This IP address has been reported a total of
117
times from
87 distinct
sources.
94.159.109.105 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Automated report: SSH brute force detected. This IP exceeded the allowed number of failed login atte ...
show moreAutomated report: SSH brute force detected. This IP exceeded the allowed number of failed login attempts (3 attempts).
show less
2026-05-31T22:51:12.887438+00:00 ubuntu-4gb-hel1-1 sshd[3638619]: Invalid user ftpmedia from 94.159. ...
show more2026-05-31T22:51:12.887438+00:00 ubuntu-4gb-hel1-1 sshd[3638619]: Invalid user ftpmedia from 94.159.109.105 port 51928
2026-05-31T22:51:12.921289+00:00 ubuntu-4gb-hel1-1 sshd[3638619]: Disconnected from invalid user ftpmedia 94.159.109.105 port 51928 [preauth]
2026-05-31T22:53:31.094880+00:00 ubuntu-4gb-hel1-1 sshd[3638737]: Disconnected from authenticating user root 94.159.109.105 port 58122 [preauth]
2026-05-31T22:55:52.075225+00:00 ubuntu-4gb-hel1-1 sshd[3638818]: Invalid user info from 94.159.109.105 port 45756
2026-05-31T22:55:52.109937+00:00 ubuntu-4gb-hel1-1 sshd[3638818]: Disconnected from invalid user info 94.159.109.105 port 45756 [preauth]
...
show less
(sshd) Failed SSH login from 94.159.109.105 (DE/Germany/117706.h2.nexus): 5 in the last 3600 secs; P ...
show more(sshd) Failed SSH login from 94.159.109.105 (DE/Germany/117706.h2.nexus): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 31 17:40:21 15851 sshd[21225]: Invalid user lemon from 94.159.109.105 port 34174
May 31 17:40:23 15851 sshd[21225]: Failed password for invalid user lemon from 94.159.109.105 port 34174 ssh2
May 31 17:51:04 15851 sshd[27522]: Invalid user ftpmedia from 94.159.109.105 port 33454
May 31 17:51:07 15851 sshd[27522]: Failed password for invalid user ftpmedia from 94.159.109.105 port 33454 ssh2
May 31 17:53:23 15851 sshd[28776]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
show less
2026-05-31T21:34:28.536141+00:00 mercury.fsmail.org.uk sshd-session[414794]: Failed password for roo ...
show more2026-05-31T21:34:28.536141+00:00 mercury.fsmail.org.uk sshd-session[414794]: Failed password for root from 94.159.109.105 port 53540 ssh2
2026-05-31T21:36:48.912627+00:00 mercury.fsmail.org.uk sshd-session[414820]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
2026-05-31T21:36:50.931159+00:00 mercury.fsmail.org.uk sshd-session[414820]: Failed password for root from 94.159.109.105 port 37448 ssh2
...
show less
[Fail2Ban:sshd-sensitive] 2026-05-31T23:29:01.600829+02:00 server sshd[3523918]: Failed password for ...
show more[Fail2Ban:sshd-sensitive] 2026-05-31T23:29:01.600829+02:00 server sshd[3523918]: Failed password for invalid user oracle from 94.159.109.105 port 36502 ssh2 2026-05-31T23:33:29.803442+02:00 server sshd[3527764]: Failed password for root from 94.159.109.105 port 53996 ssh2 2026-05-31T23:35:56.861816+02:00 server sshd[3529832]: Failed password for root from 94.159.109.105 port 49014 ssh2
show less
2026-05-31T23:13:54.220083+02:00 dnsguard-vps sshd[92408]: Failed password for invalid user deploy f ...
show more2026-05-31T23:13:54.220083+02:00 dnsguard-vps sshd[92408]: Failed password for invalid user deploy from 94.159.109.105 port 45684 ssh2
2026-05-31T23:16:29.643033+02:00 dnsguard-vps sshd[95634]: Invalid user roberto from 94.159.109.105 port 33038
2026-05-31T23:16:29.645985+02:00 dnsguard-vps sshd[95634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105
2026-05-31T23:16:31.620331+02:00 dnsguard-vps sshd[95634]: Failed password for invalid user roberto from 94.159.109.105 port 33038 ssh2
2026-05-31T23:19:13.442966+02:00 dnsguard-vps sshd[98869]: Invalid user maximo from 94.159.109.105 port 38616
...
show less
2026-05-31T22:57:37.662807+02:00 dnsguard-vps sshd[72556]: Failed password for invalid user moodle f ...
show more2026-05-31T22:57:37.662807+02:00 dnsguard-vps sshd[72556]: Failed password for invalid user moodle from 94.159.109.105 port 38472 ssh2
2026-05-31T23:00:11.056276+02:00 dnsguard-vps sshd[75714]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
2026-05-31T23:00:13.296730+02:00 dnsguard-vps sshd[75714]: Failed password for root from 94.159.109.105 port 36068 ssh2
2026-05-31T23:02:54.932923+02:00 dnsguard-vps sshd[79412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
2026-05-31T23:02:56.686583+02:00 dnsguard-vps sshd[79412]: Failed password for root from 94.159.109.105 port 51852 ssh2
...
show less
(sshd) Failed SSH login from 94.159.109.105 (DE/Germany/117706.h2.nexus): 5 in the last 3600 secs; P ...
show more(sshd) Failed SSH login from 94.159.109.105 (DE/Germany/117706.h2.nexus): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 31 14:54:23 17885 sshd[13748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
May 31 14:54:26 17885 sshd[13748]: Failed password for root from 94.159.109.105 port 42580 ssh2
May 31 15:05:18 17885 sshd[20064]: Invalid user sftpuser from 94.159.109.105 port 50710
May 31 15:05:20 17885 sshd[20064]: Failed password for invalid user sftpuser from 94.159.109.105 port 50710 ssh2
May 31 15:07:39 17885 sshd[21347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.159.109.105 user=root
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T18:24:05Z and 2026-05-3 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-05-31T18:24:05Z and 2026-05-31T20:03:31Z
show less