134.209.150.58

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
134.209.150.94	attack	TCP (SYN) 134.209.150.94:54706 -> port 8872, len 44	2020-09-28 04:09:00
134.209.150.94	attack	TCP ports : 8872 / 26226	2020-09-27 20:25:39
134.209.150.94	attackspambots	Fail2Ban Ban Triggered	2020-09-27 12:00:35
134.209.150.109	attackbotsspam	134.209.150.109 - - [19/Sep/2020:14:31:35 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.150.109 - - [19/Sep/2020:14:31:37 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.150.109 - - [19/Sep/2020:14:31:38 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-19 22:40:45
134.209.150.109	attackbotsspam	134.209.150.109 - - [19/Sep/2020:02:41:09 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.150.109 - - [19/Sep/2020:02:41:11 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.150.109 - - [19/Sep/2020:02:41:13 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-19 14:31:09
134.209.150.109	attack	134.209.150.109 - - \[18/Sep/2020:19:01:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 9295 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 134.209.150.109 - - \[18/Sep/2020:19:01:30 +0200\] "POST /wp-login.php HTTP/1.0" 200 9264 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" 134.209.150.109 - - \[18/Sep/2020:19:01:33 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2020-09-19 06:08:52
134.209.150.94	attackspam	TCP (SYN) 134.209.150.94:40890 -> port 18808, len 44	2020-09-07 02:49:47
134.209.150.94	attack	18072/tcp 1124/tcp 26030/tcp... [2020-07-06/09-05]195pkt,72pt.(tcp)	2020-09-06 18:15:06
134.209.150.94	attackspam	firewall-block, port(s): 25746/tcp	2020-08-22 16:30:32
134.209.150.94	attackspambots	TCP (SYN) 134.209.150.94:59079 -> port 4746, len 44	2020-08-19 08:40:52
134.209.150.94	attackspambots	Port scan: Attack repeated for 24 hours	2020-08-02 06:54:34
134.209.150.94	attack	Fail2Ban Ban Triggered	2020-07-25 17:25:41
134.209.150.94	attackspam	Port Scan detected from 134.209.150.94 (IN/India/Karnataka/Bengaluru/wingswithin.in). 4 hits in the last -12988 seconds	2020-07-18 13:46:22
134.209.150.94	attackbotsspam	14120/tcp 7659/tcp 22341/tcp... [2020-06-22/07-08]55pkt,19pt.(tcp)	2020-07-08 20:34:15
134.209.150.94	attack	24004/tcp 25538/tcp [2020-04-21/06-22]2pkt	2020-06-22 17:01:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.150.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20575
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;134.209.150.58.			IN	A

;; AUTHORITY SECTION:
.			396	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 17:25:15 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 58.150.209.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 58.150.209.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
216.218.134.12	attackspambots	Oct 18 21:53:30 rotator sshd\[2212\]: Address 216.218.134.12 maps to tor-exit.altsci.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Oct 18 21:53:31 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:34 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:36 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:39 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2Oct 18 21:53:42 rotator sshd\[2212\]: Failed password for root from 216.218.134.12 port 45833 ssh2 ...	2019-10-19 04:05:18
120.29.158.113	attack	Oct 18 19:53:17 system,error,critical: login failure for user admin from 120.29.158.113 via telnet Oct 18 19:53:18 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:19 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:20 system,error,critical: login failure for user admin from 120.29.158.113 via telnet Oct 18 19:53:21 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:22 system,error,critical: login failure for user admin from 120.29.158.113 via telnet Oct 18 19:53:24 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:25 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:26 system,error,critical: login failure for user root from 120.29.158.113 via telnet Oct 18 19:53:27 system,error,critical: login failure for user root from 120.29.158.113 via telnet	2019-10-19 04:17:02
221.140.151.235	attackspambots	Failed password for invalid user stage123 from 221.140.151.235 port 39314 ssh2 Invalid user 123Qweqaz$%\^ from 221.140.151.235 port 41095 pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.140.151.235 Failed password for invalid user 123Qweqaz$%\^ from 221.140.151.235 port 41095 ssh2 Invalid user 1234 from 221.140.151.235 port 41489	2019-10-19 04:22:35
45.227.253.138	attackbots	2019-10-18 22:11:52 dovecot_login authenticator failed for $\[45.227.253.138\]$ \[45.227.253.138\]: 535 Incorrect authentication data $set_id=info@nophost.com$ 2019-10-18 22:11:59 dovecot_login authenticator failed for $\[45.227.253.138\]$ \[45.227.253.138\]: 535 Incorrect authentication data $set_id=info$ 2019-10-18 22:12:15 dovecot_login authenticator failed for $\[45.227.253.138\]$ \[45.227.253.138\]: 535 Incorrect authentication data 2019-10-18 22:12:30 dovecot_login authenticator failed for $\[45.227.253.138\]$ \[45.227.253.138\]: 535 Incorrect authentication data 2019-10-18 22:12:39 dovecot_login authenticator failed for $\[45.227.253.138\]$ \[45.227.253.138\]: 535 Incorrect authentication data	2019-10-19 04:26:25
163.182.255.102	attackbots	Oct 18 21:49:16 tux-35-217 sshd\[30703\]: Invalid user coeurs from 163.182.255.102 port 18114 Oct 18 21:49:16 tux-35-217 sshd\[30703\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.182.255.102 Oct 18 21:49:18 tux-35-217 sshd\[30703\]: Failed password for invalid user coeurs from 163.182.255.102 port 18114 ssh2 Oct 18 21:53:51 tux-35-217 sshd\[30726\]: Invalid user wade from 163.182.255.102 port 26239 Oct 18 21:53:51 tux-35-217 sshd\[30726\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.182.255.102 ...	2019-10-19 03:58:53
167.114.0.23	attack	Oct 18 19:03:44 XXXXXX sshd[5608]: Invalid user repair from 167.114.0.23 port 37594	2019-10-19 04:04:59
212.32.230.212	attack	[portscan] Port scan	2019-10-19 04:09:38
145.239.76.171	attackbots	fail2ban honeypot	2019-10-19 03:59:16
209.217.19.2	attackspam	ft-1848-fussball.de 209.217.19.2 \[18/Oct/2019:21:53:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 2296 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" ft-1848-fussball.de 209.217.19.2 \[18/Oct/2019:21:53:32 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 514 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-10-19 04:12:46
200.57.248.74	attackspam	Automatic report - Port Scan Attack	2019-10-19 04:18:06
222.186.190.92	attackspam	Oct 18 20:26:00 hcbbdb sshd\[9399\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root Oct 18 20:26:02 hcbbdb sshd\[9399\]: Failed password for root from 222.186.190.92 port 41398 ssh2 Oct 18 20:26:15 hcbbdb sshd\[9399\]: Failed password for root from 222.186.190.92 port 41398 ssh2 Oct 18 20:26:19 hcbbdb sshd\[9399\]: Failed password for root from 222.186.190.92 port 41398 ssh2 Oct 18 20:26:27 hcbbdb sshd\[9458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.190.92 user=root	2019-10-19 04:31:16
193.32.160.150	attackbots	Oct 18 21:53:41 relay postfix/smtpd\[6284\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\<8yjra3csojlaqzfb@dubaischolars.com\> to=\ proto=ESMTP helo=\<\[193.32.160.146\]\> Oct 18 21:53:41 relay postfix/smtpd\[6284\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\<8yjra3csojlaqzfb@dubaischolars.com\> to=\ proto=ESMTP helo=\<\[193.32.160.146\]\> Oct 18 21:53:41 relay postfix/smtpd\[6284\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\<8yjra3csojlaqzfb@dubaischolars.com\> to=\ proto=ESMTP helo=\<\[193.32.160.146\]\> Oct 18 21:53:41 relay postfix/smtpd\[6284\]: NOQUEUE: reject: RCPT from unknown\[193.32.160.150\]: 554 5.7.1 \: Relay access denied\; from=\<8yjra3csojlaqzfb@d ...	2019-10-19 04:05:32
89.46.108.82	attack	xmlrpc attack	2019-10-19 04:01:02
222.186.175.215	attackspambots	2019-10-18T22:08:02.495971lon01.zurich-datacenter.net sshd\[5822\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.215 user=root 2019-10-18T22:08:04.180239lon01.zurich-datacenter.net sshd\[5822\]: Failed password for root from 222.186.175.215 port 21416 ssh2 2019-10-18T22:08:08.723579lon01.zurich-datacenter.net sshd\[5822\]: Failed password for root from 222.186.175.215 port 21416 ssh2 2019-10-18T22:08:12.934599lon01.zurich-datacenter.net sshd\[5822\]: Failed password for root from 222.186.175.215 port 21416 ssh2 2019-10-18T22:08:17.055405lon01.zurich-datacenter.net sshd\[5822\]: Failed password for root from 222.186.175.215 port 21416 ssh2 ...	2019-10-19 04:11:00
219.89.204.249	attack	DATE:2019-10-18 21:41:53, IP:219.89.204.249, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-10-19 04:19:49

Recently Reported IPs

134.209.144.120	134.209.149.240	134.209.154.90	134.209.158.22
134.209.153.46	134.209.172.245	134.209.179.19	134.209.156.93
134.209.16.197	134.209.167.119	134.209.185.188	134.209.165.46
134.209.195.118	134.209.190.252	134.209.20.162	134.209.198.240
134.209.209.146	134.209.210.34	134.209.182.86	134.209.204.141