This IP address has been reported a total of
2,119
times from
781 distinct
sources.
4.182.219.135 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
May 13 20:14:00 routing0301 sshd[1984358]: pam_unix(sshd:auth): authentication failure; logname= uid ...
show moreMay 13 20:14:00 routing0301 sshd[1984358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.182.219.135 user=root
May 13 20:14:02 routing0301 sshd[1984358]: Failed password for root from 4.182.219.135 port 48870 ssh2
May 13 20:15:46 routing0301 sshd[1985038]: Invalid user ayjtnzjc from 4.182.219.135 port 59052
...
show less
May 13 19:45:55 routing0301 sshd[1980349]: Failed password for root from 4.182.219.135 port 54102 ss ...
show moreMay 13 19:45:55 routing0301 sshd[1980349]: Failed password for root from 4.182.219.135 port 54102 ssh2
May 13 19:47:34 routing0301 sshd[1980370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.182.219.135 user=root
May 13 19:47:36 routing0301 sshd[1980370]: Failed password for root from 4.182.219.135 port 33748 ssh2
...
show less
2026-05-13T19:32:40.138721 ******* sshd[567585]: Disconnected from authenticating user root 4.182.21 ...
show more2026-05-13T19:32:40.138721 ******* sshd[567585]: Disconnected from authenticating user root 4.182.219.135 port 35818 [preauth]
2026-05-13T19:42:25.195957 ******* sshd[570695]: Disconnected from authenticating user root 4.182.219.135 port 41812 [preauth]
2026-05-13T19:44:06.438111 ******* sshd[571307]: Disconnected from authenticating user root 4.182.219.135 port 47246 [preauth]
show less
Brute-Force
SSH
Anonymous
May 13 19:36:51 srv sshd[4490]: Failed password for root from 4.182.219.135 port 45388 ssh2
May 13 17:35:54 uptime-kuma sshd[2861465]: Disconnected from authenticating user root 4.182.219.135 ...
show moreMay 13 17:35:54 uptime-kuma sshd[2861465]: Disconnected from authenticating user root 4.182.219.135 port 39666 [preauth]
...
show less
2026-05-13T18:13:28.613328+01:00 srv02 sshd-session[2237688]: Failed password for invalid user Oracl ...
show more2026-05-13T18:13:28.613328+01:00 srv02 sshd-session[2237688]: Failed password for invalid user Oracle from 4.182.219.135 port 36300 ssh2
2026-05-13T18:15:14.507107+01:00 srv02 sshd-session[2238914]: Invalid user elasticsearch from 4.182.219.135 port 48872
2026-05-13T18:15:14.510774+01:00 srv02 sshd-session[2238914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.182.219.135
2026-05-13T18:15:16.470432+01:00 srv02 sshd-session[2238914]: Failed password for invalid user elasticsearch from 4.182.219.135 port 48872 ssh2
2026-05-13T18:16:58.888355+01:00 srv02 sshd-session[2240086]: Invalid user cuckoo from 4.182.219.135 port 40694
...
show less
2026-05-13T12:47:37.027130-04:00 sputnik3 sshd[1676865]: Invalid user upgrade from 4.182.219.135 por ...
show more2026-05-13T12:47:37.027130-04:00 sputnik3 sshd[1676865]: Invalid user upgrade from 4.182.219.135 port 48958
2026-05-13T12:54:45.538301-04:00 sputnik3 sshd[1677505]: Invalid user user from 4.182.219.135 port 48444
2026-05-13T12:58:21.423858-04:00 sputnik3 sshd[1678127]: Invalid user rsyncuser from 4.182.219.135 port 56296
...
show less
2026-05-13T18:46:50.272793 vmi2089077.contaboserver.net sshd[3740986]: Invalid user upgrade from 4.1 ...
show more2026-05-13T18:46:50.272793 vmi2089077.contaboserver.net sshd[3740986]: Invalid user upgrade from 4.182.219.135 port 50626
2026-05-13T18:53:53.820144 vmi2089077.contaboserver.net sshd[3743827]: Invalid user user from 4.182.219.135 port 59112
2026-05-13T18:57:35.378751 vmi2089077.contaboserver.net sshd[3745311]: Invalid user rsyncuser from 4.182.219.135 port 40818
...
show less
2026-05-13T18:34:25.163612+02:00 guestgw-router01.remscheid.de sshd-session[680968]: Disconnected fr ...
show more2026-05-13T18:34:25.163612+02:00 guestgw-router01.remscheid.de sshd-session[680968]: Disconnected from authenticating user root 4.182.219.135 port 34754 [preauth]
2026-05-13T18:43:47.492904+02:00 guestgw-router01.remscheid.de sshd-session[682355]: Disconnected from authenticating user root 4.182.219.135 port 40932 [preauth]
2026-05-13T18:45:19.219836+02:00 guestgw-router01.remscheid.de sshd-session[682622]: Disconnected from authenticating user root 4.182.219.135 port 54318 [preauth]
2026-05-13T18:46:55.704254+02:00 guestgw-router01.remscheid.de sshd-session[682870]: Invalid user upgrade from 4.182.219.135 port 48722
2026-05-13T18:46:55.733269+02:00 guestgw-router01.remscheid.de sshd-session[682870]: Disconnected from invalid user upgrade 4.182.219.135 port 48722 [preauth]
show less
2026-05-13T17:37:08.192125+01:00 CiviDrupal16GB sshd[1144403]: User root from 4.182.219.135 not allo ...
show more2026-05-13T17:37:08.192125+01:00 CiviDrupal16GB sshd[1144403]: User root from 4.182.219.135 not allowed because not listed in AllowUsers
2026-05-13T17:44:08.859714+01:00 CiviDrupal16GB sshd[1144575]: User root from 4.182.219.135 not allowed because not listed in AllowUsers
...
show less
Brute-Force
SSH
Anonymous
2026-05-13T17:56:35.064141+02:00 mail.uninetlab.de sshd[913825]: Invalid user ayjtnzjc from 4.182.21 ...
show more2026-05-13T17:56:35.064141+02:00 mail.uninetlab.de sshd[913825]: Invalid user ayjtnzjc from 4.182.219.135 port 53610
2026-05-13T17:56:35.068417+02:00 mail.uninetlab.de sshd[913825]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=4.182.219.135
2026-05-13T17:56:37.501300+02:00 mail.uninetlab.de sshd[913825]: Failed password for invalid user ayjtnzjc from 4.182.219.135 port 53610 ssh2
...
show less
Automated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 us ...
show moreAutomated SSH brute-force attack detected. The IP repeatedly attempted to authenticate to port 22 using multiple usernames and password guesses within a short timeframe.
show less
Brute-Force
SSH
Showing 2056 to
2070
of 2119 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown ๐ฉ