Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United Kingdom

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
DATE:2019-07-20_03:37:16, IP:134.209.20.2, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)
2019-07-20 10:44:59
Comments on same subnet:
IP Type Details Datetime
134.209.207.188 spambotsattack
ET DROP Dshield Block Listed Source group 1 - port: 8080 proto: tcp cat: Misc Attackbytes: 60
2023-02-18 16:14:41
134.209.204.124 attackbots
SSH Bruteforce attack
2020-08-23 07:56:22
134.209.208.159 attackbots
Port scan: Attack repeated for 24 hours
2020-06-21 00:54:32
134.209.201.23 attack
3423/tcp 2974/tcp 726/tcp...
[2020-06-01/19]44pkt,15pt.(tcp)
2020-06-20 05:41:48
134.209.208.159 attackspambots
 TCP (SYN) 134.209.208.159:46179 -> port 7425, len 44
2020-06-15 15:37:35
134.209.208.159 attackbotsspam
firewall-block, port(s): 25804/tcp
2020-06-13 15:11:57
134.209.208.159 attackspam
May 29 22:50:47 debian-2gb-nbg1-2 kernel: \[13044230.816351\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=134.209.208.159 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=242 ID=6339 PROTO=TCP SPT=58161 DPT=3540 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-30 05:16:17
134.209.208.159 attack
Port scan: Attack repeated for 24 hours
2020-05-03 01:12:31
134.209.208.159 attackbotsspam
firewall-block, port(s): 22225/tcp
2020-04-25 05:33:25
134.209.208.159 attack
Port scan(s) denied
2020-04-20 16:28:29
134.209.208.159 attackbotsspam
firewall-block, port(s): 15661/tcp
2020-04-13 06:33:44
134.209.203.34 attack
SSH/22 MH Probe, BF, Hack -
2020-02-12 23:47:18
134.209.203.238 attackbotsspam
WordPress wp-login brute force :: 134.209.203.238 0.112 BYPASS [17/Jan/2020:13:00:55  0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2020-01-18 01:05:40
134.209.208.91 attack
IP: 134.209.208.91
Ports affected
    Simple Mail Transfer (25) 
Abuse Confidence rating 16%
Found in DNSBL('s)
ASN Details
   AS14061 DigitalOcean LLC
   United States (US)
   CIDR 134.209.0.0/16
Log Date: 16/01/2020 11:43:21 AM UTC
2020-01-16 20:09:58
134.209.205.254 attack
Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: Invalid user dev from 134.209.205.254
Jan 13 22:56:46 ArkNodeAT sshd\[12332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.205.254
Jan 13 22:56:47 ArkNodeAT sshd\[12332\]: Failed password for invalid user dev from 134.209.205.254 port 50846 ssh2
2020-01-14 06:03:56
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.20.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8122
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.20.2.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071902 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jul 20 10:44:53 CST 2019
;; MSG SIZE  rcvd: 116
Host info
Host 2.20.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 2.20.209.134.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
218.92.0.175 attackspam
Automatic report BANNED IP
2020-03-19 10:46:22
49.88.112.67 attackspam
Mar 19 03:40:56 v22018053744266470 sshd[13929]: Failed password for root from 49.88.112.67 port 38679 ssh2
Mar 19 03:44:31 v22018053744266470 sshd[14151]: Failed password for root from 49.88.112.67 port 61213 ssh2
...
2020-03-19 10:47:16
148.70.116.223 attackspambots
Mar 18 20:56:15 hosting180 sshd[21603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.70.116.223
Mar 18 20:56:15 hosting180 sshd[21603]: Invalid user john from 148.70.116.223 port 49381
Mar 18 20:56:17 hosting180 sshd[21603]: Failed password for invalid user john from 148.70.116.223 port 49381 ssh2
...
2020-03-19 12:03:19
1.196.223.50 attack
Mar 19 00:18:38 silence02 sshd[23554]: Failed password for root from 1.196.223.50 port 8036 ssh2
Mar 19 00:22:12 silence02 sshd[23794]: Failed password for root from 1.196.223.50 port 32064 ssh2
2020-03-19 10:57:02
41.239.181.222 attackbots
SSH login attempts.
2020-03-19 12:06:34
92.63.194.104 attack
IP attempted unauthorised action
2020-03-19 10:36:15
222.186.30.209 attack
Mar 19 00:00:42 bilbo sshd[29962]: User root from 222.186.30.209 not allowed because not listed in AllowUsers
...
2020-03-19 12:05:11
119.188.157.211 attack
2020-03-19 03:36:16,195 fail2ban.actions: WARNING [ssh] Ban 119.188.157.211
2020-03-19 10:52:28
112.85.42.174 attackbotsspam
Mar 18 23:57:42 NPSTNNYC01T sshd[7329]: Failed password for root from 112.85.42.174 port 36186 ssh2
Mar 18 23:57:54 NPSTNNYC01T sshd[7329]: error: maximum authentication attempts exceeded for root from 112.85.42.174 port 36186 ssh2 [preauth]
Mar 18 23:58:00 NPSTNNYC01T sshd[7364]: Failed password for root from 112.85.42.174 port 61653 ssh2
...
2020-03-19 12:01:11
182.69.177.52 attackspambots
Port probing on unauthorized port 81
2020-03-19 10:39:01
82.254.10.37 attackspambots
IP attempted unauthorised action
2020-03-19 12:09:19
119.192.212.115 attack
Mar 19 01:28:44 ns382633 sshd\[22796\]: Invalid user linuxacademy from 119.192.212.115 port 42696
Mar 19 01:28:44 ns382633 sshd\[22796\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.192.212.115
Mar 19 01:28:47 ns382633 sshd\[22796\]: Failed password for invalid user linuxacademy from 119.192.212.115 port 42696 ssh2
Mar 19 01:33:33 ns382633 sshd\[23673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.192.212.115  user=root
Mar 19 01:33:35 ns382633 sshd\[23673\]: Failed password for root from 119.192.212.115 port 39822 ssh2
2020-03-19 10:53:13
89.46.214.161 attackspambots
SSH login attempts.
2020-03-19 12:02:13
196.229.218.200 attack
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/196.229.218.200/ 
 
 TN - 1H : (1)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TN 
 NAME ASN : ASN37492 
 
 IP : 196.229.218.200 
 
 CIDR : 196.229.216.0/21 
 
 PREFIX COUNT : 300 
 
 UNIQUE IP COUNT : 1924352 
 
 
 ATTACKS DETECTED ASN37492 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2020-03-18 23:10:55 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery
2020-03-19 10:45:28
148.72.65.10 attackspambots
godaddy likes hackers too. 3rd time reporting this IP in 3 months.
2020-03-19 12:18:18

Recently Reported IPs

171.101.241.142 117.240.211.122 138.197.73.156 134.73.161.163
186.202.136.245 209.235.35.125 151.54.165.182 52.15.52.143
138.197.213.180 77.35.3.74 52.172.40.62 177.37.199.46
154.117.159.218 46.21.198.180 103.205.68.2 99.255.149.190
15.230.182.145 174.89.107.73 206.189.208.157 193.31.119.174