City: unknown
Region: unknown
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbotsspam | Oct 6 18:51:56 router sshd[24181]: Failed password for root from 134.209.148.107 port 46336 ssh2 Oct 6 18:52:49 router sshd[24183]: Failed password for root from 134.209.148.107 port 56478 ssh2 ... |
2020-10-07 02:13:06 |
| attackbotsspam | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-10-06 18:08:51 |
| attackspambots | [N1.H1.VM1] Port Scanner Detected Blocked by UFW |
2020-09-30 03:43:16 |
| attackbotsspam | [N3.H3.VM3] Port Scanner Detected Blocked by UFW |
2020-09-29 19:49:18 |
| attackspambots |
|
2020-09-11 23:00:06 |
| attackspam | Port scan denied |
2020-09-11 15:04:50 |
| attack | 13978/tcp 2841/tcp 19528/tcp... [2020-07-10/09-10]190pkt,72pt.(tcp) |
2020-09-11 07:17:31 |
| attackspam | Aug 23 11:38:05 PorscheCustomer sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 Aug 23 11:38:07 PorscheCustomer sshd[10368]: Failed password for invalid user zn from 134.209.148.107 port 52346 ssh2 Aug 23 11:39:31 PorscheCustomer sshd[10404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 ... |
2020-08-23 18:05:59 |
| attack | TCP port : 25791 |
2020-08-22 18:49:24 |
| attackspam | 2020-08-19T16:48:15.283554server.mjenks.net sshd[3507142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 2020-08-19T16:48:15.276367server.mjenks.net sshd[3507142]: Invalid user szd from 134.209.148.107 port 59392 2020-08-19T16:48:17.967383server.mjenks.net sshd[3507142]: Failed password for invalid user szd from 134.209.148.107 port 59392 ssh2 2020-08-19T16:52:17.263658server.mjenks.net sshd[3507575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 user=root 2020-08-19T16:52:19.169542server.mjenks.net sshd[3507575]: Failed password for root from 134.209.148.107 port 38798 ssh2 ... |
2020-08-20 08:42:45 |
| attackspambots | Aug 19 21:26:38 pornomens sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 user=root Aug 19 21:26:40 pornomens sshd\[26061\]: Failed password for root from 134.209.148.107 port 40294 ssh2 Aug 19 21:33:27 pornomens sshd\[26112\]: Invalid user mort from 134.209.148.107 port 48678 Aug 19 21:33:27 pornomens sshd\[26112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 ... |
2020-08-20 03:39:40 |
| attackspam | Aug 19 00:51:57 rotator sshd\[30371\]: Failed password for root from 134.209.148.107 port 48254 ssh2Aug 19 00:54:14 rotator sshd\[30389\]: Failed password for root from 134.209.148.107 port 55288 ssh2Aug 19 00:56:23 rotator sshd\[31160\]: Invalid user mee from 134.209.148.107Aug 19 00:56:25 rotator sshd\[31160\]: Failed password for invalid user mee from 134.209.148.107 port 34098 ssh2Aug 19 00:58:38 rotator sshd\[31169\]: Invalid user courses from 134.209.148.107Aug 19 00:58:40 rotator sshd\[31169\]: Failed password for invalid user courses from 134.209.148.107 port 41142 ssh2 ... |
2020-08-19 07:35:56 |
| attackspambots | firewall-block, port(s): 13059/tcp |
2020-08-15 02:48:55 |
| attack | SSH Brute Force |
2020-08-13 09:52:07 |
| attackbotsspam | firewall-block, port(s): 16314/tcp |
2020-08-08 16:28:09 |
| attackspambots | Port scan: Attack repeated for 24 hours |
2020-08-07 06:30:47 |
| attackspam | Port Scan ... |
2020-07-31 02:31:26 |
| attack | Jul 27 00:06:40 fhem-rasp sshd[31201]: Invalid user refat from 134.209.148.107 port 52570 ... |
2020-07-27 08:06:18 |
| attack |
|
2020-07-21 00:44:48 |
| attack | Invalid user joseph from 134.209.148.107 port 49244 |
2020-07-18 20:12:12 |
| attackspambots | Jul 13 21:02:11 mout sshd[19229]: Invalid user oem from 134.209.148.107 port 57944 Jul 13 21:02:13 mout sshd[19229]: Failed password for invalid user oem from 134.209.148.107 port 57944 ssh2 Jul 13 21:02:15 mout sshd[19229]: Disconnected from invalid user oem 134.209.148.107 port 57944 [preauth] |
2020-07-14 03:19:10 |
| attackbotsspam | Jul 11 09:59:59 PorscheCustomer sshd[8281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 Jul 11 10:00:01 PorscheCustomer sshd[8281]: Failed password for invalid user marlo from 134.209.148.107 port 51800 ssh2 Jul 11 10:02:18 PorscheCustomer sshd[8321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107 ... |
2020-07-11 16:04:21 |
| attackbotsspam | 07/09/2020-12:11:35.797235 134.209.148.107 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-07-10 00:15:27 |
| attackbots | scans 2 times in preceeding hours on the ports (in chronological order) 19921 30183 |
2020-07-08 21:10:27 |
| attackspambots | firewall-block, port(s): 28048/tcp |
2020-07-05 08:18:20 |
| attack | TCP port : 5989 |
2020-07-01 01:30:20 |
| attack | Fail2Ban Ban Triggered |
2020-06-23 15:50:56 |
| attack | Invalid user toor from 134.209.148.107 port 48802 |
2020-06-06 18:28:54 |
| attack | web-1 [ssh] SSH Attack |
2020-06-04 02:14:46 |
| attackbotsspam | " " |
2020-06-02 01:37:48 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.148.148 | attackbots | Mar 2 15:19:57 xxxxxxx7446550 sshd[19084]: Invalid user postgres from 134.209.148.148 Mar 2 15:19:57 xxxxxxx7446550 sshd[19084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 Mar 2 15:19:59 xxxxxxx7446550 sshd[19084]: Failed password for invalid user postgres from 134.209.148.148 port 50092 ssh2 Mar 2 15:19:59 xxxxxxx7446550 sshd[19085]: Received disconnect from 134.209.148.148: 11: Normal Shutdown Mar 2 15:23:45 xxxxxxx7446550 sshd[19884]: Invalid user farbe-bfi1234 from 134.209.148.148 Mar 2 15:23:45 xxxxxxx7446550 sshd[19884]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.148 Mar 2 15:23:47 xxxxxxx7446550 sshd[19884]: Failed password for invalid user farbe-bfi1234 from 134.209.148.148 port 47848 ssh2 Mar 2 15:23:47 xxxxxxx7446550 sshd[19885]: Received disconnect from 134.209.148.148: 11: Normal Shutdown ........ ----------------------------------------------- https://www.blocklist.de/ |
2020-03-08 05:41:12 |
| 134.209.148.109 | attack | Automatic report - XMLRPC Attack |
2020-02-25 16:37:19 |
| 134.209.148.227 | attackspam | 2019-04-11 16:04:31 1hEaJa-0003i6-SD SMTP connection from silky.msolutioncode.com \(broad.criccrowd.icu\) \[134.209.148.227\]:49068 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-04-11 16:05:37 1hEaKf-0003jp-86 SMTP connection from silky.msolutioncode.com \(other.criccrowd.icu\) \[134.209.148.227\]:49562 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-11 16:06:55 1hEaLv-0003kw-0s SMTP connection from silky.msolutioncode.com \(spade.criccrowd.icu\) \[134.209.148.227\]:46689 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-12 15:48:59 1hEwY7-0008Sw-Kh SMTP connection from silky.msolutioncode.com \(harsh.criccrowd.icu\) \[134.209.148.227\]:43193 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-12 15:49:25 1hEwYX-0008Tq-AM SMTP connection from silky.msolutioncode.com \(stew.criccrowd.icu\) \[134.209.148.227\]:53901 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-04-12 15:49:47 1hEwYt-0008Uk-9M SMTP connection from silky.msolutioncode.com \(garnish.criccrowd.icu\) \[13 ... |
2020-02-05 03:49:03 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.148.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7807
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.148.107. IN A
;; AUTHORITY SECTION:
. 424 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020020401 1800 900 604800 86400
;; Query time: 47 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 05 15:41:05 CST 2020
;; MSG SIZE rcvd: 119Host 107.148.209.134.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 107.148.209.134.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 220.132.75.167 | attack | SSH Brute Force, server-1 sshd[14375]: Failed password for invalid user git from 220.132.75.167 port 55820 ssh2 |
2019-08-06 12:58:45 |
| 77.221.146.10 | attackspambots | SSH Brute Force, server-1 sshd[14388]: Failed password for invalid user riverdal from 77.221.146.10 port 53196 ssh2 |
2019-08-06 13:12:19 |
| 178.32.218.192 | attackbots | SSH Brute Force, server-1 sshd[14340]: Failed password for invalid user irma from 178.32.218.192 port 50004 ssh2 |
2019-08-06 13:03:00 |
| 212.85.78.130 | attackspam | Aug 6 06:46:10 icinga sshd[31693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.85.78.130 Aug 6 06:46:11 icinga sshd[31693]: Failed password for invalid user usuario from 212.85.78.130 port 52488 ssh2 ... |
2019-08-06 12:48:57 |
| 206.189.41.34 | attackspambots | SSH Brute Force, server-1 sshd[14353]: Failed password for invalid user qwerty123 from 206.189.41.34 port 23466 ssh2 |
2019-08-06 13:06:23 |
| 138.197.202.133 | attackspam | SSH Brute Force, server-1 sshd[9246]: Failed password for invalid user sftp from 138.197.202.133 port 35184 ssh2 |
2019-08-06 13:08:19 |
| 94.177.242.77 | attackspam | Aug 6 03:33:14 vps65 sshd\[3480\]: Invalid user vierge from 94.177.242.77 port 37738 Aug 6 03:33:14 vps65 sshd\[3480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.242.77 ... |
2019-08-06 12:55:11 |
| 175.98.115.247 | attack | $f2bV_matches_ltvn |
2019-08-06 12:23:35 |
| 167.99.173.171 | attack | Aug 6 00:35:02 debian sshd\[18040\]: Invalid user francoise from 167.99.173.171 port 42402 Aug 6 00:35:02 debian sshd\[18040\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.173.171 Aug 6 00:35:04 debian sshd\[18040\]: Failed password for invalid user francoise from 167.99.173.171 port 42402 ssh2 ... |
2019-08-06 13:03:18 |
| 178.48.6.77 | attack | Automatic report - Banned IP Access |
2019-08-06 13:02:29 |
| 112.162.106.65 | attack | Telnet/23 MH Probe, BF, Hack - |
2019-08-06 13:18:40 |
| 151.80.61.103 | attackbotsspam | Aug 6 05:41:12 SilenceServices sshd[21557]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=151.80.61.103 Aug 6 05:41:14 SilenceServices sshd[21557]: Failed password for invalid user rios from 151.80.61.103 port 40520 ssh2 Aug 6 05:45:19 SilenceServices sshd[24749]: Failed password for root from 151.80.61.103 port 36886 ssh2 |
2019-08-06 12:32:59 |
| 103.10.30.224 | attackspam | Aug 6 03:23:36 Ubuntu-1404-trusty-64-minimal sshd\[32346\]: Invalid user ofsaa from 103.10.30.224 Aug 6 03:23:36 Ubuntu-1404-trusty-64-minimal sshd\[32346\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.30.224 Aug 6 03:23:37 Ubuntu-1404-trusty-64-minimal sshd\[32346\]: Failed password for invalid user ofsaa from 103.10.30.224 port 52332 ssh2 Aug 6 03:33:35 Ubuntu-1404-trusty-64-minimal sshd\[4915\]: Invalid user ksrkm from 103.10.30.224 Aug 6 03:33:35 Ubuntu-1404-trusty-64-minimal sshd\[4915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.30.224 |
2019-08-06 12:38:15 |
| 35.196.165.47 | attackbotsspam | Aug 6 01:33:50 DDOS Attack: SRC=35.196.165.47 DST=[Masked] LEN=40 TOS=0x00 PREC=0x00 TTL=236 PROTO=TCP SPT=53980 DPT=80 WINDOW=1200 RES=0x00 RST URGP=0 |
2019-08-06 12:31:45 |
| 160.120.177.106 | attackbotsspam | SSH Brute Force, server-1 sshd[10634]: Failed password for invalid user ubnt from 160.120.177.106 port 53533 ssh2 |
2019-08-06 13:03:37 |