134.122.56.44 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Netherlands

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	Time: Wed Sep 16 09:53:15 2020 -0400 IP: 134.122.56.44 (NL/Netherlands/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 16 09:36:43 ams-11 sshd[12960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44 user=root Sep 16 09:36:45 ams-11 sshd[12960]: Failed password for root from 134.122.56.44 port 60950 ssh2 Sep 16 09:46:31 ams-11 sshd[13305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44 user=root Sep 16 09:46:33 ams-11 sshd[13305]: Failed password for root from 134.122.56.44 port 59228 ssh2 Sep 16 09:53:15 ams-11 sshd[13592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44 user=root	2020-09-17 01:42:57
attackbotsspam	$f2bV_matches	2020-09-16 17:59:55

Type

Details

Datetime

attackbotsspam

Time:     Wed Sep 16 09:53:15 2020 -0400
IP:       134.122.56.44 (NL/Netherlands/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 16 09:36:43 ams-11 sshd[12960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44  user=root
Sep 16 09:36:45 ams-11 sshd[12960]: Failed password for root from 134.122.56.44 port 60950 ssh2
Sep 16 09:46:31 ams-11 sshd[13305]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44  user=root
Sep 16 09:46:33 ams-11 sshd[13305]: Failed password for root from 134.122.56.44 port 59228 ssh2
Sep 16 09:53:15 ams-11 sshd[13592]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.44  user=root

2020-09-17 01:42:57

attackbotsspam

$f2bV_matches

2020-09-16 17:59:55

Comments on same subnet:

IP	Type	Details	Datetime
134.122.56.22	spam	Used by money scammers.	2020-03-22 05:41:47
134.122.56.77	attack	Mar 16 05:43:44 archiv sshd[8774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.77 user=r.r Mar 16 05:43:47 archiv sshd[8774]: Failed password for r.r from 134.122.56.77 port 56522 ssh2 Mar 16 05:43:47 archiv sshd[8774]: Received disconnect from 134.122.56.77 port 56522:11: Bye Bye [preauth] Mar 16 05:43:47 archiv sshd[8774]: Disconnected from 134.122.56.77 port 56522 [preauth] Mar 16 05:50:18 archiv sshd[8901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.77 user=r.r Mar 16 05:50:20 archiv sshd[8901]: Failed password for r.r from 134.122.56.77 port 45048 ssh2 Mar 16 05:50:20 archiv sshd[8901]: Received disconnect from 134.122.56.77 port 45048:11: Bye Bye [preauth] Mar 16 05:50:20 archiv sshd[8901]: Disconnected from 134.122.56.77 port 45048 [preauth] Mar 16 05:52:10 archiv sshd[8932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru........ -------------------------------	2020-03-17 00:44:28

Type

Details

Datetime

134.122.56.22

spam

Used by money scammers.

2020-03-22 05:41:47

134.122.56.77

attack

Mar 16 05:43:44 archiv sshd[8774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.77  user=r.r
Mar 16 05:43:47 archiv sshd[8774]: Failed password for r.r from 134.122.56.77 port 56522 ssh2
Mar 16 05:43:47 archiv sshd[8774]: Received disconnect from 134.122.56.77 port 56522:11: Bye Bye [preauth]
Mar 16 05:43:47 archiv sshd[8774]: Disconnected from 134.122.56.77 port 56522 [preauth]
Mar 16 05:50:18 archiv sshd[8901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.56.77  user=r.r
Mar 16 05:50:20 archiv sshd[8901]: Failed password for r.r from 134.122.56.77 port 45048 ssh2
Mar 16 05:50:20 archiv sshd[8901]: Received disconnect from 134.122.56.77 port 45048:11: Bye Bye [preauth]
Mar 16 05:50:20 archiv sshd[8901]: Disconnected from 134.122.56.77 port 45048 [preauth]
Mar 16 05:52:10 archiv sshd[8932]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ru........
-------------------------------

2020-03-17 00:44:28

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.122.56.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46271
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.122.56.44.			IN	A

;; AUTHORITY SECTION:
.			302	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020091600 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 16 17:59:50 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 44.56.122.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 44.56.122.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
134.209.81.60	attackbots	Dec 12 09:07:27 124388 sshd[5255]: Invalid user broomfield from 134.209.81.60 port 44728 Dec 12 09:07:27 124388 sshd[5255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.81.60 Dec 12 09:07:27 124388 sshd[5255]: Invalid user broomfield from 134.209.81.60 port 44728 Dec 12 09:07:29 124388 sshd[5255]: Failed password for invalid user broomfield from 134.209.81.60 port 44728 ssh2 Dec 12 09:12:14 124388 sshd[5302]: Invalid user mysql from 134.209.81.60 port 53896	2019-12-12 19:08:35
121.58.236.115	attack	Unauthorized connection attempt detected from IP address 121.58.236.115 to port 445	2019-12-12 19:03:14
107.21.1.8	attackbotsspam	Automatic report - Banned IP Access	2019-12-12 19:08:58
125.31.42.130	attackspambots	1576131889 - 12/12/2019 07:24:49 Host: 125.31.42.130/125.31.42.130 Port: 445 TCP Blocked	2019-12-12 19:06:56
51.68.82.217	attackbots	[portscan] Port scan	2019-12-12 18:53:10
180.250.111.17	attackspambots	Dec 12 11:51:26 cvbnet sshd[7622]: Failed password for root from 180.250.111.17 port 51030 ssh2 ...	2019-12-12 19:05:59
5.141.81.157	attackspam	1576131799 - 12/12/2019 07:23:19 Host: 5.141.81.157/5.141.81.157 Port: 445 TCP Blocked	2019-12-12 19:24:55
106.54.25.86	attackbots	Dec 12 06:39:04 zeus sshd[21765]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.25.86 Dec 12 06:39:06 zeus sshd[21765]: Failed password for invalid user alankirby from 106.54.25.86 port 48168 ssh2 Dec 12 06:46:18 zeus sshd[21974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.25.86 Dec 12 06:46:21 zeus sshd[21974]: Failed password for invalid user poore from 106.54.25.86 port 45020 ssh2	2019-12-12 19:23:11
36.37.116.18	attackspambots	1576131887 - 12/12/2019 07:24:47 Host: 36.37.116.18/36.37.116.18 Port: 445 TCP Blocked	2019-12-12 19:08:04
106.110.165.83	attack	Dec 12 07:25:46 grey postfix/smtpd\[5312\]: NOQUEUE: reject: RCPT from unknown\[106.110.165.83\]: 554 5.7.1 Service unavailable\; Client host \[106.110.165.83\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[106.110.165.83\]\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-12 19:25:27
209.17.96.98	attack	209.17.96.98 was recorded 11 times by 9 hosts attempting to connect to the following ports: 5903,9443,5984,30303,5632,5986,9002,3388,5909,6002. Incident counter (4h, 24h, all-time): 11, 42, 1528	2019-12-12 19:26:21
77.94.106.91	attackbots	1576131928 - 12/12/2019 07:25:28 Host: 77.94.106.91/77.94.106.91 Port: 445 TCP Blocked	2019-12-12 18:59:29
107.161.91.203	attack	Dec 11 22:57:49 php1 sshd\[8772\]: Invalid user sugiura from 107.161.91.203 Dec 11 22:57:49 php1 sshd\[8772\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.161.91.203 Dec 11 22:57:52 php1 sshd\[8772\]: Failed password for invalid user sugiura from 107.161.91.203 port 49164 ssh2 Dec 11 23:03:06 php1 sshd\[9450\]: Invalid user dave from 107.161.91.203 Dec 11 23:03:06 php1 sshd\[9450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.161.91.203	2019-12-12 19:19:56
79.84.88.56	attackspam	Dec 12 11:00:40 server sshd\[24171\]: Invalid user backup from 79.84.88.56 Dec 12 11:00:40 server sshd\[24171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=56.88.84.79.rev.sfr.net Dec 12 11:00:42 server sshd\[24171\]: Failed password for invalid user backup from 79.84.88.56 port 58954 ssh2 Dec 12 13:08:30 server sshd\[30587\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=56.88.84.79.rev.sfr.net user=root Dec 12 13:08:32 server sshd\[30587\]: Failed password for root from 79.84.88.56 port 55650 ssh2 ...	2019-12-12 19:16:42
41.138.57.244	attack	firewall-block, port(s): 445/tcp	2019-12-12 19:07:34

Recently Reported IPs

78.1.91.130	192.154.227.254	125.30.113.183	194.87.138.143
140.143.25.149	111.227.233.75	211.104.20.145	155.94.196.193
110.191.211.25	45.95.119.232	90.53.13.147	194.206.202.63
60.254.49.72	27.7.129.27	189.113.140.205	56.124.64.203
197.26.93.124	102.90.209.226	119.60.25.234	22.121.217.119