This IP address has been reported a total of
6
times from
6 distinct
sources.
94.205.20.245 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Australia
with 1
report;
Belgium
with 1
report;
Germany
with 1
report.
The most common categories in these recent reports were:
Brute-Force
2
times;
Web App Attack
2
times;
Exploited Host
1
time;
SSH
1
time;
Port Scan
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
94.205.20.245 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last ...
show more94.205.20.245 (AE/United Arab Emirates/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct 4 00:05:35 syd2 sshd[1511959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.255.135.121 user=root
Oct 4 00:05:37 syd2 sshd[1511959]: Failed password for root from 197.255.135.121 port 36169 ssh2
Oct 4 00:05:59 syd2 sshd[1511991]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=39.55.186.66 user=root
Oct 4 00:05:03 syd2 sshd[1511725]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.205.20.245 user=root
Oct 4 00:05:05 syd2 sshd[1511725]: Failed password for root from 94.205.20.245 port 58001 ssh2
IP Addresses Blocked:
197.255.135.121 (CV/Cabo Verde/-)
39.55.186.66 (PK/Pakistan/-)
show less
SSH credential brute-force observed by honeypot.
Source IP: 94.205.20.245
Targeted device: DVR
First ...
show moreSSH credential brute-force observed by honeypot.
Source IP: 94.205.20.245
Targeted device: DVR
First seen: 28 Sep 2026 17:37:03 UTC
Last seen: 28 Sep 2026 17:37:03 UTC
Attempts: 1
Client: SSH-2.0-Go
Sample credentials: ubnt:ubnt
show less
Attack Signature Blocked: /wishlist/index/add/product/6046/form_key/4pvc2LzLZfJOQ5m9/img/graphic.jpg ...
show moreAttack Signature Blocked: /wishlist/index/add/product/6046/form_key/4pvc2LzLZfJOQ5m9/img/graphic.jpg (Magento Site) (Botnet activity attributed to: Angara Technologies Group / mikhail-smirnov-79830322)
show less
Web App Attack
Bad Web Bot
Showing 1 to
6
of 6 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
