Observed repeated SSH authentication failures from this IP against a Debian host protected by fail2b ...
show moreObserved repeated SSH authentication failures from this IP against a Debian host protected by fail2ban. Count=34. Automated report from local logs; local host/private IPs excluded.
show less
2026-03-12T05:09:34.875389+01:00 mail sshd[290162]: Failed password for root from 64.225.72.134 port ...
show more2026-03-12T05:09:34.875389+01:00 mail sshd[290162]: Failed password for root from 64.225.72.134 port 58908 ssh2
2026-03-12T05:10:27.362016+01:00 mail sshd[290165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.72.134 user=root
2026-03-12T05:10:29.062091+01:00 mail sshd[290165]: Failed password for root from 64.225.72.134 port 39978 ssh2
...
show less
2026-03-12T04:09:27.892196+00:00 thelemmy.club sshd-session[392645]: User root not allowed because a ...
show more2026-03-12T04:09:27.892196+00:00 thelemmy.club sshd-session[392645]: User root not allowed because account is locked
2026-03-12T04:09:27.976146+00:00 thelemmy.club sshd-session[392645]: Connection closed by invalid user root 64.225.72.134 port 33102 [preauth]
...
show less
2026-03-11T10:20:43.198435+00:00 racknerd-0410d2 sshd[2372691]: pam_unix(sshd:auth): authentication ...
show more2026-03-11T10:20:43.198435+00:00 racknerd-0410d2 sshd[2372691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.72.134 user=root
2026-03-11T10:20:44.889635+00:00 racknerd-0410d2 sshd[2372691]: Failed password for root from 64.225.72.134 port 43304 ssh2
2026-03-11T10:22:02.418672+00:00 racknerd-0410d2 sshd[2373141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.72.134 user=root
2026-03-11T10:22:03.950701+00:00 racknerd-0410d2 sshd[2373141]: Failed password for root from 64.225.72.134 port 50414 ssh2
...
show less
Brute-Force
SSH
Anonymous
Mar 11 10:19:19 sftp-cognizant-san-jose-1 sshd[3604705]: Failed password for root from 64.225.72.134 ...
show moreMar 11 10:19:19 sftp-cognizant-san-jose-1 sshd[3604705]: Failed password for root from 64.225.72.134 port 38104 ssh2
Mar 11 10:20:44 sftp-cognizant-san-jose-1 sshd[3604783]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.72.134 user=root
Mar 11 10:20:46 sftp-cognizant-san-jose-1 sshd[3604783]: Failed password for root from 64.225.72.134 port 59302 ssh2
...
show less
Mar 11 10:18:49 thenormalpeople sshd[347359]: Failed password for root from 64.225.72.134 port 44680 ...
show moreMar 11 10:18:49 thenormalpeople sshd[347359]: Failed password for root from 64.225.72.134 port 44680 ssh2
Mar 11 10:20:14 thenormalpeople sshd[347362]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.72.134 user=root
Mar 11 10:20:16 thenormalpeople sshd[347362]: Failed password for root from 64.225.72.134 port 55984 ssh2
...
show less
2026-03-11T10:13:48.028927 host sshd[726383]: Connection closed by 64.225.72.134 port 34240 2026-03- ...
show more2026-03-11T10:13:48.028927 host sshd[726383]: Connection closed by 64.225.72.134 port 34240 2026-03-11T10:16:47.798372 host sshd[726410]: user XXXX from 64.225.72.134 not allowed because not listed in AllowUsers 2026-03-11T10:18:26.924562 host sshd[726413]: Connection closed by invalid user root 64.225.72.134 port 48958 [preauth]
show less
Brute-Force
SSH
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩