This IP address has been reported a total of
28
times from
28 distinct
sources.
95.98.59.198 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Attempts to login to mail server with wrong username and/or password
Brute-Force
Anonymous
2026-07-01T07:09:32.839049+02:00 svr10 sshd[106174]: Connection closed by authenticating user root 9 ...
show more2026-07-01T07:09:32.839049+02:00 svr10 sshd[106174]: Connection closed by authenticating user root 95.98.59.198 port 41980 [preauth]
2026-07-01T07:09:33.078702+02:00 svr10 sshd[106176]: Connection closed by authenticating user root 95.98.59.198 port 41982 [preauth]
2026-07-01T07:09:33.224482+02:00 svr10 sshd[106178]: Connection closed by authenticating user root 95.98.59.198 port 41990 [preauth]
...
show less
Honeypot bot from NL: 9 SSH login attempts; 1 commands executed; first 2026-06-30 11:57:25, last 202 ...
show moreHoneypot bot from NL: 9 SSH login attempts; 1 commands executed; first 2026-06-30 11:57:25, last 2026-06-30 11:58:02
show less
Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS ...
show moreVerified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT | PORTS=22 | HITS=2 | IPSET=ADD | FIRST=2026-07-01 04:46:18 | LAST=2026-07-01 04:46:19. Last seen 2026-07-01 04:46:19.
show less
Jun 30 23:33:39 gx1 sshd[319990]: Invalid user user from 95.98.59.198 port 55162
Jun 30 23:33:40 gx1 ...
show moreJun 30 23:33:39 gx1 sshd[319990]: Invalid user user from 95.98.59.198 port 55162
Jun 30 23:33:40 gx1 sshd[319992]: Invalid user user from 95.98.59.198 port 55178
Jun 30 23:33:41 gx1 sshd[319994]: Invalid user user from 95.98.59.198 port 55190
...
show less
Jul 1 09:22:24 main-frount sshd[1184562]: Invalid user user from 95.98.59.198 port 40216
Jul 1 09: ...
show moreJul 1 09:22:24 main-frount sshd[1184562]: Invalid user user from 95.98.59.198 port 40216
Jul 1 09:22:34 main-frount sshd[1184564]: Invalid user user from 95.98.59.198 port 40222
Jul 1 09:22:35 main-frount sshd[1184567]: Invalid user user from 95.98.59.198 port 52930
Jul 1 09:22:37 main-frount sshd[1184570]: Invalid user user from 95.98.59.198 port 52942
Jul 1 09:22:39 main-frount sshd[1184573]: Invalid user user from 95.98.59.198 port 47260
...
show less
Jun 30 23:30:57 [redacted] sshd[640531]: Connection closed by invalid user user 95.98.59.198 port 33 ...
show moreJun 30 23:30:57 [redacted] sshd[640531]: Connection closed by invalid user user 95.98.59.198 port 33910 [preauth]
Jun 30 23:30:57 [redacted] sshd[640533]: Invalid user user from 95.98.59.198 port 33912
Jun 30 23:30:57 [redacted] sshd[640533]: Connection closed by invalid user user 95.98.59.198 port 33912 [preauth]
show less
2026-06-30T19:46:42.229511+02:00 node1 sshd-session[4186039]: Failed password for root from 95.98.59 ...
show more2026-06-30T19:46:42.229511+02:00 node1 sshd-session[4186039]: Failed password for root from 95.98.59.198 port 42428 ssh2
2026-06-30T19:46:43.103675+02:00 node1 sshd-session[4186929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.98.59.198 user=root
2026-06-30T19:46:45.801395+02:00 node1 sshd-session[4186929]: Failed password for root from 95.98.59.198 port 42434 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 28 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩