134.209.105.68

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
134.209.105.86	attack	Apr 1 01:33:43 gw1 sshd[8316]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.105.86 Apr 1 01:33:45 gw1 sshd[8316]: Failed password for invalid user gabriel from 134.209.105.86 port 35156 ssh2 ...	2020-04-01 04:49:29
134.209.105.46	attackspambots	Automatic report - Banned IP Access	2020-03-23 18:08:31
134.209.105.46	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-03-10 14:46:42
134.209.105.46	attackbotsspam	134.209.105.46 - - [06/Mar/2020:05:49:25 +0000] "POST /wp-login.php HTTP/1.1" 200 6409 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.105.46 - - [06/Mar/2020:05:49:27 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-03-06 14:03:55
134.209.105.247	attackbotsspam	xmlrpc attack	2020-02-04 08:37:35
134.209.105.46	attackbotsspam	Automatically reported by fail2ban report script (mx1)	2020-01-28 02:07:48
134.209.105.228	attack	Dec 16 08:32:13 venus sshd[5131]: Invalid user ouin from 134.209.105.228 port 55632 Dec 16 08:32:13 venus sshd[5131]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.105.228 Dec 16 08:32:15 venus sshd[5131]: Failed password for invalid user ouin from 134.209.105.228 port 55632 ssh2 Dec 16 08:38:07 venus sshd[6060]: Invalid user kristensen from 134.209.105.228 port 35238 Dec 16 08:38:07 venus sshd[6060]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.105.228 Dec 16 08:38:08 venus sshd[6060]: Failed password for invalid user kristensen from 134.209.105.228 port 35238 ssh2 Dec 16 08:44:14 venus sshd[6928]: Invalid user adkins from 134.209.105.228 port 42782 Dec 16 08:44:14 venus sshd[6928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.105.228 Dec 16 08:44:16 venus sshd[6928]: Failed password for invalid user adkins from 134.209......... ------------------------------	2019-12-18 00:00:00
134.209.105.228	attack	Invalid user lisa from 134.209.105.228 port 51208	2019-12-17 06:32:41
134.209.105.228	attackspambots	$f2bV_matches	2019-12-17 00:20:00
134.209.105.46	attack	Automatic report - Banned IP Access	2019-11-21 23:50:50
134.209.105.46	attackbotsspam	Automatic report - XMLRPC Attack	2019-11-10 22:07:53
134.209.105.46	attack	Automatic report - XMLRPC Attack	2019-10-20 20:20:52
134.209.105.46	attackbotsspam	fail2ban honeypot	2019-10-13 18:24:55
134.209.105.46	attackbots	Automatic report - XMLRPC Attack	2019-10-10 03:51:19
134.209.105.66	attack	DATE:2019-10-06 13:42:45, IP:134.209.105.66, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-10-07 00:41:41

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.105.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55459
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.209.105.68.			IN	A

;; AUTHORITY SECTION:
.			178	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 45 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:54:31 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 68.105.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.105.209.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
139.59.213.137	attackbots	139.59.213.137 - - [13/Oct/2019:13:52:54 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.213.137 - - [13/Oct/2019:13:52:55 +0200] "POST /wp-login.php HTTP/1.1" 200 1524 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.213.137 - - [13/Oct/2019:13:52:55 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "POST /wp-login.php HTTP/1.1" 200 1507 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "GET /wp-login.php HTTP/1.1" 200 1129 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.213.137 - - [13/Oct/2019:13:52:56 +0200] "POST /wp-login.php HTTP/1.1" 200 1501 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-10-13 23:00:16
59.120.244.101	attackbotsspam	Automatic report - Port Scan Attack	2019-10-13 23:01:31
200.196.253.251	attackspambots	Oct 13 16:18:06 lnxweb62 sshd[23670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.253.251	2019-10-13 23:28:08
51.77.156.223	attack	Oct 13 15:57:59 cp sshd[24572]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.156.223	2019-10-13 23:17:19
192.160.102.169	attackspambots	wp4.breidenba.ch:80 192.160.102.169 - - \[13/Oct/2019:13:52:30 +0200\] "POST /xmlrpc.php HTTP/1.0" 301 499 "-" "Mozilla/5.0 $Macintosh\; Intel Mac OS X 10_12_6$ AppleWebKit/605.1.15 $KHTML, like Gecko$ Version/11.1.2 Safari/605.1.15" wp4.breidenba.ch 192.160.102.169 \[13/Oct/2019:13:52:33 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 3777 "-" "Mozilla/5.0 $Macintosh\; Intel Mac OS X 10_12_6$ AppleWebKit/605.1.15 $KHTML, like Gecko$ Version/11.1.2 Safari/605.1.15"	2019-10-13 23:10:20
49.88.112.113	attackbotsspam	Oct 13 11:07:40 plusreed sshd[22164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113 user=root Oct 13 11:07:42 plusreed sshd[22164]: Failed password for root from 49.88.112.113 port 59338 ssh2 ...	2019-10-13 23:35:10
106.12.11.79	attackspambots	Oct 13 13:31:13 mail sshd[2705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.79 user=root Oct 13 13:31:14 mail sshd[2705]: Failed password for root from 106.12.11.79 port 53598 ssh2 Oct 13 13:46:24 mail sshd[26265]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.79 user=root Oct 13 13:46:26 mail sshd[26265]: Failed password for root from 106.12.11.79 port 54502 ssh2 Oct 13 13:51:56 mail sshd[2608]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.11.79 user=root Oct 13 13:51:58 mail sshd[2608]: Failed password for root from 106.12.11.79 port 35754 ssh2 ...	2019-10-13 23:32:36
79.190.48.166	attackspam	Oct 13 02:07:44 home sshd[9401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.190.48.166 user=root Oct 13 02:07:46 home sshd[9401]: Failed password for root from 79.190.48.166 port 53366 ssh2 Oct 13 02:40:45 home sshd[9788]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.190.48.166 user=root Oct 13 02:40:47 home sshd[9788]: Failed password for root from 79.190.48.166 port 46774 ssh2 Oct 13 03:08:28 home sshd[10178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.190.48.166 user=root Oct 13 03:08:30 home sshd[10178]: Failed password for root from 79.190.48.166 port 50558 ssh2 Oct 13 03:35:59 home sshd[10455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.190.48.166 user=root Oct 13 03:36:01 home sshd[10455]: Failed password for root from 79.190.48.166 port 54338 ssh2 Oct 13 04:03:22 home sshd[10722]: pam_unix(sshd:auth): authentic	2019-10-13 23:22:48
221.193.248.52	attackbotsspam	Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\<REMOVED.dejholden@REMOVED.de\>, method=PLAIN, rip=221.193.248.52, lip=REMOVED, TLS, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=221.193.248.52, lip=REMOVED, TLS, session=\ Oct 13 REMOVED dovecot: imap-login: Disconnected $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=221.193.248.52, lip=REMOVED, TLS, session=\	2019-10-13 22:59:47
178.128.76.6	attack	Oct 13 17:08:43 tux-35-217 sshd\[22154\]: Invalid user 123 from 178.128.76.6 port 47784 Oct 13 17:08:43 tux-35-217 sshd\[22154\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6 Oct 13 17:08:45 tux-35-217 sshd\[22154\]: Failed password for invalid user 123 from 178.128.76.6 port 47784 ssh2 Oct 13 17:13:02 tux-35-217 sshd\[22185\]: Invalid user Q!W@E\#R$T% from 178.128.76.6 port 59186 Oct 13 17:13:02 tux-35-217 sshd\[22185\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6 ...	2019-10-13 23:37:05
142.93.214.20	attackspam	Oct 13 14:45:18 web8 sshd\[2852\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 user=root Oct 13 14:45:20 web8 sshd\[2852\]: Failed password for root from 142.93.214.20 port 50598 ssh2 Oct 13 14:50:00 web8 sshd\[5180\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 user=root Oct 13 14:50:02 web8 sshd\[5180\]: Failed password for root from 142.93.214.20 port 33922 ssh2 Oct 13 14:54:43 web8 sshd\[7408\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.214.20 user=root	2019-10-13 22:56:51
202.152.156.75	attackspambots	port scan and connect, tcp 23 (telnet)	2019-10-13 23:31:03
213.100.248.110	attackbotsspam	Oct 13 01:52:04 kapalua sshd\[4081\]: Invalid user pi from 213.100.248.110 Oct 13 01:52:04 kapalua sshd\[4083\]: Invalid user pi from 213.100.248.110 Oct 13 01:52:04 kapalua sshd\[4081\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-213-100-248-110.cust.tele2.ee Oct 13 01:52:04 kapalua sshd\[4083\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static-213-100-248-110.cust.tele2.ee Oct 13 01:52:06 kapalua sshd\[4081\]: Failed password for invalid user pi from 213.100.248.110 port 40744 ssh2	2019-10-13 23:27:31
122.143.96.206	attack	Unauthorised access (Oct 13) SRC=122.143.96.206 LEN=40 TTL=49 ID=24914 TCP DPT=8080 WINDOW=46339 SYN Unauthorised access (Oct 10) SRC=122.143.96.206 LEN=40 TTL=49 ID=59548 TCP DPT=8080 WINDOW=30922 SYN Unauthorised access (Oct 10) SRC=122.143.96.206 LEN=40 TTL=49 ID=28427 TCP DPT=8080 WINDOW=34126 SYN	2019-10-13 23:09:08
152.168.137.2	attack	Oct 13 15:56:28 MainVPS sshd[26365]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 user=root Oct 13 15:56:30 MainVPS sshd[26365]: Failed password for root from 152.168.137.2 port 39345 ssh2 Oct 13 16:01:18 MainVPS sshd[26730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 user=root Oct 13 16:01:19 MainVPS sshd[26730]: Failed password for root from 152.168.137.2 port 59465 ssh2 Oct 13 16:06:24 MainVPS sshd[27098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.168.137.2 user=root Oct 13 16:06:26 MainVPS sshd[27098]: Failed password for root from 152.168.137.2 port 51349 ssh2 ...	2019-10-13 23:11:44

Recently Reported IPs

134.209.105.28	134.209.105.89	134.209.106.109	118.173.109.195
134.209.106.13	134.209.106.181	134.209.106.218	134.209.106.200
134.209.106.227	134.209.106.24	134.209.106.251	134.209.106.253
134.209.106.247	134.209.106.38	134.209.106.81	134.209.106.91
118.173.109.245	134.209.107.166	134.209.107.128	134.209.107.184