Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
firewall-block, port(s): 53413/udp
2019-08-28 04:16:29
Comments on same subnet:
IP Type Details Datetime
134.209.148.107 attackbotsspam
Oct  6 18:51:56 router sshd[24181]: Failed password for root from 134.209.148.107 port 46336 ssh2
Oct  6 18:52:49 router sshd[24183]: Failed password for root from 134.209.148.107 port 56478 ssh2
...
2020-10-07 02:13:06
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-06 18:08:51
134.209.146.100 attackspambots
SSH login attempts.
2020-10-06 04:07:13
134.209.146.100 attack
(sshd) Failed SSH login from 134.209.146.100 (IN/India/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  5 04:33:33 optimus sshd[9540]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.100  user=root
Oct  5 04:33:35 optimus sshd[9540]: Failed password for root from 134.209.146.100 port 35738 ssh2
Oct  5 04:37:49 optimus sshd[10850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.100  user=root
Oct  5 04:37:52 optimus sshd[10850]: Failed password for root from 134.209.146.100 port 42836 ssh2
Oct  5 04:41:56 optimus sshd[12085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.100  user=root
2020-10-05 20:05:53
134.209.149.64 attack
SSH bruteforce
2020-10-01 07:58:12
134.209.148.107 attackspambots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-30 03:43:16
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-29 19:49:18
134.209.146.100 attackspambots
$f2bV_matches
2020-09-21 20:10:14
134.209.146.100 attackbotsspam
Sep 21 00:30:08 firewall sshd[11330]: Failed password for root from 134.209.146.100 port 58166 ssh2
Sep 21 00:34:31 firewall sshd[11450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.146.100  user=root
Sep 21 00:34:33 firewall sshd[11450]: Failed password for root from 134.209.146.100 port 41756 ssh2
...
2020-09-21 12:02:00
134.209.146.100 attackspambots
Sep 20 20:17:02 lavrea sshd[96545]: Invalid user test1 from 134.209.146.100 port 59768
...
2020-09-21 03:53:15
134.209.148.107 attackspambots
 TCP (SYN) 134.209.148.107:44843 -> port 24561, len 44
2020-09-11 23:00:06
134.209.148.107 attackspam
Port scan denied
2020-09-11 15:04:50
134.209.148.107 attack
13978/tcp 2841/tcp 19528/tcp...
[2020-07-10/09-10]190pkt,72pt.(tcp)
2020-09-11 07:17:31
134.209.149.64 attackspambots
Aug 31 16:48:18 marvibiene sshd[30303]: Failed password for root from 134.209.149.64 port 57978 ssh2
Aug 31 16:53:03 marvibiene sshd[30558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.149.64 
Aug 31 16:53:05 marvibiene sshd[30558]: Failed password for invalid user hadoop from 134.209.149.64 port 37620 ssh2
2020-08-31 23:37:16
134.209.146.100 attack
detected by Fail2Ban
2020-08-30 20:25:18
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.14.237
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7631
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.14.237.			IN	A

;; AUTHORITY SECTION:
.			2680	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082701 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Aug 28 04:16:10 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 237.14.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 237.14.209.134.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
187.177.85.161 attack
Automatic report - Port Scan Attack
2020-02-07 03:18:40
185.209.57.125 attackbotsspam
Port 1433 Scan
2020-02-07 03:06:01
51.75.255.6 attackspambots
Feb  6 20:31:22 ns381471 sshd[15694]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.255.6
Feb  6 20:31:23 ns381471 sshd[15694]: Failed password for invalid user vagrant from 51.75.255.6 port 51602 ssh2
2020-02-07 03:38:35
187.85.253.175 attackbots
187.85.253.175 - - \[06/Feb/2020:14:40:40 +0100\] "POST /HNAP1/ HTTP/1.0" 301 547 "-" "-"
2020-02-07 03:10:21
104.248.221.80 attack
MultiHost/MultiPort Probe, Scan, Hack -
2020-02-07 03:39:51
193.188.22.187 attackspambots
[05/Feb/2020:08:00:51 -0500] "\x03" Blank UA
2020-02-07 03:23:20
94.102.49.112 attackbotsspam
Feb  6 19:52:50 debian-2gb-nbg1-2 kernel: \[3274414.847776\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.49.112 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=5203 PROTO=TCP SPT=42554 DPT=30412 WINDOW=1024 RES=0x00 SYN URGP=0
2020-02-07 03:37:50
218.92.0.202 attackspam
Feb  6 19:50:52 MK-Soft-Root1 sshd[28291]: Failed password for root from 218.92.0.202 port 12901 ssh2
Feb  6 19:50:54 MK-Soft-Root1 sshd[28291]: Failed password for root from 218.92.0.202 port 12901 ssh2
...
2020-02-07 03:30:44
222.186.175.181 attackspambots
2020-2-6 8:17:40 PM: failed ssh attempt
2020-02-07 03:23:07
125.213.216.180 attackspambots
Unauthorized connection attempt from IP address 125.213.216.180 on Port 445(SMB)
2020-02-07 03:34:12
61.149.194.91 attack
Feb  6 14:40:08 vmd17057 sshd\[26769\]: Invalid user zzj from 61.149.194.91 port 56160
Feb  6 14:40:08 vmd17057 sshd\[26769\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.149.194.91
Feb  6 14:40:10 vmd17057 sshd\[26769\]: Failed password for invalid user zzj from 61.149.194.91 port 56160 ssh2
...
2020-02-07 03:37:32
187.202.178.134 attack
Port 1433 Scan
2020-02-07 03:26:26
180.253.236.201 attack
Lines containing failures of 180.253.236.201 (max 1000)
Feb  6 19:38:02 Server sshd[22223]: Did not receive identification string from 180.253.236.201 port 35769
Feb  6 19:38:06 Server sshd[22224]: Invalid user admin1 from 180.253.236.201 port 63067
Feb  6 19:38:06 Server sshd[22224]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.253.236.201
Feb  6 19:38:07 Server sshd[22224]: Failed password for invalid user admin1 from 180.253.236.201 port 63067 ssh2
Feb  6 19:38:07 Server sshd[22224]: Connection closed by invalid user admin1 180.253.236.201 port 63067 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=180.253.236.201
2020-02-07 03:11:46
162.243.131.92 attack
firewall-block, port(s): 7777/tcp
2020-02-07 03:29:40
91.232.96.7 attack
Feb  6 14:40:06 grey postfix/smtpd\[3848\]: NOQUEUE: reject: RCPT from greet.msaysha.com\[91.232.96.7\]: 554 5.7.1 Service unavailable\; Client host \[91.232.96.7\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.232.96.7\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-02-07 03:40:18

Recently Reported IPs

122.224.29.168 96.69.88.83 221.233.76.78 61.120.152.11
193.106.43.215 60.162.160.74 113.135.195.176 245.205.105.30
47.64.245.16 107.173.191.116 49.83.95.197 27.14.83.98
122.116.143.89 36.183.193.142 106.12.133.165 192.3.70.16
83.212.32.228 1.10.186.35 81.66.126.56 177.8.154.182