This IP address has been reported a total of
53
times from
52 distinct
sources.
134.199.165.72 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH Brute force: 21 attempts were recorded from 134.199.165.72
2026-07-26T22:16:32+02:00 Invalid use ...
show moreSSH Brute force: 21 attempts were recorded from 134.199.165.72
2026-07-26T22:16:32+02:00 Invalid user sql from 134.199.165.72 port 33386
2026-07-26T22:19:45+02:00 Connection closed by authenticating user root 134.199.165.72 port 59496 [preauth]
2026-07-26T22:23:06+02:00 Invalid user gitrun from 134.199.165.72 port 41760
2026-07-26T22:26:23+02:00 Connection closed by authenticating user root 134.199.165.72 port 39828 [preauth]
2026-07-26T22:29:32+02:00 Connection closed by authenticating user root 134.199.165.72 port 42534 [preauth]
2026-07-26T22:32:47+02:00 Connection closed by authenticating user root 134.199.165.72 port 38730 [preauth]
2026-07-26T22:36:05+02:00 Connection closed by authenticating user root 134.199.165.72 port 35094 [preauth]
2026-07-26T22:16:06+02:00 Invalid user sql from 134.199.165.72 port 33960
2026-07-26T22:19:17+02:00 Connection closed by authenticating user root
show less
Automated sensor: 37 SSH brute-force attempts over the last 24h (latest 2026-07-26T20:34Z). Username ...
show moreAutomated sensor: 37 SSH brute-force attempts over the last 24h (latest 2026-07-26T20:34Z). Usernames tried: root, gitrun, sql.
show less
Brute-Force
SSH
Anonymous
suricata IPS/IDS detection, ruleset ET SCAN Potential SSH Scan
2026-07-26T22:20:33.848520 pclab24.pl sshd[3689395]: Failed password for root from 134.199.165.72 po ...
show more2026-07-26T22:20:33.848520 pclab24.pl sshd[3689395]: Failed password for root from 134.199.165.72 port 38234 ssh2
2026-07-26T22:23:54.155601 pclab24.pl sshd[3690013]: Connection from 134.199.165.72 port 52656 on 10.10.0.5 port 22
2026-07-26T22:23:55.298005 pclab24.pl sshd[3690013]: Invalid user gitrun from 134.199.165.72 port 52656
2026-07-26T22:23:55.584239 pclab24.pl sshd[3690013]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.165.72
2026-07-26T22:23:57.287128 pclab24.pl sshd[3690013]: Failed password for invalid user gitrun from 134.199.165.72 port 52656 ssh2
...
show less
SSH
Anonymous
Jul 27 04:17:07 vm53 sshd[449487]: Connection closed by invalid user sql 134.199.165.72 port 56562 [ ...
show moreJul 27 04:17:07 vm53 sshd[449487]: Connection closed by invalid user sql 134.199.165.72 port 56562 [preauth]
Jul 27 04:20:21 vm53 sshd[449519]: Connection from 134.199.165.72 port 36504 on 139.162.43.234 port 22 rdomain ""
Jul 27 04:20:22 vm53 sshd[449519]: Connection closed by authenticating user root 134.199.165.72 port 36504 [preauth]
Jul 27 04:23:44 vm53 sshd[449691]: Connection from 134.199.165.72 port 49486 on 139.162.43.234 port 22 rdomain ""
Jul 27 04:23:44 vm53 sshd[449691]: Invalid user gitrun from 134.199.165.72 port 49486
Jul 27 04:23:44 vm53 sshd[449691]: Connection closed by invalid user gitrun 134.199.165.72 port 49486 [preauth]
...
show less
Brute-Force
SSH
Anonymous
2026-07-26T22:16:40+02:00 exit-1 sshd[90227]: Failed password for invalid user sql from 134.199.165. ...
show more2026-07-26T22:16:40+02:00 exit-1 sshd[90227]: Failed password for invalid user sql from 134.199.165.72 port 48932 ssh2
2026-07-26T22:19:51+02:00 exit-1 sshd[90253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.165.72 user=root
2026-07-26T22:19:52+02:00 exit-1 sshd[90253]: Failed password for root from 134.199.165.72 port 35558 ssh2
2026-07-26T22:23:12+02:00 exit-1 sshd[90261]: Invalid user gitrun from 134.199.165.72 port 42580
...
show less
2026-07-26T22:13:25.221011+02:00 gw-de35-01.guestgw.net sshd[438314]: Connection closed by 134.199.1 ...
show more2026-07-26T22:13:25.221011+02:00 gw-de35-01.guestgw.net sshd[438314]: Connection closed by 134.199.165.72 port 60836
2026-07-26T22:16:35.611122+02:00 gw-de35-01.guestgw.net sshd[439247]: Invalid user sql from 134.199.165.72 port 33270
2026-07-26T22:16:35.905042+02:00 gw-de35-01.guestgw.net sshd[439247]: Connection closed by invalid user sql 134.199.165.72 port 33270 [preauth]
2026-07-26T22:19:48.774947+02:00 gw-de35-01.guestgw.net sshd[440160]: Connection closed by authenticating user root 134.199.165.72 port 35282 [preauth]
2026-07-26T22:23:10.166265+02:00 gw-de35-01.guestgw.net sshd[441292]: Invalid user gitrun from 134.199.165.72 port 50800
show less
2026-07-26T20:16:15.075766+00:00 r4ym0nd sshd-session[276745]: Failed password for invalid user sql ...
show more2026-07-26T20:16:15.075766+00:00 r4ym0nd sshd-session[276745]: Failed password for invalid user sql from 134.199.165.72 port 55510 ssh2
2026-07-26T20:19:23.260483+00:00 r4ym0nd sshd-session[276785]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.165.72 user=root
2026-07-26T20:19:24.976883+00:00 r4ym0nd sshd-session[276785]: Failed password for root from 134.199.165.72 port 56922 ssh2
2026-07-26T20:22:43.695263+00:00 r4ym0nd sshd-session[276823]: Invalid user gitrun from 134.199.165.72 port 59614
...
show less
2026-07-26T20:15:53.284741+00:00 bastionez sshd[1494627]: Invalid user sql from 134.199.165.72 port ...
show more2026-07-26T20:15:53.284741+00:00 bastionez sshd[1494627]: Invalid user sql from 134.199.165.72 port 53686
2026-07-26T20:22:23.350185+00:00 bastionez sshd[1494690]: Invalid user gitrun from 134.199.165.72 port 53788
...
show less
2026-07-26T22:18:51.477941+02:00 pve-osd-103 sshd[1343369]: Failed password for root from 134.199.16 ...
show more2026-07-26T22:18:51.477941+02:00 pve-osd-103 sshd[1343369]: Failed password for root from 134.199.165.72 port 49370 ssh2
2026-07-26T22:22:09.135756+02:00 pve-osd-103 sshd[1343443]: Invalid user gitrun from 134.199.165.72 port 52172
2026-07-26T22:22:09.408415+02:00 pve-osd-103 sshd[1343443]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.165.72
2026-07-26T22:22:09.413512+02:00 pve-osd-103 sshd[1343443]: pam_sss(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.165.72 user=gitrun
2026-07-26T22:22:11.230544+02:00 pve-osd-103 sshd[1343443]: Failed password for invalid user gitrun from 134.199.165.72 port 52172 ssh2
...
show less
Brute-Force
SSH
Showing 1 to
15
of 53 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ