04 sshd[3401038]: Invalid user teamspeak3 from 94.138.209.214 port 55140
2026-07-06T09:10:41.773426+02:00 lufischer04 sshd[3406721]: Invalid user minecraft from 94.138.209.214 port 45516
2026-07-06T09:15:39.503665+02:00 lufischer04 sshd[3412514]: Invalid user developer from 94.138.209.214 port 33380
...
show less
(sshd) Failed SSH login from 94.138.209.214 (TR/Türkiye/-): 3 in the last 3600 secs; IP: 94.138.209. ...
show more(sshd) Failed SSH login from 94.138.209.214 (TR/Türkiye/-): 3 in the last 3600 secs; IP: 94.138.209.214; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jul 6 08:57:30 debian sshd[2011252]: Invalid user newuser from 94.138.209.214 port 33554 Jul 6 08:59:07 debian sshd[2012253]: Invalid user test from 94.138.209.214 port 35202 Jul 6 09:05:28 debian sshd[2016715]: Invalid user teamspeak3 from 94.138.209.214 port 40444
show less
2026-07-06T06:57:56.405787+00:00 NBG-VS01-WebServer sshd-session[661219]: Invalid user newuser from ...
show more2026-07-06T06:57:56.405787+00:00 NBG-VS01-WebServer sshd-session[661219]: Invalid user newuser from 94.138.209.214 port 59414
2026-07-06T06:57:56.415394+00:00 NBG-VS01-WebServer sshd-session[661219]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.138.209.214
2026-07-06T06:57:57.934690+00:00 NBG-VS01-WebServer sshd-session[661219]: Failed password for invalid user newuser from 94.138.209.214 port 59414 ssh2
...
show less
2026-07-06T05:03:51.179909+00:00 [SERVER] sshd-session[278873]: Invalid user guest from 94.138.209.2 ...
show more2026-07-06T05:03:51.179909+00:00 [SERVER] sshd-session[278873]: Invalid user guest from 94.138.209.214 port 42388
2026-07-06T05:03:51.390530+00:00 [SERVER] sshd-session[278873]: Disconnected from invalid user guest 94.138.209.214 port 42388 [preauth]
2026-07-06T05:16:46.317816+00:00 [SERVER] sshd-session[279596]: Disconnected from authenticating user [USER] 94.138.209.214 port 34948 [preauth]
show less
Jul 6 07:09:23 zurich-2 sshd[3003329]: Invalid user guest from 94.138.209.214 port 52662
Jul 6 07: ...
show moreJul 6 07:09:23 zurich-2 sshd[3003329]: Invalid user guest from 94.138.209.214 port 52662
Jul 6 07:09:23 zurich-2 sshd[3003329]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.138.209.214
Jul 6 07:09:25 zurich-2 sshd[3003329]: Failed password for invalid user guest from 94.138.209.214 port 52662 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 280 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩