This IP address has been reported a total of
221
times from
149 distinct
sources.
134.199.197.48 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
134.199.197.48 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more134.199.197.48 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 438B. Report generated by Endlessh Report Generator v1.2.3
show less
134.199.197.48 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time ...
show more134.199.197.48 fell into Endlessh tarpit; 0/1 total connections are currently still open. Total time wasted: 4s. Total bytes sent by tarpit: 438B. Report generated by Endlessh Report Generator v1.2.3
show less
2026-01-07T20:13:02.291751-07:00 lain sshd-session[787118]: pam_unix(sshd:auth): authentication fail ...
show more2026-01-07T20:13:02.291751-07:00 lain sshd-session[787118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.197.48 user=root
2026-01-07T20:13:04.643642-07:00 lain sshd-session[787118]: Failed password for root from 134.199.197.48 port 35064 ssh2
2026-01-07T20:13:05.910118-07:00 lain sshd-session[787121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.197.48 user=root
2026-01-07T20:13:07.933093-07:00 lain sshd-session[787121]: Failed password for root from 134.199.197.48 port 35074 ssh2
2026-01-07T20:13:09.396514-07:00 lain sshd-session[787125]: Invalid user gitlab-runner from 134.199.197.48 port 46714
...
show less
2026-01-08T04:11:44.383310+01:00 ariane-Precision-Tower-5810 sshd[162199]: Invalid user from 134.19 ...
show more2026-01-08T04:11:44.383310+01:00 ariane-Precision-Tower-5810 sshd[162199]: Invalid user from 134.199.197.48 port 48464
...
show less
2026-01-08T03:54:24.862411+01:00 qube sshd[1759345]: pam_unix(sshd:auth): authentication failure; lo ...
show more2026-01-08T03:54:24.862411+01:00 qube sshd[1759345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.197.48
2026-01-08T03:54:26.918437+01:00 qube sshd[1759345]: Failed password for invalid user img from 134.199.197.48 port 37686 ssh2
2026-01-08T03:54:28.482562+01:00 qube sshd[1759353]: Invalid user hadoop from 134.199.197.48 port 38214
2026-01-08T03:54:28.710781+01:00 qube sshd[1759353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.199.197.48
2026-01-08T03:54:30.650480+01:00 qube sshd[1759353]: Failed password for invalid user hadoop from 134.199.197.48 port 38214 ssh2
...
show less
2026-01-08T02:34:43.125178+00:00 boron sshd[465912]: Invalid user from 134.199.197.48 port 45424
20 ...
show more2026-01-08T02:34:43.125178+00:00 boron sshd[465912]: Invalid user from 134.199.197.48 port 45424
2026-01-08T02:34:50.730210+00:00 boron sshd[465912]: Connection closed by invalid user 134.199.197.48 port 45424 [preauth]
2026-01-08T02:35:35.745943+00:00 boron sshd[465914]: Invalid user ranger from 134.199.197.48 port 40406
...
show less
[fail2ban Auto Report] 2026-01-07T21:35:25.259302-05:00 caninebox sshd-session[3090782]: Invalid use ...
show more[fail2ban Auto Report] 2026-01-07T21:35:25.259302-05:00 caninebox sshd-session[3090782]: Invalid user from 134.199.197.48 port 59302
...
show less
SSH Brute force: 11 attempts were recorded from 134.199.197.48
2026-01-08T03:15:51+01:00 Connection ...
show moreSSH Brute force: 11 attempts were recorded from 134.199.197.48
2026-01-08T03:15:51+01:00 Connection from 134.199.197.48 port 51576 on <redacted> port 22 rdomain ""
2026-01-08T03:15:51+01:00 Invalid user from 134.199.197.48 port 51576
2026-01-08T03:15:59+01:00 Connection closed by invalid user 134.199.197.48 port 51576 [preauth]
2026-01-08T03:17:05+01:00 Connection from 134.199.197.48 port 50466 on <redacted> port 22 rdomain ""
2026-01-08T03:17:05+01:00 Invalid user tomcat from 134.199.197.48 port 50466
2026-01-08T03:17:08+01:00 Failed password for invalid user tomcat from 134.199.197.48 port 50466 ssh2
2026-01-08T03:17:08+01:00 Connection closed by invalid user tomcat 134.199.197.48 port 50466 [preauth]
2026-01-08T03:22:11+01:00 Connection from 134.199.197.48 port 41356 on <redacted> port 22 rdomain ""
2026-01-08T03:22:11+01:00 User root from 134.199.197.48 not allowed because not list
show less
Brute-Force
SSH
Showing 1 to
15
of 221 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩