This IP address has been reported a total of
356
times from
117 distinct
sources.
185.134.49.179 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
[fail2ban Auto Report] 2026-05-30T20:32:20.731694-04:00 alpha sshd-session[1038645]: error: maximum ...
show more[fail2ban Auto Report] 2026-05-30T20:32:20.731694-04:00 alpha sshd-session[1038645]: error: maximum authentication attempts exceeded for root from 185.134.49.179 port 52864 ssh2 [preauth]
...
show less
May 31 00:14:36 racetecweb sshd[381482]: User root from 185.134.49.179 not allowed because not liste ...
show moreMay 31 00:14:36 racetecweb sshd[381482]: User root from 185.134.49.179 not allowed because not listed in AllowUsers
May 31 00:14:36 racetecweb sshd[381482]: User root from 185.134.49.179 not allowed because not listed in AllowUsers
May 31 00:14:36 racetecweb sshd[381482]: error: maximum authentication attempts exceeded for invalid user root from 185.134.49.179 port 44758 ssh2 [preauth]
...
show less
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus D ...
show moreThis IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(ET DROP Spamhaus DROP Listed Traffic Inbound group 37). Ip 185.134.49.179 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-05-30 22:11:20.937846555 +0000 UTC
show less
May 30 21:39:13 sanyalnet-oracle-vps2 sshd[844755]: pam_unix(sshd:auth): authentication failure; log ...
show moreMay 30 21:39:13 sanyalnet-oracle-vps2 sshd[844755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.134.49.179 user=root
May 30 21:39:14 sanyalnet-oracle-vps2 sshd[844755]: Failed none for invalid user root from 185.134.49.179 port 33178 ssh2
May 30 21:39:15 sanyalnet-oracle-vps2 sshd[844755]: error: maximum authentication attempts exceeded for invalid user root from 185.134.49.179 port 33178 ssh2 [preauth]
...
show less
2026-05-31T04:16:25.273907+09:00 no3 sshd[2136896]: Disconnected from authenticating user root 185.1 ...
show more2026-05-31T04:16:25.273907+09:00 no3 sshd[2136896]: Disconnected from authenticating user root 185.134.49.179 port 53638 [preauth]
...
show less
Suricata Detected 2 attacks from 185.134.49.179.; ET DROP Spamhaus DROP Listed Traffic Inbound group ...
show moreSuricata Detected 2 attacks from 185.134.49.179.; ET DROP Spamhaus DROP Listed Traffic Inbound group 37; IP: 185.134.49.179; Ports: 36412; Direction: to_server; Trigger: DROP; Category: Misc Attack; Severity: 2
show less
This IP address carried out 4 port scanning attempts on 28-05-2026. For more information or to repor ...
show moreThis IP address carried out 4 port scanning attempts on 28-05-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
Port Scan
SSH
Showing 106 to
120
of 356 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩