This IP address has been reported a total of
59
times from
46 distinct
sources.
94.204.5.49 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
United States of America
with 11
reports;
Singapore
with 9
reports;
Germany
with 6
reports.
The most common categories in these recent reports were:
Brute-Force
50
times;
SSH
43
times;
Port Scan
7
times;
Hacking
5
times;
Web App Attack
4
times;
Other
2
times.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-10-07T07:01:54.383949-06:00 b146-02 sshd[3178239]: pam_unix(sshd:auth): authentication failure; ...
show more2026-10-07T07:01:54.383949-06:00 b146-02 sshd[3178239]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.204.5.49 user=root
2026-10-07T07:01:56.260267-06:00 b146-02 sshd[3178239]: Failed password for invalid user root from 94.204.5.49 port 36462 ssh2
2026-10-07T07:01:58.423821-06:00 b146-02 sshd[3178245]: User root from 94.204.5.49 not allowed because none of user's groups are listed in AllowGroups
...
show less
2026-10-06T22:28:55.676407+00:00 marcelrobitaille.me sshd-session[124952]: Invalid user user from 94 ...
show more2026-10-06T22:28:55.676407+00:00 marcelrobitaille.me sshd-session[124952]: Invalid user user from 94.204.5.49 port 51072
2026-10-06T22:28:56.942173+00:00 marcelrobitaille.me sshd-session[124954]: Invalid user user from 94.204.5.49 port 51088
2026-10-06T22:28:58.290959+00:00 marcelrobitaille.me sshd-session[124956]: Invalid user user from 94.204.5.49 port 51100
...
show less
2026-10-06T20:25:55.554104+00:00 pastoralgrowth sshd[138031]: Failed password for root from 94.204.5 ...
show more2026-10-06T20:25:55.554104+00:00 pastoralgrowth sshd[138031]: Failed password for root from 94.204.5.49 port 54482 ssh2
2026-10-06T20:25:55.659749+00:00 pastoralgrowth sshd[138031]: error: maximum authentication attempts exceeded for root from 94.204.5.49 port 54482 ssh2 [preauth]
...
show less
2026-10-06T19:16:17.488853+02:00 chnode1 sshd[811061]: Invalid user user from 94.204.5.49 port 41378 ...
show more2026-10-06T19:16:17.488853+02:00 chnode1 sshd[811061]: Invalid user user from 94.204.5.49 port 41378
2026-10-06T19:16:18.382283+02:00 chnode1 sshd[811281]: Invalid user user from 94.204.5.49 port 41386
2026-10-06T19:16:19.269253+02:00 chnode1 sshd[811923]: Invalid user user from 94.204.5.49 port 41398
2026-10-06T19:16:20.120163+02:00 chnode1 sshd[811996]: Invalid user user from 94.204.5.49 port 41400
2026-10-06T19:16:20.984427+02:00 chnode1 sshd[811998]: Invalid user user from 94.204.5.49 port 41416
...
show less
Oct 6 16:13:07 ***** sshd[3727775]: User root from 94.204.5.49 not allowed because not listed in Al ...
show moreOct 6 16:13:07 ***** sshd[3727775]: User root from 94.204.5.49 not allowed because not listed in AllowUsers
show less
Banned by Multi Agent · node …18dc · attempts=5 · SSH brute-force / scan
Brute-Force
SSH
Anonymous
Oct 6 08:10:30 vm50 sshd[29975]: Invalid user user from 94.204.5.49 port 39302
Oct 6 08:10:30 vm50 ...
show moreOct 6 08:10:30 vm50 sshd[29975]: Invalid user user from 94.204.5.49 port 39302
Oct 6 08:10:30 vm50 sshd[29975]: Connection closed by invalid user user 94.204.5.49 port 39302 [preauth]
Oct 6 08:10:30 vm50 sshd[29981]: Connection from 94.204.5.49 port 39308 on 103.3.61.195 port 22 rdomain ""
Oct 6 08:10:31 vm50 sshd[29981]: Invalid user user from 94.204.5.49 port 39308
Oct 6 08:10:31 vm50 sshd[29981]: Connection closed by invalid user user 94.204.5.49 port 39308 [preauth]
...
show less
Brute-Force
SSH
Anonymous
Oct 6 07:48:45 vm50 sshd[28872]: Connection from 94.204.5.49 port 58832 on 103.3.61.195 port 22 rdo ...
show moreOct 6 07:48:45 vm50 sshd[28872]: Connection from 94.204.5.49 port 58832 on 103.3.61.195 port 22 rdomain ""
Oct 6 07:48:46 vm50 sshd[28872]: Connection closed by authenticating user root 94.204.5.49 port 58832 [preauth]
Oct 6 07:48:46 vm50 sshd[28874]: Connection from 94.204.5.49 port 58838 on 103.3.61.195 port 22 rdomain ""
Oct 6 07:48:47 vm50 sshd[28874]: Invalid user user from 94.204.5.49 port 58838
Oct 6 07:48:47 vm50 sshd[28874]: Connection closed by invalid user user 94.204.5.49 port 58838 [preauth]
...
show less
