Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Sep 25 07:13:17 www5 sshd\[51667\]: Invalid user lek from 134.209.197.66
Sep 25 07:13:17 www5 sshd\[51667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
Sep 25 07:13:19 www5 sshd\[51667\]: Failed password for invalid user lek from 134.209.197.66 port 56268 ssh2
...
2019-09-25 18:24:13
attackbots
Sep 15 06:09:07 vps691689 sshd[26296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
Sep 15 06:09:09 vps691689 sshd[26296]: Failed password for invalid user fcwest from 134.209.197.66 port 36266 ssh2
Sep 15 06:12:29 vps691689 sshd[26374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
...
2019-09-15 12:26:12
attackbotsspam
Reported by AbuseIPDB proxy server.
2019-09-08 16:45:22
attackbotsspam
Lines containing failures of 134.209.197.66
Aug 27 22:57:12 echo390 sshd[29384]: Invalid user sonos from 134.209.197.66 port 39276
Aug 27 22:57:12 echo390 sshd[29384]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
Aug 27 22:57:14 echo390 sshd[29384]: Failed password for invalid user sonos from 134.209.197.66 port 39276 ssh2
Aug 27 22:57:14 echo390 sshd[29384]: Received disconnect from 134.209.197.66 port 39276:11: Bye Bye [preauth]
Aug 27 22:57:14 echo390 sshd[29384]: Disconnected from invalid user sonos 134.209.197.66 port 39276 [preauth]
Aug 27 23:16:02 echo390 sshd[374]: Invalid user ashley from 134.209.197.66 port 33694
Aug 27 23:16:02 echo390 sshd[374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
Aug 27 23:16:05 echo390 sshd[374]: Failed password for invalid user ashley from 134.209.197.66 port 33694 ssh2
Aug 27 23:16:05 echo390 sshd[374]: Received dis........
------------------------------
2019-08-28 12:44:01
attackspambots
Aug 27 04:13:58 host sshd\[18833\]: Invalid user ng from 134.209.197.66 port 47288
Aug 27 04:13:58 host sshd\[18833\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.66
...
2019-08-27 12:54:29
Comments on same subnet:
IP Type Details Datetime
134.209.197.218 attack
$f2bV_matches
2020-07-27 23:27:02
134.209.197.218 attackspam
Jul 20 19:06:17 ny01 sshd[1181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
Jul 20 19:06:19 ny01 sshd[1181]: Failed password for invalid user deploy from 134.209.197.218 port 16438 ssh2
Jul 20 19:10:10 ny01 sshd[1681]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
2020-07-21 07:38:44
134.209.197.218 attack
Jul 18 23:45:13 lukav-desktop sshd\[19484\]: Invalid user zxc from 134.209.197.218
Jul 18 23:45:13 lukav-desktop sshd\[19484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
Jul 18 23:45:16 lukav-desktop sshd\[19484\]: Failed password for invalid user zxc from 134.209.197.218 port 14408 ssh2
Jul 18 23:49:06 lukav-desktop sshd\[19588\]: Invalid user manon from 134.209.197.218
Jul 18 23:49:06 lukav-desktop sshd\[19588\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
2020-07-19 04:50:56
134.209.197.218 attackbots
Jul  9 16:45:32 xeon sshd[13916]: Failed password for invalid user songlin from 134.209.197.218 port 11458 ssh2
2020-07-09 23:04:12
134.209.197.218 attackspambots
$f2bV_matches
2020-07-06 14:47:49
134.209.197.218 attackbots
110. On Jul 4 2020 experienced a Brute Force SSH login attempt -> 1 unique times by 134.209.197.218.
2020-07-05 07:54:10
134.209.197.172 attackspambots
proxy for collecting exploit statistics from compromised sites
2020-06-26 04:51:28
134.209.197.218 attackbots
Jun 19 07:25:54 eventyay sshd[3286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
Jun 19 07:25:57 eventyay sshd[3286]: Failed password for invalid user deploy from 134.209.197.218 port 16460 ssh2
Jun 19 07:29:06 eventyay sshd[3357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
...
2020-06-19 14:13:11
134.209.197.218 attackbotsspam
Invalid user fabian from 134.209.197.218 port 10474
2020-06-18 14:12:35
134.209.197.218 attackbots
2020-06-17T20:24:56+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-06-18 04:37:18
134.209.197.218 attack
Jun 16 14:14:12 xeon sshd[35689]: Failed password for invalid user mongod from 134.209.197.218 port 16086 ssh2
2020-06-17 00:46:26
134.209.197.218 attackbotsspam
Invalid user sakshi from 134.209.197.218 port 58698
2020-06-13 19:01:08
134.209.197.218 attackbots
Jun  9 04:44:09 game-panel sshd[27759]: Failed password for root from 134.209.197.218 port 45808 ssh2
Jun  9 04:47:20 game-panel sshd[27901]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.197.218
Jun  9 04:47:22 game-panel sshd[27901]: Failed password for invalid user toto from 134.209.197.218 port 49076 ssh2
2020-06-09 12:49:45
134.209.197.218 attackbots
SSH authentication failure x 6 reported by Fail2Ban
...
2020-06-03 19:13:08
134.209.197.218 attackbotsspam
bruteforce detected
2020-05-27 14:50:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.197.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61768
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.197.66.			IN	A

;; AUTHORITY SECTION:
.			3284	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082601 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 27 12:54:21 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 66.197.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 66.197.209.134.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
178.33.67.12 attackspam
Oct 22 16:05:15 SilenceServices sshd[12672]: Failed password for root from 178.33.67.12 port 48364 ssh2
Oct 22 16:09:07 SilenceServices sshd[13738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.67.12
Oct 22 16:09:09 SilenceServices sshd[13738]: Failed password for invalid user xerox from 178.33.67.12 port 59054 ssh2
2019-10-22 22:14:26
89.248.160.193 attackspam
ET CINS Active Threat Intelligence Poor Reputation IP group 85 - port: 8707 proto: TCP cat: Misc Attack
2019-10-22 22:33:59
222.186.175.167 attack
SSH Brute Force, server-1 sshd[24359]: Failed password for root from 222.186.175.167 port 37134 ssh2
2019-10-22 22:44:03
218.92.0.211 attackspambots
Oct 22 16:08:08 eventyay sshd[10473]: Failed password for root from 218.92.0.211 port 47852 ssh2
Oct 22 16:08:39 eventyay sshd[10487]: Failed password for root from 218.92.0.211 port 60753 ssh2
...
2019-10-22 22:30:21
80.82.77.212 attackspambots
ET CINS Active Threat Intelligence Poor Reputation IP group 72 - port: 32769 proto: UDP cat: Misc Attack
2019-10-22 22:36:04
177.199.160.222 attackbots
Fail2Ban Ban Triggered
2019-10-22 22:15:25
157.245.87.206 attackbotsspam
Portscan or hack attempt detected by psad/fwsnort
2019-10-22 22:18:06
69.203.144.38 attackbotsspam
" "
2019-10-22 22:35:45
106.12.15.230 attackspambots
Oct 22 10:19:41 xtremcommunity sshd\[780363\]: Invalid user godsgift from 106.12.15.230 port 39700
Oct 22 10:19:41 xtremcommunity sshd\[780363\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.15.230
Oct 22 10:19:43 xtremcommunity sshd\[780363\]: Failed password for invalid user godsgift from 106.12.15.230 port 39700 ssh2
Oct 22 10:24:54 xtremcommunity sshd\[780483\]: Invalid user PaSsword from 106.12.15.230 port 46950
Oct 22 10:24:54 xtremcommunity sshd\[780483\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.15.230
...
2019-10-22 22:38:37
171.242.32.12 attack
Attempt to attack host OS, exploiting network vulnerabilities, on 22-10-2019 13:00:26.
2019-10-22 22:28:33
222.186.175.217 attack
Oct 22 16:18:01 root sshd[17273]: Failed password for root from 222.186.175.217 port 42378 ssh2
Oct 22 16:18:05 root sshd[17273]: Failed password for root from 222.186.175.217 port 42378 ssh2
Oct 22 16:18:10 root sshd[17273]: Failed password for root from 222.186.175.217 port 42378 ssh2
Oct 22 16:18:15 root sshd[17273]: Failed password for root from 222.186.175.217 port 42378 ssh2
...
2019-10-22 22:19:55
60.168.128.2 attackspambots
Oct 22 15:34:40 tuxlinux sshd[42449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.168.128.2  user=root
Oct 22 15:34:42 tuxlinux sshd[42449]: Failed password for root from 60.168.128.2 port 38756 ssh2
Oct 22 15:34:40 tuxlinux sshd[42449]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.168.128.2  user=root
Oct 22 15:34:42 tuxlinux sshd[42449]: Failed password for root from 60.168.128.2 port 38756 ssh2
Oct 22 16:00:21 tuxlinux sshd[42884]: Invalid user umountfs from 60.168.128.2 port 54514
...
2019-10-22 22:36:38
222.186.175.154 attackbots
Oct 22 10:29:30 xtremcommunity sshd\[780614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.154  user=root
Oct 22 10:29:32 xtremcommunity sshd\[780614\]: Failed password for root from 222.186.175.154 port 53046 ssh2
Oct 22 10:29:36 xtremcommunity sshd\[780614\]: Failed password for root from 222.186.175.154 port 53046 ssh2
Oct 22 10:29:41 xtremcommunity sshd\[780614\]: Failed password for root from 222.186.175.154 port 53046 ssh2
Oct 22 10:29:45 xtremcommunity sshd\[780614\]: Failed password for root from 222.186.175.154 port 53046 ssh2
...
2019-10-22 22:33:40
222.186.180.17 attackspambots
Oct 22 16:12:49 arianus sshd\[31504\]: Unable to negotiate with 222.186.180.17 port 21578: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\]
...
2019-10-22 22:15:43
184.105.139.109 attackspambots
firewall-block, port(s): 548/tcp
2019-10-22 22:20:24

Recently Reported IPs

90.228.49.95 33.58.117.87 27.59.223.169 121.122.71.195
205.240.77.21 252.13.26.183 182.150.58.163 182.112.216.251
207.170.181.248 62.164.176.194 248.72.140.22 85.33.112.210
83.131.36.224 147.170.221.237 215.69.36.194 120.235.18.141
141.200.110.95 208.254.68.198 121.59.79.9 156.58.93.158