This IP address has been reported a total of
145
times from
74 distinct
sources.
134.209.199.99 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
Anonymous
MikroTik Enterprise Honeypot
Port Scan
Anonymous
denied traffic to a non-approved destination port. destination port 31337.
Feb 13 10:48:30 mcb-it sshd[988222]: Failed password for invalid user nginx from 134.209.199.99 port ...
show moreFeb 13 10:48:30 mcb-it sshd[988222]: Failed password for invalid user nginx from 134.209.199.99 port 43352 ssh2
Feb 13 10:48:59 mcb-it sshd[988292]: Invalid user nginx from 134.209.199.99 port 40484
Feb 13 10:48:59 mcb-it sshd[988292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.99
Feb 13 10:49:02 mcb-it sshd[988292]: Failed password for invalid user nginx from 134.209.199.99 port 40484 ssh2
Feb 13 10:49:32 mcb-it sshd[988321]: Invalid user nginx from 134.209.199.99 port 57252
...
show less
2026-02-13T09:46:30.325792+00:00 defiant sshd[401589]: pam_unix(sshd:auth): authentication failure; ...
show more2026-02-13T09:46:30.325792+00:00 defiant sshd[401589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.99
2026-02-13T09:46:32.580288+00:00 defiant sshd[401589]: Failed password for invalid user nginx from 134.209.199.99 port 45296 ssh2
2026-02-13T09:47:01.226632+00:00 defiant sshd[401610]: Invalid user nginx from 134.209.199.99 port 41662
...
show less
2026-02-13T15:45:13.286817+06:00 ubuntu sshd[320069]: pam_unix(sshd:auth): authentication failure; l ...
show more2026-02-13T15:45:13.286817+06:00 ubuntu sshd[320069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.99
2026-02-13T15:45:14.968998+06:00 ubuntu sshd[320069]: Failed password for invalid user ftp from 134.209.199.99 port 59904 ssh2
...
show less
Feb 13 09:44:05 Veslys sshd[995126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eui ...
show moreFeb 13 09:44:05 Veslys sshd[995126]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.99
Feb 13 09:44:07 Veslys sshd[995126]: Failed password for invalid user ftp from 134.209.199.99 port 45040 ssh2
Feb 13 09:44:34 Veslys sshd[1007395]: Invalid user ftp from 134.209.199.99 port 41344
...
show less
2026-02-13T09:38:53.745069+00:00 vps-79ef519e sshd-session[4049609]: Failed password for invalid use ...
show more2026-02-13T09:38:53.745069+00:00 vps-79ef519e sshd-session[4049609]: Failed password for invalid user ftp from 134.209.199.99 port 59814 ssh2
2026-02-13T09:39:22.307160+00:00 vps-79ef519e sshd-session[4049682]: Invalid user ftp from 134.209.199.99 port 39434
2026-02-13T09:39:22.325688+00:00 vps-79ef519e sshd-session[4049682]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.199.99
2026-02-13T09:39:24.049751+00:00 vps-79ef519e sshd-session[4049682]: Failed password for invalid user ftp from 134.209.199.99 port 39434 ssh2
2026-02-13T09:39:52.812619+00:00 vps-79ef519e sshd-session[4049690]: Invalid user ftp from 134.209.199.99 port 53950
...
show less
Brute-Force
SSH
Showing 1 to
15
of 145 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩