City: Santa Clara
Region: California
Country: United States
Internet Service Provider: unknown
Hostname: unknown
Organization: DigitalOcean, LLC
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.158.114 | botsattackproxy | Bot attacker IP |
2025-07-11 12:53:52 |
| 134.209.157.216 | attack | fraud connect |
2024-04-04 18:37:59 |
| 134.209.157.198 | attack | Automatically reported by fail2ban report script (mx1) |
2020-10-14 08:45:01 |
| 134.209.155.5 | attack | 134.209.155.5 - - [09/Oct/2020:22:48:18 +0200] "GET / HTTP/1.1" 200 612 "-" "-" |
2020-10-10 23:15:18 |
| 134.209.155.5 | attackbots | 134.209.155.5 - - [09/Oct/2020:22:48:18 +0200] "GET / HTTP/1.1" 200 612 "-" "-" |
2020-10-10 15:05:34 |
| 134.209.154.74 | attackspam |
|
2020-10-07 03:12:13 |
| 134.209.154.74 | attackspam | TCP ports : 18176 / 32042 |
2020-10-06 19:11:47 |
| 134.209.159.10 | attackbotsspam | Port scan: Attack repeated for 24 hours |
2020-10-06 03:35:32 |
| 134.209.159.10 | attackspam |
|
2020-10-05 19:29:50 |
| 134.209.153.36 | attackspam | Oct 3 14:41:22 mout sshd[12511]: Invalid user rg from 134.209.153.36 port 38328 Oct 3 14:41:24 mout sshd[12511]: Failed password for invalid user rg from 134.209.153.36 port 38328 ssh2 Oct 3 14:41:24 mout sshd[12511]: Disconnected from invalid user rg 134.209.153.36 port 38328 [preauth] |
2020-10-04 04:32:43 |
| 134.209.153.36 | attack | $f2bV_matches |
2020-10-03 20:39:14 |
| 134.209.153.36 | attackbots | Oct 2 06:57:53 kunden sshd[6278]: Invalid user developer from 134.209.153.36 Oct 2 06:57:53 kunden sshd[6278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.153.36 Oct 2 06:57:56 kunden sshd[6278]: Failed password for invalid user developer from 134.209.153.36 port 39016 ssh2 Oct 2 06:57:56 kunden sshd[6278]: Received disconnect from 134.209.153.36: 11: Bye Bye [preauth] Oct 2 07:03:03 kunden sshd[11337]: Invalid user cc from 134.209.153.36 Oct 2 07:03:04 kunden sshd[11337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.153.36 Oct 2 07:03:06 kunden sshd[11337]: Failed password for invalid user cc from 134.209.153.36 port 39582 ssh2 Oct 2 07:03:06 kunden sshd[11337]: Received disconnect from 134.209.153.36: 11: Bye Bye [preauth] Oct 2 07:04:42 kunden sshd[12131]: Invalid user ubuntu from 134.209.153.36 Oct 2 07:04:42 kunden sshd[12131]: pam_unix(sshd:auth): aut........ ------------------------------- |
2020-10-03 06:47:07 |
| 134.209.157.198 | attack | WordPress login Brute force / Web App Attack on client site. |
2020-09-30 03:13:30 |
| 134.209.157.198 | attackbots | 134.209.157.198 - - [29/Sep/2020:09:44:29 +0100] "POST /wp-login.php HTTP/1.1" 200 2342 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.157.198 - - [29/Sep/2020:09:44:29 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.157.198 - - [29/Sep/2020:09:49:17 +0100] "POST /wp-login.php HTTP/1.1" 200 2342 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-29 19:18:00 |
| 134.209.150.94 | attack |
|
2020-09-28 04:09:00 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.15.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14811
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.15.55. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 13:39:18 +08 2019
;; MSG SIZE rcvd: 117
Host 55.15.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.3
Address: 67.207.67.3#53
** server can't find 55.15.209.134.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 68.183.22.86 | attackspambots | Aug 21 14:40:15 mail sshd\[7843\]: Failed password for invalid user ssl from 68.183.22.86 port 35182 ssh2 Aug 21 14:57:14 mail sshd\[8347\]: Invalid user forge from 68.183.22.86 port 49544 ... |
2019-08-21 22:09:45 |
| 41.89.160.13 | attackspambots | Aug 21 10:16:18 plusreed sshd[32503]: Invalid user vianney from 41.89.160.13 ... |
2019-08-21 22:26:14 |
| 95.237.160.158 | attackspambots | [20/Aug/2019:02:03:00 -0400] "GET / HTTP/1.1" Safari 9.1.2 UA |
2019-08-21 21:39:11 |
| 125.212.207.205 | attackbotsspam | (sshd) Failed SSH login from 125.212.207.205 (-): 5 in the last 3600 secs |
2019-08-21 21:36:55 |
| 188.0.9.141 | attackspam | [portscan] Port scan |
2019-08-21 21:48:57 |
| 213.135.239.146 | attackspam | Aug 21 14:43:46 icinga sshd[23715]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.135.239.146 Aug 21 14:43:48 icinga sshd[23715]: Failed password for invalid user uftp from 213.135.239.146 port 11014 ssh2 ... |
2019-08-21 21:56:14 |
| 139.59.17.118 | attackbots | Aug 21 15:41:18 mail sshd\[8519\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.17.118 Aug 21 15:41:20 mail sshd\[8519\]: Failed password for invalid user oracle from 139.59.17.118 port 47750 ssh2 Aug 21 15:46:12 mail sshd\[9253\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.17.118 user=root Aug 21 15:46:14 mail sshd\[9253\]: Failed password for root from 139.59.17.118 port 37196 ssh2 Aug 21 15:51:06 mail sshd\[9906\]: Invalid user nexus from 139.59.17.118 port 54852 |
2019-08-21 21:52:35 |
| 111.56.50.236 | attackbots | Looking for resource vulnerabilities |
2019-08-21 22:30:09 |
| 54.37.205.162 | attack | Aug 21 15:28:07 ks10 sshd[23980]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.205.162 user=sync Aug 21 15:28:09 ks10 sshd[23980]: Failed password for invalid user sync from 54.37.205.162 port 46384 ssh2 ... |
2019-08-21 21:29:54 |
| 58.87.124.196 | attack | Aug 21 09:28:46 plusreed sshd[19359]: Invalid user tomcat from 58.87.124.196 ... |
2019-08-21 21:44:25 |
| 2.32.113.118 | attack | Aug 21 03:13:11 aiointranet sshd\[19657\]: Invalid user ysl from 2.32.113.118 Aug 21 03:13:11 aiointranet sshd\[19657\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-32-113-118.cust.vodafonedsl.it Aug 21 03:13:13 aiointranet sshd\[19657\]: Failed password for invalid user ysl from 2.32.113.118 port 34738 ssh2 Aug 21 03:18:05 aiointranet sshd\[20057\]: Invalid user temp from 2.32.113.118 Aug 21 03:18:05 aiointranet sshd\[20057\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=net-2-32-113-118.cust.vodafonedsl.it |
2019-08-21 21:31:00 |
| 46.161.39.219 | attack | Aug 21 05:22:44 home sshd[24124]: Invalid user eun from 46.161.39.219 port 51490 Aug 21 05:22:44 home sshd[24124]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.161.39.219 Aug 21 05:22:44 home sshd[24124]: Invalid user eun from 46.161.39.219 port 51490 Aug 21 05:22:46 home sshd[24124]: Failed password for invalid user eun from 46.161.39.219 port 51490 ssh2 Aug 21 05:31:04 home sshd[24139]: Invalid user sftpuser from 46.161.39.219 port 33068 Aug 21 05:31:04 home sshd[24139]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.161.39.219 Aug 21 05:31:04 home sshd[24139]: Invalid user sftpuser from 46.161.39.219 port 33068 Aug 21 05:31:06 home sshd[24139]: Failed password for invalid user sftpuser from 46.161.39.219 port 33068 ssh2 Aug 21 05:35:05 home sshd[24165]: Invalid user sicher from 46.161.39.219 port 59680 Aug 21 05:35:05 home sshd[24165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= r |
2019-08-21 21:30:22 |
| 207.148.5.31 | attackspambots | Aug 21 08:47:32 shadeyouvpn sshd[28369]: Address 207.148.5.31 maps to 207.148.5.31.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 21 08:47:32 shadeyouvpn sshd[28369]: Invalid user castis from 207.148.5.31 Aug 21 08:47:32 shadeyouvpn sshd[28369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.148.5.31 Aug 21 08:47:34 shadeyouvpn sshd[28369]: Failed password for invalid user castis from 207.148.5.31 port 47852 ssh2 Aug 21 08:47:34 shadeyouvpn sshd[28369]: Received disconnect from 207.148.5.31: 11: Bye Bye [preauth] Aug 21 08:54:32 shadeyouvpn sshd[1609]: Address 207.148.5.31 maps to 207.148.5.31.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Aug 21 08:54:32 shadeyouvpn sshd[1609]: Invalid user knight from 207.148.5.31 Aug 21 08:54:32 shadeyouvpn sshd[1609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.148.5......... ------------------------------- |
2019-08-21 22:26:50 |
| 114.70.194.81 | attackspambots | Aug 21 03:40:52 wbs sshd\[14150\]: Invalid user emily from 114.70.194.81 Aug 21 03:40:52 wbs sshd\[14150\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.81 Aug 21 03:40:55 wbs sshd\[14150\]: Failed password for invalid user emily from 114.70.194.81 port 40840 ssh2 Aug 21 03:46:06 wbs sshd\[14623\]: Invalid user phoebe from 114.70.194.81 Aug 21 03:46:06 wbs sshd\[14623\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.81 |
2019-08-21 21:51:54 |
| 196.28.101.116 | attackspambots | Unauthorised access (Aug 21) SRC=196.28.101.116 LEN=40 TTL=242 ID=8454 TCP DPT=445 WINDOW=1024 SYN |
2019-08-21 22:38:30 |