Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
134.209.148.107 attackbotsspam
Oct  6 18:51:56 router sshd[24181]: Failed password for root from 134.209.148.107 port 46336 ssh2
Oct  6 18:52:49 router sshd[24183]: Failed password for root from 134.209.148.107 port 56478 ssh2
...
2020-10-07 02:13:06
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-10-06 18:08:51
134.209.148.107 attackspambots
[N1.H1.VM1] Port Scanner Detected Blocked by UFW
2020-09-30 03:43:16
134.209.148.107 attackbotsspam
[N3.H3.VM3] Port Scanner Detected Blocked by UFW
2020-09-29 19:49:18
134.209.148.107 attackspambots
 TCP (SYN) 134.209.148.107:44843 -> port 24561, len 44
2020-09-11 23:00:06
134.209.148.107 attackspam
Port scan denied
2020-09-11 15:04:50
134.209.148.107 attack
13978/tcp 2841/tcp 19528/tcp...
[2020-07-10/09-10]190pkt,72pt.(tcp)
2020-09-11 07:17:31
134.209.148.107 attackspam
Aug 23 11:38:05 PorscheCustomer sshd[10368]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
Aug 23 11:38:07 PorscheCustomer sshd[10368]: Failed password for invalid user zn from 134.209.148.107 port 52346 ssh2
Aug 23 11:39:31 PorscheCustomer sshd[10404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-23 18:05:59
134.209.148.107 attack
TCP port : 25791
2020-08-22 18:49:24
134.209.148.107 attackspam
2020-08-19T16:48:15.283554server.mjenks.net sshd[3507142]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
2020-08-19T16:48:15.276367server.mjenks.net sshd[3507142]: Invalid user szd from 134.209.148.107 port 59392
2020-08-19T16:48:17.967383server.mjenks.net sshd[3507142]: Failed password for invalid user szd from 134.209.148.107 port 59392 ssh2
2020-08-19T16:52:17.263658server.mjenks.net sshd[3507575]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
2020-08-19T16:52:19.169542server.mjenks.net sshd[3507575]: Failed password for root from 134.209.148.107 port 38798 ssh2
...
2020-08-20 08:42:45
134.209.148.107 attackspambots
Aug 19 21:26:38 pornomens sshd\[26061\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107  user=root
Aug 19 21:26:40 pornomens sshd\[26061\]: Failed password for root from 134.209.148.107 port 40294 ssh2
Aug 19 21:33:27 pornomens sshd\[26112\]: Invalid user mort from 134.209.148.107 port 48678
Aug 19 21:33:27 pornomens sshd\[26112\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.148.107
...
2020-08-20 03:39:40
134.209.148.107 attackspam
Aug 19 00:51:57 rotator sshd\[30371\]: Failed password for root from 134.209.148.107 port 48254 ssh2Aug 19 00:54:14 rotator sshd\[30389\]: Failed password for root from 134.209.148.107 port 55288 ssh2Aug 19 00:56:23 rotator sshd\[31160\]: Invalid user mee from 134.209.148.107Aug 19 00:56:25 rotator sshd\[31160\]: Failed password for invalid user mee from 134.209.148.107 port 34098 ssh2Aug 19 00:58:38 rotator sshd\[31169\]: Invalid user courses from 134.209.148.107Aug 19 00:58:40 rotator sshd\[31169\]: Failed password for invalid user courses from 134.209.148.107 port 41142 ssh2
...
2020-08-19 07:35:56
134.209.148.107 attackspambots
firewall-block, port(s): 13059/tcp
2020-08-15 02:48:55
134.209.148.107 attack
SSH Brute Force
2020-08-13 09:52:07
134.209.148.107 attackbotsspam
firewall-block, port(s): 16314/tcp
2020-08-08 16:28:09
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.148.231
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13892
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.209.148.231.		IN	A

;; AUTHORITY SECTION:
.			460	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 56 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:41:01 CST 2022
;; MSG SIZE  rcvd: 108
Host info
231.148.209.134.in-addr.arpa domain name pointer cxotoday.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
231.148.209.134.in-addr.arpa	name = cxotoday.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
58.187.44.5 attackbotsspam
 TCP (SYN) 58.187.44.5:35612 -> port 23, len 40
2020-08-02 01:04:56
212.83.132.45 attackbotsspam
[2020-08-01 12:42:36] NOTICE[1248] chan_sip.c: Registration from '"1010"' failed for '212.83.132.45:7055' - Wrong password
[2020-08-01 12:42:36] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-01T12:42:36.759-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1010",SessionID="0x7f2720091b18",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132.45/7055",Challenge="57c612b9",ReceivedChallenge="57c612b9",ReceivedHash="0c34c854dfe88256621eda18b8d0b360"
[2020-08-01 12:43:03] NOTICE[1248] chan_sip.c: Registration from '"1012"' failed for '212.83.132.45:7182' - Wrong password
[2020-08-01 12:43:03] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-01T12:43:03.931-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1012",SessionID="0x7f272007c5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.
...
2020-08-02 01:16:00
183.166.146.86 attackbots
Aug  1 17:16:19 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  1 17:17:04 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  1 17:17:16 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  1 17:17:32 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Aug  1 17:17:50 srv01 postfix/smtpd\[8606\]: warning: unknown\[183.166.146.86\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-08-02 01:46:08
217.27.121.13 attackbotsspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-08-02 01:21:51
94.102.51.95 attackspam
08/01/2020-13:16:07.992217 94.102.51.95 Protocol: 6 ET SCAN NMAP -sS window 1024
2020-08-02 01:18:08
175.24.36.114 attackspambots
Aug  1 15:21:17 vpn01 sshd[8940]: Failed password for root from 175.24.36.114 port 60136 ssh2
...
2020-08-02 01:27:16
125.116.105.164 attack
Unauthorized connection attempt detected from IP address 125.116.105.164 to port 23
2020-08-02 01:25:21
51.178.17.63 attack
Automatic report BANNED IP
2020-08-02 01:39:24
1.55.99.56 attackspam
Telnet/23 MH Probe, Scan, BF, Hack -
2020-08-02 01:08:52
106.12.212.100 attackbots
$f2bV_matches
2020-08-02 01:16:27
95.171.15.72 attackbots
Tried sshing with brute force.
2020-08-02 01:45:10
59.127.56.2 attack
Port Scan detected!
...
2020-08-02 01:43:13
122.202.241.38 attackspambots
sshd
2020-08-02 01:20:05
139.170.150.254 attackbots
sshd
2020-08-02 01:17:38
106.13.26.62 attack
Aug  1 16:26:32 fhem-rasp sshd[4689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.26.62  user=root
Aug  1 16:26:35 fhem-rasp sshd[4689]: Failed password for root from 106.13.26.62 port 58614 ssh2
...
2020-08-02 01:43:48

Recently Reported IPs

134.209.147.72 134.209.145.203 134.209.148.74 134.209.145.101
134.209.146.120 134.209.146.28 134.209.149.139 134.209.149.168
134.209.145.244 134.209.145.51 134.209.144.90 134.209.15.246
134.209.151.139 134.209.150.218 134.209.150.38 134.209.150.88
134.209.149.20 134.209.152.128 134.209.152.42 134.209.152.116