Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-14T02:10:09.348177+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:12.607734+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:14.931286 ...
show more2026-11-14T02:10:09.348177+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:12.607734+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:14.931286+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:17.059216+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
2026-11-14T02:10:21.652142+02:00 tff sshd[241353]: Failed password for root from 95.220.201.162 port 35516 ssh2
...
show less
2026-11-13T19:37:49.905025shield sshd\[19412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.220.201.162 user=root
2026-11-13T19:37:52.222642shield sshd\[19412\]: Failed password for root from 95.220. ...
show more2026-11-13T19:37:49.905025shield sshd\[19412\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.220.201.162 user=root
2026-11-13T19:37:52.222642shield sshd\[19412\]: Failed password for root from 95.220.201.162 port 36088 ssh2
2026-11-13T19:37:54.425413shield sshd\[19412\]: Failed password for root from 95.220.201.162 port 36088 ssh2
2026-11-13T19:37:56.562341shield sshd\[19412\]: Failed password for root from 95.220.201.162 port 36088 ssh2
2026-11-13T19:37:59.004569shield sshd\[19412\]: Failed password for root from 95.220.201.162 port 36088 ssh2
show less
2026-11-13T18:36:28.241763 precms1-b sshd[68269]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 34352 ssh2 [preauth]
2026-11-13T18:36:30.693760 precms1-b sshd[68271]: error: maximum authentication attempts exceeded ...
show more2026-11-13T18:36:28.241763 precms1-b sshd[68269]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 34352 ssh2 [preauth]
2026-11-13T18:36:30.693760 precms1-b sshd[68271]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 34532 ssh2 [preauth]
2026-11-13T18:36:38.788548 precms1-b sshd[68273]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 34660 ssh2 [preauth]
...
show less
2026-11-13T19:05:18.213679 chaos.ohost.bg sshd[3963582]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 45908 ssh2 [preauth]
2026-11-13T19:05:23.734565 chaos.ohost.bg sshd[3966356]: error: maximum authentication att ...
show more2026-11-13T19:05:18.213679 chaos.ohost.bg sshd[3963582]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 45908 ssh2 [preauth]
2026-11-13T19:05:23.734565 chaos.ohost.bg sshd[3966356]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 46148 ssh2 [preauth]
2026-11-13T19:05:28.339969 chaos.ohost.bg sshd[3969787]: error: maximum authentication attempts exceeded for root from 95.220.201.162 port 46434 ssh2 [preauth]
2026-11-13T19:05:39.505937 chaos.ohost.bg sshd[3975277]: Invalid user admin from 95.220.201.162 port 46918
2026-11-13T19:05:39.934787 chaos.ohost.bg sshd[3975277]: error: maximum authentication attempts exceeded for invalid user admin from 95.220.201.162 port 46918 ssh2 [preauth]
...
show less
SSH Brute force: 32 attempts were recorded from 95.220.201.162
2026-11-12T16:17:13+0100 Connection closed by authenticating user root 95.220.201.162 [preauth]
2026-11-12T16:17:19+0100 Connection closed by authenticating user root 95.220.201.162 [prea ...
show moreSSH Brute force: 32 attempts were recorded from 95.220.201.162
2026-11-12T16:17:13+0100 Connection closed by authenticating user root 95.220.201.162 [preauth]
2026-11-12T16:17:19+0100 Connection closed by authenticating user root 95.220.201.162 [preauth]
2026-11-12T16:17:25+0100 Connection closed by authenticating user root 95.220.201.162 [preauth]
2026-11-12T16:17:30+0100 Connection closed by authenticating user root 95.220.201.162 [preauth]
2026-11-12T16:17:36+0100 Invalid user admin from 95.220.201.162
2026-11-12T16:17:42+0100 Invalid user admin from 95.220.201.162
2026-11-12T16:17:52+0100 Invalid user admin from 95.220.201.162
2026-11-12T16:17:59+0100 Invalid user ubuntu from 95.220.201.162
2026-11-12T16:18:05+0100 Invalid user ubuntu from 95.220.201.162
2026-11-12T16:18:11+0100 Invalid user ubuntu from 95.220.201.162
2026-11-12T16:18:17+0100 Invalid user test from 95.220.201.162
202
show less
Nov 12 14:32:49 altux6 sshd\[26027\]: User root from 95.220.201.162 not allowed because not listed in AllowUsers
Nov 12 14:32:49 altux6 sshd\[26027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.220.2 ...
show moreNov 12 14:32:49 altux6 sshd\[26027\]: User root from 95.220.201.162 not allowed because not listed in AllowUsers
Nov 12 14:32:49 altux6 sshd\[26027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.220.201.162 user=root
Nov 12 14:32:51 altux6 sshd\[26027\]: Failed password for invalid user root from 95.220.201.162 port 58452 ssh2
...
show less
Brute-Force
SSH
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown