This IP address has been reported a total of
132
times from
121 distinct
sources.
34.76.214.158 was first reported on
, and the most recent report was
.
In the last 60 days, the top reporter locations were:
Germany
with 40
reports;
France
with 19
reports;
United States of America
with 14
reports.
The most common categories in these recent reports were:
SSH
123
times;
Brute-Force
116
times;
Port Scan
19
times;
Hacking
6
times;
Web App Attack
1
time;
Other
1
time.
Recent Reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Oct 23 12:04:21 lnxmail62 sshd[2134270]: Invalid user kjngh from 34.76.214.158 port 52976
Oct 23 12: ...
show moreOct 23 12:04:21 lnxmail62 sshd[2134270]: Invalid user kjngh from 34.76.214.158 port 52976
Oct 23 12:04:21 lnxmail62 sshd[2134277]: Unable to negotiate with 34.76.214.158 port 52984: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
Oct 23 12:04:21 lnxmail62 sshd[2134294]: Unable to negotiate with 34.76.214.158 port 53006: no matching host key type found. Their offer: ssh-dss [preauth]
Oct 23 12:04:22 lnxmail62 sshd[2134324]: Unable to negotiate with 34.76.214.158 port 53034: no matching host key type found. Their offer: ecdsa-sha2-nistp384 [preauth]
Oct 23 12:04:22 lnxmail62 sshd[2134347]: Unable to negotiate with 34.76.214.158 port 53048: no matching host key type found. Their offer: ecdsa-sha2-nistp521 [preauth]
...
show less
2026-10-23T07:38:17.096648+00:00 helium sshd-session[1596264]: Unable to negotiate with 34.76.214.15 ...
show more2026-10-23T07:38:17.096648+00:00 helium sshd-session[1596264]: Unable to negotiate with 34.76.214.158 port 23918: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1 [preauth]
2026-10-23T07:38:17.650123+00:00 helium sshd-session[1596266]: Invalid user aidvn from 34.76.214.158 port 23928
2026-10-23T07:38:17.753800+00:00 helium sshd-session[1596266]: Connection closed by invalid user aidvn 34.76.214.158 port 23928 [preauth]
...
show less
Automated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: ...
show moreAutomated honeypot observation: SSH brute-force / credential-stuffing. Failed logins: 1, successful: 0, commands: 0, file transfers: 0. Seen on 1 sensor(s) (eu1) over 2026-10-23..2026-10-23. Reported by an SSH honeypot network; no production service involved.
show less
SSH honeypot (Cowrie) recorded 11 events over 1m. Activity: SSH connection to honeypot; automated SS ...
show moreSSH honeypot (Cowrie) recorded 11 events over 1m. Activity: SSH connection to honeypot; automated SSH client (scanner banner); connection flood. Wazuh rules: 100100,100113,100117.
show less
2026-10-23T06:41:22.442688+00:00 sg-jumphost-server sshd[3905594]: Invalid user admin from 34.76.214 ...
show more2026-10-23T06:41:22.442688+00:00 sg-jumphost-server sshd[3905594]: Invalid user admin from 34.76.214.158 port 55796
2026-10-23T06:41:22.616557+00:00 sg-jumphost-server sshd[3905594]: Connection closed by invalid user admin 34.76.214.158 port 55796 [preauth]
2026-10-23T06:41:24.783707+00:00 sg-jumphost-server sshd[3905592]: Connection closed by 34.76.214.158 port 55780 [preauth]
...
show less
