This IP address has been reported a total of
115
times from
108 distinct
sources.
34.140.138.212 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jul 21 11:30:59 khomus sshd-session[95059]: Invalid user admin from 34.140.138.212 port 9226
Jul 21 ...
show moreJul 21 11:30:59 khomus sshd-session[95059]: Invalid user admin from 34.140.138.212 port 9226
Jul 21 11:30:59 khomus sshd-session[95059]: error: PAM: Authentication error for illegal user admin from 212.138.140.34.bc.googleusercontent.com
Jul 21 11:30:59 khomus sshd-session[95059]: Failed keyboard-interactive/pam for invalid user admin from 34.140.138.212 port 9226 ssh2
Jul 21 11:30:59 khomus sshd-session[95059]: Connection closed by invalid user admin 34.140.138.212 port 9226 [preauth]
Jul 21 11:31:26 khomus sshd-session[95057]: Connection closed by 34.140.138.212 port 9210 [preauth]
...
show less
2026-07-21T00:48:39.719130-07:00 ftp-green sshd[1447100]: Unable to negotiate with 34.140.138.212 po ...
show more2026-07-21T00:48:39.719130-07:00 ftp-green sshd[1447100]: Unable to negotiate with 34.140.138.212 port 43512: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
2026-07-21T00:48:43.364157-07:00 ftp-green sshd[1447102]: Invalid user feqwc from 34.140.138.212 port 43520
2026-07-21T00:48:43.567537-07:00 ftp-green sshd[1447102]: Connection closed by invalid user feqwc 34.140.138.212 port 43520 [preauth]
2026-07-21T00:49:00.824940-07:00 ftp-green sshd[1447105]: Unable to negotiate with 34.140.138.212 port 55132: no matching host key type found. Their offer: ssh-dss [preauth]
2026-07-21T00:49:01.375102-07:00 ftp-green sshd[1447107]: Unable to negotiate with 34.140.138.212 port 55142: no matching host key type found. Their offer: ssh-rsa [preauth]
...
show less
2026-07-21 07:43:37 connection from 34.140.138.212
2026-07-21 07:43:37 connection from 34.140.138.21 ...
show more2026-07-21 07:43:37 connection from 34.140.138.212
2026-07-21 07:43:37 connection from 34.140.138.212
2026-07-21 07:43:37 connection from 34.140.138.212
2026-07-21 07:43:37 connection from 34.140.138.212
2026-07-21 07:43:37 connection from 34.140.138.212
...
show less
2026-07-21T09:26:26.891308+02:00 wels sshd[1482673]: Connection closed by 34.140.138.212 port 19938
...
show more2026-07-21T09:26:26.891308+02:00 wels sshd[1482673]: Connection closed by 34.140.138.212 port 19938
2026-07-21T09:26:36.232032+02:00 wels sshd[1482674]: Unable to negotiate with 34.140.138.212 port 15920: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
2026-07-21T09:26:52.653706+02:00 wels sshd[1482676]: Invalid user smelb from 34.140.138.212 port 51258
...
show less
2026-07-21T07:12:05.944588+00:00 kansas1 sshd[931669]: pam_unix(sshd:auth): authentication failure; ...
show more2026-07-21T07:12:05.944588+00:00 kansas1 sshd[931669]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=34.140.138.212
2026-07-21T07:12:08.276968+00:00 kansas1 sshd[931669]: Failed password for invalid user admin from 34.140.138.212 port 18384 ssh2
2026-07-21T07:12:27.000957+00:00 kansas1 sshd[931674]: Invalid user vmvaa from 34.140.138.212 port 1056
...
show less
Unwanted traffic detected by honeypot on July 20, 2026: port scans (1 port 22 scan), and brute force ...
show moreUnwanted traffic detected by honeypot on July 20, 2026: port scans (1 port 22 scan), and brute force and hacking attacks (1 over ssh).
show less