This IP address has been reported a total of
115
times from
89 distinct
sources.
94.70.195.157 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-01T20:44:44.123988+02:00 mail sshd-session[1670969]: Failed password for root from 94.70.195 ...
show more2026-06-01T20:44:44.123988+02:00 mail sshd-session[1670969]: Failed password for root from 94.70.195.157 port 50972 ssh2
2026-06-01T20:44:47.168591+02:00 mail sshd-session[1670972]: Failed password for root from 94.70.195.157 port 51492 ssh2
2026-06-01T20:44:50.416789+02:00 mail sshd-session[1670976]: Failed password for root from 94.70.195.157 port 51498 ssh2
2026-06-01T20:44:54.940961+02:00 mail sshd-session[1670978]: Failed password for root from 94.70.195.157 port 51500 ssh2
2026-06-01T20:44:59.488118+02:00 mail sshd-session[1670981]: Failed password for root from 94.70.195.157 port 52456 ssh2
...
show less
2026-06-01T18:57:59.423096+02:00 gw-de02-01.guestgw.net sshd[947125]: Connection closed by authentic ...
show more2026-06-01T18:57:59.423096+02:00 gw-de02-01.guestgw.net sshd[947125]: Connection closed by authenticating user root 94.70.195.157 port 51588 [preauth]
2026-06-01T18:57:59.765634+02:00 gw-de02-01.guestgw.net sshd[947127]: Connection closed by authenticating user root 94.70.195.157 port 36252 [preauth]
2026-06-01T18:58:00.105529+02:00 gw-de02-01.guestgw.net sshd[947131]: Connection closed by authenticating user root 94.70.195.157 port 36258 [preauth]
2026-06-01T18:58:00.440870+02:00 gw-de02-01.guestgw.net sshd[947133]: Connection closed by authenticating user root 94.70.195.157 port 36260 [preauth]
2026-06-01T18:58:00.778423+02:00 gw-de02-01.guestgw.net sshd[947136]: Connection closed by authenticating user root 94.70.195.157 port 36272 [preauth]
show less
2026-06-01T17:00:01.146641+03:00 Vless sshd-session[799771]: Failed password for root from 94.70.195 ...
show more2026-06-01T17:00:01.146641+03:00 Vless sshd-session[799771]: Failed password for root from 94.70.195.157 port 40642 ssh2
2026-06-01T17:00:02.722348+03:00 Vless sshd-session[799774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.195.157 user=root
2026-06-01T17:00:04.375497+03:00 Vless sshd-session[799774]: Failed password for root from 94.70.195.157 port 45740 ssh2
...
show less
Jun 1 18:57:09 pve-hkg1 sshd[1092076]: Failed password for root from 94.70.195.157 port 50548 ssh2
...
show moreJun 1 18:57:09 pve-hkg1 sshd[1092076]: Failed password for root from 94.70.195.157 port 50548 ssh2
Jun 1 18:57:12 pve-hkg1 sshd[1093195]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.195.157 user=root
Jun 1 18:57:14 pve-hkg1 sshd[1093195]: Failed password for root from 94.70.195.157 port 48478 ssh2
Jun 1 18:57:17 pve-hkg1 sshd[1093605]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.195.157 user=root
Jun 1 18:57:19 pve-hkg1 sshd[1093605]: Failed password for root from 94.70.195.157 port 48484 ssh2
...
show less
(sshd) Failed SSH login from 94.70.195.157 (GR/Greece/host13.ow1rdu.ondsl.gr): 5 in the last 3600 se ...
show more(sshd) Failed SSH login from 94.70.195.157 (GR/Greece/host13.ow1rdu.ondsl.gr): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: May 31 14:06:30 14407 sshd[2855]: Did not receive identification string from 94.70.195.157 port 49614
May 31 14:06:31 14407 sshd[2857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.195.157 user=root
May 31 14:06:33 14407 sshd[2857]: Failed password for root from 94.70.195.157 port 49630 ssh2
May 31 14:06:34 14407 sshd[2912]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.70.195.157 user=root
May 31 14:06:36 14407 sshd[2912]: Failed password for root from 94.70.195.157 port 49640 ssh2
show less
Brute-Force
SSH
Showing 61 to
75
of 115 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ