This IP address carried out 1 SSH credential attack (attempts) on 24-04-2026. For more information o ...
show moreThis IP address carried out 1 SSH credential attack (attempts) on 24-04-2026. For more information or to report interesting / incorrect findings, give me a shoutout @parthmaniar on Twitter.
show less
2026-04-24T06:46:47.129477+02:00 thor sshd-session[27115]: pam_unix(sshd:auth): authentication failu ...
show more2026-04-24T06:46:47.129477+02:00 thor sshd-session[27115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.14.19.108
2026-04-24T06:46:49.322442+02:00 thor sshd-session[27115]: Failed password for invalid user admin from 34.14.19.108 port 23364 ssh2
2026-04-24T06:46:50.784675+02:00 thor sshd-session[27115]: Connection closed by invalid user admin 34.14.19.108 port 23364 [preauth]
...
show less
2026-04-24T00:34:07.201434-04:00 debian sshd[459702]: Invalid user admin from 34.14.19.108 port 5301 ...
show more2026-04-24T00:34:07.201434-04:00 debian sshd[459702]: Invalid user admin from 34.14.19.108 port 53014
2026-04-24T00:34:07.455991-04:00 debian sshd[459702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.14.19.108
2026-04-24T00:34:09.683866-04:00 debian sshd[459702]: Failed password for invalid user admin from 34.14.19.108 port 53014 ssh2
2026-04-24T00:38:17.897977-04:00 debian sshd[462414]: Invalid user dgxvc from 34.14.19.108 port 39698
2026-04-24T00:43:15.455206-04:00 debian sshd[465025]: Invalid user admin from 34.14.19.108 port 11510
...
show less
2026-04-24T12:42:12.560034instance-20220408-0313 sshd[2328892]: Invalid user admin from 34.14.19.108 ...
show more2026-04-24T12:42:12.560034instance-20220408-0313 sshd[2328892]: Invalid user admin from 34.14.19.108 port 20734
2026-04-24T12:42:14.704433instance-20220408-0313 sshd[2328892]: error: PAM: Authentication failure for illegal user admin from 34.14.19.108
2026-04-24T12:42:14.705079instance-20220408-0313 sshd[2328892]: Failed keyboard-interactive/pam for invalid user admin from 34.14.19.108 port 20734 ssh2
...
show less
2026-04-24T06:41:46.312604+02:00 pve-osd-103 sshd[2710711]: Unable to negotiate with 34.14.19.108 po ...
show more2026-04-24T06:41:46.312604+02:00 pve-osd-103 sshd[2710711]: Unable to negotiate with 34.14.19.108 port 51976: no matching host key type found. Their offer: ssh-dss [preauth]
2026-04-24T06:41:46.568876+02:00 pve-osd-103 sshd[2710713]: Unable to negotiate with 34.14.19.108 port 51984: no matching host key type found. Their offer: ssh-rsa [preauth]
2026-04-24T06:41:47.184157+02:00 pve-osd-103 sshd[2710717]: Unable to negotiate with 34.14.19.108 port 51994: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
2026-04-24T06:41:47.444460+02:00 pve-osd-103 sshd[2710719]: Unable to negotiate with 34.14.19.108 port 52006: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
2026-04-24T06:41:48.396008+02:00 pve-osd-103 sshd[2710723]: Unable to negotiate with 34.14.19.108 port 52026: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
...
show less
Apr 23 22:38:37 server sshd[244996]: refused connect from 108.19.14.34.bc.googleusercontent.com (34. ...
show moreApr 23 22:38:37 server sshd[244996]: refused connect from 108.19.14.34.bc.googleusercontent.com (34.14.19.108)
Apr 23 22:38:41 server sshd[244997]: refused connect from 108.19.14.34.bc.googleusercontent.com (34.14.19.108)
Apr 23 22:38:43 server sshd[244998]: refused connect from 108.19.14.34.bc.googleusercontent.com (34.14.19.108)
Apr 23 22:38:48 server sshd[244999]: refused connect from 108.19.14.34.bc.googleusercontent.com (34.14.19.108)
Apr 23 22:38:53 server sshd[245000]: refused connect from 108.19.14.34.bc.googleusercontent.com (34.14.19.108)
...
show less
[satellite_2859] Honeypot attempt BE from 34.14.19.108 to port 22, with banner b'\x16\x03\x01\x00\xf ...
show more[satellite_2859] Honeypot attempt BE from 34.14.19.108 to port 22, with banner b'\x16\x03\x01\x00\xfe\x01\x00\x00\xfa\x03\x03yS76\xbam\xe4\x97\x9d\xb9\x96\xaa.\xf1/\xe7\xe1\xd3A\xf1V\x80#P[\xe6O7\x1c\xe7E\x01 P'
show less