134.209.103.120

Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
134.209.103.181	attackbotsspam	SSH Bruteforce Attempt on Honeypot	2020-10-02 07:43:08
134.209.103.181	attack	Time: Thu Oct 1 14:40:27 2020 +0000 IP: 134.209.103.181 (SG/Singapore/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Oct 1 14:23:52 1-1 sshd[63403]: Invalid user postgres from 134.209.103.181 port 38710 Oct 1 14:23:54 1-1 sshd[63403]: Failed password for invalid user postgres from 134.209.103.181 port 38710 ssh2 Oct 1 14:35:56 1-1 sshd[63869]: Invalid user president from 134.209.103.181 port 39108 Oct 1 14:35:58 1-1 sshd[63869]: Failed password for invalid user president from 134.209.103.181 port 39108 ssh2 Oct 1 14:40:24 1-1 sshd[64000]: Invalid user admin from 134.209.103.181 port 47930	2020-10-02 00:17:37
134.209.103.181	attackspam	$f2bV_matches	2020-10-01 16:23:14
134.209.103.181	attackbotsspam	Sep 24 14:16:54 web1 sshd\[4801\]: Invalid user pruebas from 134.209.103.181 Sep 24 14:16:54 web1 sshd\[4801\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.181 Sep 24 14:16:56 web1 sshd\[4801\]: Failed password for invalid user pruebas from 134.209.103.181 port 41480 ssh2 Sep 24 14:21:05 web1 sshd\[5161\]: Invalid user demo2 from 134.209.103.181 Sep 24 14:21:05 web1 sshd\[5161\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.181	2020-09-25 08:44:42
134.209.103.181	attackspam	Sep 12 14:22:07 mout sshd[19227]: Invalid user contador from 134.209.103.181 port 33668	2020-09-12 20:48:22
134.209.103.181	attackspam	2020-09-12T03:26:17.561801vps773228.ovh.net sshd[26985]: Failed password for root from 134.209.103.181 port 40794 ssh2 2020-09-12T03:30:53.187903vps773228.ovh.net sshd[27045]: Invalid user john from 134.209.103.181 port 54378 2020-09-12T03:30:53.204349vps773228.ovh.net sshd[27045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.181 2020-09-12T03:30:53.187903vps773228.ovh.net sshd[27045]: Invalid user john from 134.209.103.181 port 54378 2020-09-12T03:30:54.991092vps773228.ovh.net sshd[27045]: Failed password for invalid user john from 134.209.103.181 port 54378 ssh2 ...	2020-09-12 12:50:51
134.209.103.181	attack	Sep 11 06:32:52 server6 sshd[31901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.181 user=r.r Sep 11 06:32:54 server6 sshd[31901]: Failed password for r.r from 134.209.103.181 port 39430 ssh2 Sep 11 06:32:55 server6 sshd[31901]: Received disconnect from 134.209.103.181: 11: Bye Bye [preauth] Sep 11 06:40:27 server6 sshd[2641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.181 user=r.r Sep 11 06:40:29 server6 sshd[2641]: Failed password for r.r from 134.209.103.181 port 45356 ssh2 Sep 11 06:40:30 server6 sshd[2641]: Received disconnect from 134.209.103.181: 11: Bye Bye [preauth] Sep 11 06:43:09 server6 sshd[3030]: Failed password for invalid user ftpuser from 134.209.103.181 port 54190 ssh2 Sep 11 06:43:09 server6 sshd[3030]: Received disconnect from 134.209.103.181: 11: Bye Bye [preauth] Sep 11 06:45:53 server6 sshd[4322]: pam_unix(sshd:auth): authentication f........ -------------------------------	2020-09-12 04:39:23
134.209.103.228	attack	Jun 26 21:52:52 carla sshd[17115]: Invalid user bix from 134.209.103.228 Jun 26 21:52:52 carla sshd[17115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.228 Jun 26 21:52:54 carla sshd[17115]: Failed password for invalid user bix from 134.209.103.228 port 58232 ssh2 Jun 26 21:52:54 carla sshd[17116]: Received disconnect from 134.209.103.228: 11: Bye Bye Jun 26 22:00:34 carla sshd[17134]: Invalid user anna from 134.209.103.228 Jun 26 22:00:34 carla sshd[17134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.228 Jun 26 22:00:36 carla sshd[17134]: Failed password for invalid user anna from 134.209.103.228 port 39332 ssh2 Jun 26 22:00:36 carla sshd[17135]: Received disconnect from 134.209.103.228: 11: Bye Bye ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.209.103.228	2020-06-27 05:01:35
134.209.103.14	attack	Sep 7 12:41:49 hanapaa sshd\[11732\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 user=root Sep 7 12:41:52 hanapaa sshd\[11732\]: Failed password for root from 134.209.103.14 port 54952 ssh2 Sep 7 12:46:24 hanapaa sshd\[12110\]: Invalid user gpadmin from 134.209.103.14 Sep 7 12:46:24 hanapaa sshd\[12110\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 Sep 7 12:46:26 hanapaa sshd\[12110\]: Failed password for invalid user gpadmin from 134.209.103.14 port 41902 ssh2	2019-09-08 07:01:16
134.209.103.14	attack	Automated report - ssh fail2ban: Aug 25 01:54:40 authentication failure Aug 25 01:54:42 wrong password, user=xrms, port=47722, ssh2 Aug 25 01:59:22 wrong password, user=root, port=38128, ssh2	2019-08-25 08:00:48
134.209.103.14	attack	Aug 17 10:18:47 srv-4 sshd\[6285\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 user=root Aug 17 10:18:50 srv-4 sshd\[6285\]: Failed password for root from 134.209.103.14 port 50580 ssh2 Aug 17 10:23:46 srv-4 sshd\[6697\]: Invalid user sa from 134.209.103.14 Aug 17 10:23:46 srv-4 sshd\[6697\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 ...	2019-08-17 15:36:54
134.209.103.14	attack	Aug 16 03:01:13 XXX sshd[2543]: Invalid user hp from 134.209.103.14 port 49648	2019-08-16 13:16:43
134.209.103.14	attackspambots	Aug 15 02:40:48 vps200512 sshd\[18777\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 user=root Aug 15 02:40:50 vps200512 sshd\[18777\]: Failed password for root from 134.209.103.14 port 57070 ssh2 Aug 15 02:46:02 vps200512 sshd\[18862\]: Invalid user juan from 134.209.103.14 Aug 15 02:46:02 vps200512 sshd\[18862\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 Aug 15 02:46:04 vps200512 sshd\[18862\]: Failed password for invalid user juan from 134.209.103.14 port 48864 ssh2	2019-08-15 16:16:09
134.209.103.182	attackspambots	19/8/5@08:17:05: FAIL: IoT-Telnet address from=134.209.103.182 ...	2019-08-05 20:58:26
134.209.103.14	attack	Aug 2 22:50:07 localhost sshd\[12473\]: Invalid user hackett from 134.209.103.14 Aug 2 22:50:07 localhost sshd\[12473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 Aug 2 22:50:08 localhost sshd\[12473\]: Failed password for invalid user hackett from 134.209.103.14 port 41818 ssh2 Aug 2 22:55:13 localhost sshd\[12693\]: Invalid user admin from 134.209.103.14 Aug 2 22:55:13 localhost sshd\[12693\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.103.14 ...	2019-08-03 11:26:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.103.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50563
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.209.103.120.		IN	A

;; AUTHORITY SECTION:
.			494	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2021090100 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Sep 01 15:10:46 CST 2021
;; MSG SIZE  rcvd: 108

Host info

Host 120.103.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 120.103.209.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
88.102.242.217	attackbotsspam	Sep 20 18:00:52 blackbee postfix/smtpd[4198]: NOQUEUE: reject: RCPT from 217.242.broadband7.iol.cz[88.102.242.217]: 554 5.7.1 Service unavailable; Client host [88.102.242.217] blocked using cbl.abuseat.org; Blocked - see http://www.abuseat.org/lookup.cgi?ip=88.102.242.217; from= to= proto=ESMTP helo=<217.242.broadband7.iol.cz> ...	2020-09-21 07:39:31
222.186.15.115	attackspambots	Sep 20 23:42:06 marvibiene sshd[29842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root Sep 20 23:42:08 marvibiene sshd[29842]: Failed password for root from 222.186.15.115 port 14875 ssh2 Sep 20 23:42:10 marvibiene sshd[29842]: Failed password for root from 222.186.15.115 port 14875 ssh2 Sep 20 23:42:06 marvibiene sshd[29842]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.115 user=root Sep 20 23:42:08 marvibiene sshd[29842]: Failed password for root from 222.186.15.115 port 14875 ssh2 Sep 20 23:42:10 marvibiene sshd[29842]: Failed password for root from 222.186.15.115 port 14875 ssh2	2020-09-21 07:45:19
1.10.246.179	attackspam	Sep 20 23:44:13 ns381471 sshd[25463]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.10.246.179 Sep 20 23:44:15 ns381471 sshd[25463]: Failed password for invalid user user1 from 1.10.246.179 port 54690 ssh2	2020-09-21 07:34:53
222.127.137.228	attackbots	Unauthorized connection attempt from IP address 222.127.137.228 on Port 445(SMB)	2020-09-21 08:07:24
42.3.166.83	attackspam	Sep 20 14:00:46 logopedia-1vcpu-1gb-nyc1-01 sshd[442878]: Invalid user admin from 42.3.166.83 port 54225 ...	2020-09-21 07:47:05
50.117.251.43	attack	Sep 20 14:00:59 logopedia-1vcpu-1gb-nyc1-01 sshd[442931]: Failed password for root from 50.117.251.43 port 36366 ssh2 ...	2020-09-21 07:30:11
46.101.193.99	attackbots	46.101.193.99 - - [20/Sep/2020:22:06:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1996 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.193.99 - - [20/Sep/2020:22:06:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1929 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 46.101.193.99 - - [20/Sep/2020:22:06:30 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-21 08:01:59
52.29.119.113	attackbots	Sep 19 06:52:50 CT3029 sshd[13660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.29.119.113 user=r.r Sep 19 06:52:52 CT3029 sshd[13660]: Failed password for r.r from 52.29.119.113 port 40952 ssh2 Sep 19 06:52:52 CT3029 sshd[13660]: Received disconnect from 52.29.119.113 port 40952:11: Bye Bye [preauth] Sep 19 06:52:52 CT3029 sshd[13660]: Disconnected from 52.29.119.113 port 40952 [preauth] Sep 19 07:40:12 CT3029 sshd[13848]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.29.119.113 user=r.r Sep 19 07:40:15 CT3029 sshd[13848]: Failed password for r.r from 52.29.119.113 port 33802 ssh2 Sep 19 07:40:15 CT3029 sshd[13848]: Received disconnect from 52.29.119.113 port 33802:11: Bye Bye [preauth] Sep 19 07:40:15 CT3029 sshd[13848]: Disconnected from 52.29.119.113 port 33802 [preauth] Sep 19 07:56:54 CT3029 sshd[13903]: Connection closed by 52.29.119.113 port 57074 [preauth] Sep 19 08:13........ -------------------------------	2020-09-21 07:59:12
2607:f298:5:110b::658:603b	attackspam	2607:f298:5:110b::658:603b - - [20/Sep/2020:19:16:04 +0100] "POST /wp-login.php HTTP/1.1" 200 2252 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2607:f298:5:110b::658:603b - - [20/Sep/2020:19:16:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2231 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 2607:f298:5:110b::658:603b - - [20/Sep/2020:19:16:07 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-21 07:38:13
117.239.182.159	attack	IP 117.239.182.159 attacked honeypot on port: 5555 at 9/20/2020 10:00:26 AM	2020-09-21 07:41:06
117.50.77.220	attackspam	invalid user student1 from 117.50.77.220 port 47456 ssh2	2020-09-21 07:29:52
201.26.164.160	attack	Sep 20 14:00:52 logopedia-1vcpu-1gb-nyc1-01 sshd[442898]: Failed password for root from 201.26.164.160 port 40658 ssh2 ...	2020-09-21 07:36:09
87.222.226.78	attack	Brute-force attempt banned	2020-09-21 07:43:14
46.114.109.210	attackspam	Unauthorized connection attempt from IP address 46.114.109.210 on Port 445(SMB)	2020-09-21 08:01:29
212.70.149.52	attackbotsspam	2020-09-21 05:35:48 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=gs@no-server.de$ 2020-09-21 05:36:13 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=test01@no-server.de$ 2020-09-21 05:36:39 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=oslo-gw7@no-server.de$ 2020-09-21 05:37:05 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=pxe@no-server.de$ 2020-09-21 05:37:56 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=firmy@no-server.de$ 2020-09-21 05:38:21 dovecot_login authenticator failed for $User$ \[212.70.149.52\]: 535 Incorrect authentication data $set_id=adams@no-server.de$ ...	2020-09-21 12:00:43

Recently Reported IPs

80.211.210.86	10.11.39.205	128.199.223.11	43.248.130.194
178.174.33.122	104.248.144.44	131.228.104.66	187.122.101.88
187.122.101.80	123.253.88.69	65.21.13.165	95.175.104.177
213.55.226.12	103.151.237.70	103.151.237.75	128.199.227.217
45.33.76.115	49.12.99.173	51.158.111.201	178.238.8.212