This IP address has been reported a total of
125
times from
72 distinct
sources.
94.182.149.20 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
2026-07-28T08:28:02.230014+02:00 arm-fr sshd[1197353]: Invalid user amin from 94.182.149.20 port 464 ...
show more2026-07-28T08:28:02.230014+02:00 arm-fr sshd[1197353]: Invalid user amin from 94.182.149.20 port 46494
2026-07-28T08:30:25.823277+02:00 arm-fr sshd[1198281]: Invalid user user from 94.182.149.20 port 39958
2026-07-28T08:32:45.198300+02:00 arm-fr sshd[1199211]: Invalid user yangfan from 94.182.149.20 port 54230
...
show less
2026-07-28T07:39:35.498488+02:00 dedi111 sshd-session[1033411]: Invalid user pakklef from 94.182.149 ...
show more2026-07-28T07:39:35.498488+02:00 dedi111 sshd-session[1033411]: Invalid user pakklef from 94.182.149.20 port 55066
2026-07-28T07:41:52.736744+02:00 dedi111 sshd-session[1034289]: Invalid user vp from 94.182.149.20 port 40914
2026-07-28T07:44:11.521676+02:00 dedi111 sshd-session[1035197]: Invalid user ada from 94.182.149.20 port 44130
2026-07-28T07:46:27.283613+02:00 dedi111 sshd-session[1036042]: Invalid user oracle from 94.182.149.20 port 42790
2026-07-28T07:48:48.458319+02:00 dedi111 sshd-session[1036957]: Invalid user roi from 94.182.149.20 port 51326
...
show less
2026-07-28T02:19:01.123498webserver sshd[58421]: Failed password for root from 94.182.149.20 port 59 ...
show more2026-07-28T02:19:01.123498webserver sshd[58421]: Failed password for root from 94.182.149.20 port 59220 ssh2
2026-07-28T02:21:16.598556webserver sshd[390]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.182.149.20 user=root
2026-07-28T02:21:18.979163webserver sshd[390]: Failed password for root from 94.182.149.20 port 55298 ssh2
...
show less
Disconnected from authenticating user root 94.182.149.20 port 39206 [preauth]
Disconnected from auth ...
show moreDisconnected from authenticating user root 94.182.149.20 port 39206 [preauth]
Disconnected from authenticating user root 94.182.149.20 port 42408 [preauth]
Disconnected from authenticating user root 94.182.149.20 port 42408 [preauth]
show less
Disconnected from invalid user unix 94.182.149.20 port 59000 [preauth]
Invalid user ltq from 94.182. ...
show moreDisconnected from invalid user unix 94.182.149.20 port 59000 [preauth]
Invalid user ltq from 94.182.149.20 port 50960
Invalid user ltq from 94.182.149.20 port 50960
Disconnected from invalid user ltq 94.182.149.20 port 50960 [preauth]
Disconnected from invalid user ltq 94.182.149.20 port 50960 [preauth]
show less
Invalid user devskimver from 94.182.149.20 port 35106
Disconnected from invalid user devskimver 94.1 ...
show moreInvalid user devskimver from 94.182.149.20 port 35106
Disconnected from invalid user devskimver 94.182.149.20 port 35106 [preauth]
Invalid user bsp from 94.182.149.20 port 39426
Disconnected from invalid user bsp 94.182.149.20 port 39426 [preauth]
Invalid user unix from 94.182.149.20 port 59000
show less
CSF/LFD blocked 94.182.149.20 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH ...
show moreCSF/LFD blocked 94.182.149.20 after LF_SSHD on * (inout, perm=1, ttl=1s). Reason: (sshd) Failed SSH login from 94.182.149.20 (IR/Iran/94-182-149-20.shatel.ir): 5 in the last 3600 secs. Evidence: Jul 27 23:10:27 paladin sshd-session[1454974]: Invalid user devskimver from 94.182.149.20 port 52444
show less
2026-07-28T01:09:19.279772webserver sshd[46051]: Invalid user devskimver from 94.182.149.20 port 556 ...
show more2026-07-28T01:09:19.279772webserver sshd[46051]: Invalid user devskimver from 94.182.149.20 port 55612
2026-07-28T01:09:21.349199webserver sshd[46051]: Failed password for invalid user devskimver from 94.182.149.20 port 55612 ssh2
2026-07-28T01:17:32.983973webserver sshd[5332]: Invalid user bsp from 94.182.149.20 port 41196
...
show less
Brute-Force
SSH
Showing 1 to
15
of 125 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩