This IP address has been reported a total of
21
times from
20 distinct
sources.
134.209.196.63 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
Port scan / connection attempts on ports 465/TCP, 5173/TCP, 5552/TCP, 10000/TCP to unused IP
ThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/134.209.196.6 ...
show moreThreatBook Intelligence: vpn_proxy,Dynamic IP more details on https://threatbook.io/ip/134.209.196.63
show less
SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
Anonymous
Mar 9 05:51:21 portainer-be sshd[2466507]: Failed password for root from 134.209.196.63 port 55310 ...
show moreMar 9 05:51:21 portainer-be sshd[2466507]: Failed password for root from 134.209.196.63 port 55310 ssh2
Mar 9 05:52:42 portainer-be sshd[2471528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
Mar 9 05:52:44 portainer-be sshd[2471528]: Failed password for root from 134.209.196.63 port 41514 ssh2
Mar 9 05:53:51 portainer-be sshd[2475719]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
Mar 9 05:53:54 portainer-be sshd[2475719]: Failed password for root from 134.209.196.63 port 50366 ssh2
...
show less
Mar 9 05:50:29 box sshd[667400]: Failed password for root from 134.209.196.63 port 57028 ssh2
Mar ...
show moreMar 9 05:50:29 box sshd[667400]: Failed password for root from 134.209.196.63 port 57028 ssh2
Mar 9 05:51:42 box sshd[667442]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
Mar 9 05:51:44 box sshd[667442]: Failed password for root from 134.209.196.63 port 41506 ssh2
...
show less
2026-03-09T07:49:52.827585+02:00 proxmox sshd[1309887]: Failed password for root from 134.209.196.63 ...
show more2026-03-09T07:49:52.827585+02:00 proxmox sshd[1309887]: Failed password for root from 134.209.196.63 port 34296 ssh2
2026-03-09T07:51:14.181040+02:00 proxmox sshd[1311255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
2026-03-09T07:51:16.051569+02:00 proxmox sshd[1311255]: Failed password for root from 134.209.196.63 port 43360 ssh2
...
show less
Mar 9 05:49:51 host sshd[2636876]: Failed password for root from 134.209.196.63 port 46024 ssh2
Mar ...
show moreMar 9 05:49:51 host sshd[2636876]: Failed password for root from 134.209.196.63 port 46024 ssh2
Mar 9 05:50:00 host sshd[2636905]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
Mar 9 05:50:02 host sshd[2636905]: Failed password for root from 134.209.196.63 port 44248 ssh2
Mar 9 05:51:12 host sshd[2637129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
Mar 9 05:51:14 host sshd[2637129]: Failed password for root from 134.209.196.63 port 44474 ssh2
...
show less
Report 2126616 with IP 3174178 for SSH brute-force attack by source 3168841 via ssh-honeypot/0.2.0+h ...
show moreReport 2126616 with IP 3174178 for SSH brute-force attack by source 3168841 via ssh-honeypot/0.2.0+http
show less
2026-03-09T05:49:41.585132+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[264832]: Failed password for roo ...
show more2026-03-09T05:49:41.585132+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[264832]: Failed password for root from 134.209.196.63 port 34498 ssh2
2026-03-09T05:51:03.628349+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[264953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.196.63 user=root
2026-03-09T05:51:05.850895+00:00 edge-eqx-iad03.int.pdx.net.uk sshd[264953]: Failed password for root from 134.209.196.63 port 33724 ssh2
...
show less
Cluster member (Omitted) (US/United States/-) said, DENY 134.209.196.63, Reason:[(sshd) Failed SSH l ...
show moreCluster member (Omitted) (US/United States/-) said, DENY 134.209.196.63, Reason:[(sshd) Failed SSH login from 134.209.196.63 (NL/The Netherlands/-): 3 in the last 3600 secs]
show less
Brute-Force
SSH
Showing 1 to
15
of 21 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩