Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Unauthorized connection attempt detected from IP address 134.209.237.55 to port 2220 [J]
2020-01-25 02:29:32
attackbotsspam
SSH Brute-Force reported by Fail2Ban
2020-01-12 01:00:11
attack
Jan  1 10:04:34 plusreed sshd[10019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=root
Jan  1 10:04:37 plusreed sshd[10019]: Failed password for root from 134.209.237.55 port 42348 ssh2
...
2020-01-02 02:33:02
attackspam
Dec 28 09:03:04 srv206 sshd[23085]: Invalid user operator from 134.209.237.55
...
2019-12-28 19:56:26
attackspambots
$f2bV_matches
2019-12-21 16:02:22
attackbots
$f2bV_matches
2019-12-21 03:49:30
attack
Invalid user ftpuser from 134.209.237.55 port 35044
2019-12-20 08:02:53
attackspam
Dec 14 11:51:36 loxhost sshd\[13629\]: Invalid user domain from 134.209.237.55 port 46064
Dec 14 11:51:36 loxhost sshd\[13629\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Dec 14 11:51:37 loxhost sshd\[13629\]: Failed password for invalid user domain from 134.209.237.55 port 46064 ssh2
Dec 14 11:56:20 loxhost sshd\[13782\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=root
Dec 14 11:56:22 loxhost sshd\[13782\]: Failed password for root from 134.209.237.55 port 44384 ssh2
...
2019-12-14 19:08:07
attack
Dec 10 13:23:57 hosting sshd[29670]: Invalid user icosftp from 134.209.237.55 port 36412
Dec 10 13:23:57 hosting sshd[29670]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Dec 10 13:23:57 hosting sshd[29670]: Invalid user icosftp from 134.209.237.55 port 36412
Dec 10 13:23:58 hosting sshd[29670]: Failed password for invalid user icosftp from 134.209.237.55 port 36412 ssh2
Dec 10 13:34:28 hosting sshd[30798]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=backup
Dec 10 13:34:30 hosting sshd[30798]: Failed password for backup from 134.209.237.55 port 59158 ssh2
...
2019-12-10 19:20:18
attackspambots
Dec  8 20:15:57 IngegnereFirenze sshd[28748]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=root
Dec  8 20:15:57 IngegnereFirenze sshd[28748]: User root from 134.209.237.55 not allowed because not listed in AllowUsers
Dec  8 20:15:59 IngegnereFirenze sshd[28748]: Failed password for invalid user root from 134.209.237.55 port 42598 ssh2
...
2019-12-09 04:49:18
attack
[ssh] SSH attack
2019-12-08 16:58:57
attackspam
Dec  6 23:58:54 lnxmysql61 sshd[12104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Dec  6 23:58:54 lnxmysql61 sshd[12104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
2019-12-07 07:15:43
attackbotsspam
Dec  5 21:42:05 ArkNodeAT sshd\[22340\]: Invalid user 123456 from 134.209.237.55
Dec  5 21:42:05 ArkNodeAT sshd\[22340\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Dec  5 21:42:07 ArkNodeAT sshd\[22340\]: Failed password for invalid user 123456 from 134.209.237.55 port 34254 ssh2
2019-12-06 04:46:54
attack
Dec  3 18:21:08 server sshd\[5805\]: Invalid user cnovelo from 134.209.237.55
Dec  3 18:21:08 server sshd\[5805\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
Dec  3 18:21:10 server sshd\[5805\]: Failed password for invalid user cnovelo from 134.209.237.55 port 39128 ssh2
Dec  3 18:28:19 server sshd\[7684\]: Invalid user scarrow from 134.209.237.55
Dec  3 18:28:19 server sshd\[7684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
...
2019-12-04 03:36:08
attack
Nov 14 16:19:11 meumeu sshd[14268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
Nov 14 16:19:12 meumeu sshd[14268]: Failed password for invalid user guest from 134.209.237.55 port 40210 ssh2
Nov 14 16:25:38 meumeu sshd[15170]: Failed password for root from 134.209.237.55 port 59528 ssh2
...
2019-11-30 17:53:57
attack
Nov 26 12:16:54 localhost sshd\[15793\]: Invalid user cyyang from 134.209.237.55 port 40202
Nov 26 12:16:54 localhost sshd\[15793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Nov 26 12:16:56 localhost sshd\[15793\]: Failed password for invalid user cyyang from 134.209.237.55 port 40202 ssh2
2019-11-26 20:19:00
attack
Nov 25 05:14:40 tdfoods sshd\[9630\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=root
Nov 25 05:14:41 tdfoods sshd\[9630\]: Failed password for root from 134.209.237.55 port 46916 ssh2
Nov 25 05:19:52 tdfoods sshd\[10044\]: Invalid user krumm from 134.209.237.55
Nov 25 05:19:52 tdfoods sshd\[10044\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Nov 25 05:19:54 tdfoods sshd\[10044\]: Failed password for invalid user krumm from 134.209.237.55 port 34360 ssh2
2019-11-26 00:56:22
attack
Nov 25 10:16:20 root sshd[1986]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
Nov 25 10:16:22 root sshd[1986]: Failed password for invalid user avellaneda from 134.209.237.55 port 60478 ssh2
Nov 25 10:19:44 root sshd[2034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
...
2019-11-25 18:29:25
attackspambots
F2B jail: sshd. Time: 2019-11-24 23:44:41, Reported by: VKReport
2019-11-25 06:49:57
attackbots
Nov 23 11:23:43 askasleikir sshd[107597]: Failed password for root from 134.209.237.55 port 43182 ssh2
2019-11-24 03:40:16
attackbotsspam
Nov 19 22:50:25 kapalua sshd\[15489\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=mysql
Nov 19 22:50:27 kapalua sshd\[15489\]: Failed password for mysql from 134.209.237.55 port 44552 ssh2
Nov 19 22:55:52 kapalua sshd\[15927\]: Invalid user sherwan from 134.209.237.55
Nov 19 22:55:52 kapalua sshd\[15927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Nov 19 22:55:54 kapalua sshd\[15927\]: Failed password for invalid user sherwan from 134.209.237.55 port 38864 ssh2
2019-11-20 20:46:30
attackspam
Nov 11 03:50:33 server sshd\[21698\]: Failed password for invalid user samant from 134.209.237.55 port 34742 ssh2
Nov 11 20:28:59 server sshd\[26432\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55  user=root
Nov 11 20:29:00 server sshd\[26432\]: Failed password for root from 134.209.237.55 port 43048 ssh2
Nov 11 20:33:07 server sshd\[27612\]: Invalid user admin from 134.209.237.55
Nov 11 20:33:07 server sshd\[27612\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55 
...
2019-11-12 03:48:06
attackbotsspam
Nov 11 07:21:47 ms-srv sshd[31436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.55
Nov 11 07:21:49 ms-srv sshd[31436]: Failed password for invalid user lofti from 134.209.237.55 port 33104 ssh2
2019-11-11 16:41:11
Comments on same subnet:
IP Type Details Datetime
134.209.237.152 attack
Sep  8 21:21:57 php2 sshd\[8745\]: Invalid user amsftp from 134.209.237.152
Sep  8 21:21:57 php2 sshd\[8745\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Sep  8 21:21:59 php2 sshd\[8745\]: Failed password for invalid user amsftp from 134.209.237.152 port 42612 ssh2
Sep  8 21:28:14 php2 sshd\[9345\]: Invalid user sinusbot from 134.209.237.152
Sep  8 21:28:14 php2 sshd\[9345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-09-09 15:34:40
134.209.237.152 attack
Sep  7 07:44:38 vps200512 sshd\[25009\]: Invalid user test from 134.209.237.152
Sep  7 07:44:38 vps200512 sshd\[25009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Sep  7 07:44:40 vps200512 sshd\[25009\]: Failed password for invalid user test from 134.209.237.152 port 40918 ssh2
Sep  7 07:48:54 vps200512 sshd\[25073\]: Invalid user ts3server1 from 134.209.237.152
Sep  7 07:48:55 vps200512 sshd\[25073\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-09-08 02:42:20
134.209.237.152 attack
Sep  6 21:44:15 vps200512 sshd\[12237\]: Invalid user zabbix from 134.209.237.152
Sep  6 21:44:15 vps200512 sshd\[12237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Sep  6 21:44:16 vps200512 sshd\[12237\]: Failed password for invalid user zabbix from 134.209.237.152 port 38348 ssh2
Sep  6 21:48:25 vps200512 sshd\[12316\]: Invalid user ftpadmin from 134.209.237.152
Sep  6 21:48:25 vps200512 sshd\[12316\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-09-07 09:55:34
134.209.237.152 attackbotsspam
Aug 27 08:13:11 itv-usvr-01 sshd[2113]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152  user=root
Aug 27 08:13:13 itv-usvr-01 sshd[2113]: Failed password for root from 134.209.237.152 port 37544 ssh2
Aug 27 08:16:43 itv-usvr-01 sshd[4027]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152  user=backup
Aug 27 08:16:45 itv-usvr-01 sshd[4027]: Failed password for backup from 134.209.237.152 port 51988 ssh2
Aug 27 08:20:05 itv-usvr-01 sshd[5771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152  user=root
Aug 27 08:20:07 itv-usvr-01 sshd[5771]: Failed password for root from 134.209.237.152 port 38186 ssh2
2019-08-27 10:53:00
134.209.237.152 attack
Aug 26 18:45:54 web8 sshd\[9830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152  user=root
Aug 26 18:45:56 web8 sshd\[9830\]: Failed password for root from 134.209.237.152 port 33542 ssh2
Aug 26 18:49:56 web8 sshd\[11887\]: Invalid user norman from 134.209.237.152
Aug 26 18:49:56 web8 sshd\[11887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Aug 26 18:49:58 web8 sshd\[11887\]: Failed password for invalid user norman from 134.209.237.152 port 51328 ssh2
2019-08-27 02:52:30
134.209.237.152 attackspambots
SSH Bruteforce attempt
2019-08-26 06:13:47
134.209.237.152 attackspam
Aug 25 03:02:25 lcprod sshd\[12012\]: Invalid user bwadmin from 134.209.237.152
Aug 25 03:02:25 lcprod sshd\[12012\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Aug 25 03:02:27 lcprod sshd\[12012\]: Failed password for invalid user bwadmin from 134.209.237.152 port 42632 ssh2
Aug 25 03:06:30 lcprod sshd\[12380\]: Invalid user cdoran from 134.209.237.152
Aug 25 03:06:30 lcprod sshd\[12380\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-08-25 21:15:59
134.209.237.152 attackbots
Invalid user beruf from 134.209.237.152 port 35204
2019-08-23 20:11:52
134.209.237.152 attack
$f2bV_matches
2019-08-15 05:31:53
134.209.237.152 attackbotsspam
SSH invalid-user multiple login attempts
2019-08-11 11:16:27
134.209.237.152 attack
Aug  9 22:03:31 ip-172-31-62-245 sshd\[32366\]: Invalid user zewa from 134.209.237.152\
Aug  9 22:03:33 ip-172-31-62-245 sshd\[32366\]: Failed password for invalid user zewa from 134.209.237.152 port 32844 ssh2\
Aug  9 22:07:40 ip-172-31-62-245 sshd\[32392\]: Invalid user 123456 from 134.209.237.152\
Aug  9 22:07:42 ip-172-31-62-245 sshd\[32392\]: Failed password for invalid user 123456 from 134.209.237.152 port 56114 ssh2\
Aug  9 22:11:58 ip-172-31-62-245 sshd\[32471\]: Invalid user bs123 from 134.209.237.152\
2019-08-10 06:20:40
134.209.237.152 attackspambots
Invalid user programmer from 134.209.237.152 port 35180
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Failed password for invalid user programmer from 134.209.237.152 port 35180 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152  user=root
Failed password for root from 134.209.237.152 port 58204 ssh2
2019-08-09 08:10:56
134.209.237.152 attack
Aug  4 07:09:58 OPSO sshd\[27300\]: Invalid user forscher from 134.209.237.152 port 56152
Aug  4 07:09:58 OPSO sshd\[27300\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
Aug  4 07:10:01 OPSO sshd\[27300\]: Failed password for invalid user forscher from 134.209.237.152 port 56152 ssh2
Aug  4 07:14:04 OPSO sshd\[28175\]: Invalid user schumacher from 134.209.237.152 port 51600
Aug  4 07:14:04 OPSO sshd\[28175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.237.152
2019-08-04 13:43:37
134.209.237.152 attackspam
Aug  2 12:28:38 dedicated sshd[21275]: Invalid user weblogic from 134.209.237.152 port 38004
2019-08-02 19:56:34
134.209.237.152 attack
Aug  1 18:34:58 hosting sshd[27933]: Invalid user user from 134.209.237.152 port 42888
...
2019-08-02 00:52:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.237.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49366
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.237.55.			IN	A

;; AUTHORITY SECTION:
.			314	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019111100 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Nov 11 16:41:06 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 55.237.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.237.209.134.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
69.163.225.129 attack
Wordpress login scanning
2019-12-23 05:36:18
218.70.174.23 attackbots
Dec 22 21:12:14 MK-Soft-VM5 sshd[13276]: Failed password for root from 218.70.174.23 port 46370 ssh2
...
2019-12-23 05:12:20
105.112.112.165 attackspam
Unauthorized connection attempt from IP address 105.112.112.165 on Port 445(SMB)
2019-12-23 05:17:00
117.247.152.35 attackbotsspam
2019-12-22T21:03:42.415737vps751288.ovh.net sshd\[1625\]: Invalid user mohinder from 117.247.152.35 port 34100
2019-12-22T21:03:42.422355vps751288.ovh.net sshd\[1625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.247.152.35
2019-12-22T21:03:43.734869vps751288.ovh.net sshd\[1625\]: Failed password for invalid user mohinder from 117.247.152.35 port 34100 ssh2
2019-12-22T21:09:30.193397vps751288.ovh.net sshd\[1684\]: Invalid user admin from 117.247.152.35 port 36584
2019-12-22T21:09:30.203271vps751288.ovh.net sshd\[1684\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.247.152.35
2019-12-23 05:09:57
65.98.111.218 attackspambots
Invalid user ss3server from 65.98.111.218 port 57646
2019-12-23 05:33:33
41.233.196.160 attackbots
" "
2019-12-23 05:39:49
75.80.193.222 attackspam
Dec 22 22:09:17 eventyay sshd[2635]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=75.80.193.222
Dec 22 22:09:19 eventyay sshd[2635]: Failed password for invalid user asgharzadeh from 75.80.193.222 port 47871 ssh2
Dec 22 22:16:33 eventyay sshd[2868]: Failed password for root from 75.80.193.222 port 45684 ssh2
...
2019-12-23 05:30:22
125.45.125.107 attackbots
Unauthorized connection attempt detected from IP address 125.45.125.107 to port 1433
2019-12-23 05:22:42
51.255.35.41 attack
Dec 22 16:34:58 linuxvps sshd\[26381\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.35.41  user=root
Dec 22 16:35:00 linuxvps sshd\[26381\]: Failed password for root from 51.255.35.41 port 57913 ssh2
Dec 22 16:39:31 linuxvps sshd\[29434\]: Invalid user pijuan from 51.255.35.41
Dec 22 16:39:31 linuxvps sshd\[29434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.255.35.41
Dec 22 16:39:33 linuxvps sshd\[29434\]: Failed password for invalid user pijuan from 51.255.35.41 port 59856 ssh2
2019-12-23 05:45:16
27.3.73.210 attack
Unauthorized connection attempt from IP address 27.3.73.210 on Port 445(SMB)
2019-12-23 05:03:25
114.33.210.236 attackspam
Dec 22 22:38:21 server sshd\[14468\]: Invalid user abhi from 114.33.210.236
Dec 22 22:38:21 server sshd\[14468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-33-210-236.hinet-ip.hinet.net 
Dec 22 22:38:22 server sshd\[14468\]: Failed password for invalid user abhi from 114.33.210.236 port 59420 ssh2
Dec 22 23:41:52 server sshd\[355\]: Invalid user peter from 114.33.210.236
Dec 22 23:41:52 server sshd\[355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114-33-210-236.hinet-ip.hinet.net 
...
2019-12-23 05:23:52
165.138.127.210 attack
Unauthorized connection attempt from IP address 165.138.127.210 on Port 445(SMB)
2019-12-23 05:18:38
51.75.29.61 attackspambots
Invalid user psycho from 51.75.29.61 port 41340
2019-12-23 05:28:13
175.101.240.130 attackbots
Unauthorized connection attempt from IP address 175.101.240.130 on Port 445(SMB)
2019-12-23 05:34:54
189.174.41.155 attackbots
Unauthorized connection attempt from IP address 189.174.41.155 on Port 445(SMB)
2019-12-23 05:05:28

Recently Reported IPs

219.105.247.136 129.211.99.69 94.23.42.196 49.35.240.214
82.100.96.93 109.190.196.248 117.222.10.157 178.213.201.147
24.41.138.67 192.41.25.103 54.36.149.49 209.141.43.166
144.202.34.43 27.151.66.244 212.224.118.25 192.185.113.244
179.104.207.141 176.121.234.220 113.172.60.8 31.162.50.228