City: North Bergen
Region: New Jersey
Country: United States
Internet Service Provider: DigitalOcean LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0 |
2020-03-09 06:28:38 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.209.78.24 | attack | Fraud connect |
2024-04-19 00:46:49 |
| 134.209.78.151 | attackspam | DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0 |
2020-03-04 03:14:45 |
| 134.209.78.43 | attackbotsspam | 2019-09-02 10:18:18,804 fail2ban.actions [804]: NOTICE [sshd] Ban 134.209.78.43 2019-09-02 13:25:25,748 fail2ban.actions [804]: NOTICE [sshd] Ban 134.209.78.43 2019-09-02 16:29:50,068 fail2ban.actions [804]: NOTICE [sshd] Ban 134.209.78.43 ... |
2019-10-03 18:41:52 |
| 134.209.78.43 | attackspambots | Sep 15 16:20:11 bouncer sshd\[10715\]: Invalid user 100 from 134.209.78.43 port 56614 Sep 15 16:20:11 bouncer sshd\[10715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Sep 15 16:20:13 bouncer sshd\[10715\]: Failed password for invalid user 100 from 134.209.78.43 port 56614 ssh2 ... |
2019-09-16 03:29:47 |
| 134.209.78.43 | attackbotsspam | Invalid user odoo9 from 134.209.78.43 port 35570 |
2019-09-13 10:48:00 |
| 134.209.78.43 | attackbotsspam | Sep 10 04:51:56 ny01 sshd[9977]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Sep 10 04:51:58 ny01 sshd[9977]: Failed password for invalid user qwe1 from 134.209.78.43 port 42608 ssh2 Sep 10 04:58:07 ny01 sshd[11561]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 |
2019-09-10 17:06:36 |
| 134.209.78.43 | attack | 2019-08-31T21:50:00.354692abusebot-6.cloudsearch.cf sshd\[22199\]: Invalid user student from 134.209.78.43 port 38314 |
2019-09-01 09:10:23 |
| 134.209.78.43 | attackbotsspam | Aug 30 08:31:46 lcprod sshd\[25464\]: Invalid user openfiler from 134.209.78.43 Aug 30 08:31:46 lcprod sshd\[25464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Aug 30 08:31:48 lcprod sshd\[25464\]: Failed password for invalid user openfiler from 134.209.78.43 port 54230 ssh2 Aug 30 08:35:53 lcprod sshd\[25779\]: Invalid user zoom from 134.209.78.43 Aug 30 08:35:53 lcprod sshd\[25779\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 |
2019-08-31 05:06:55 |
| 134.209.78.43 | attack | Aug 29 12:57:52 kapalua sshd\[5661\]: Invalid user suzuki from 134.209.78.43 Aug 29 12:57:52 kapalua sshd\[5661\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Aug 29 12:57:54 kapalua sshd\[5661\]: Failed password for invalid user suzuki from 134.209.78.43 port 34098 ssh2 Aug 29 13:01:45 kapalua sshd\[6029\]: Invalid user sophie from 134.209.78.43 Aug 29 13:01:45 kapalua sshd\[6029\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 |
2019-08-30 07:06:13 |
| 134.209.78.43 | attackbotsspam | Aug 29 11:28:02 [munged] sshd[12228]: Invalid user iony from 134.209.78.43 port 51602 Aug 29 11:28:02 [munged] sshd[12228]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 |
2019-08-29 19:20:44 |
| 134.209.78.43 | attackbotsspam | Aug 25 02:07:42 ks10 sshd[30378]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Aug 25 02:07:43 ks10 sshd[30378]: Failed password for invalid user kj from 134.209.78.43 port 38508 ssh2 ... |
2019-08-25 09:49:13 |
| 134.209.78.151 | attackbots | " " |
2019-08-21 22:39:24 |
| 134.209.78.43 | attackspambots | Invalid user sadmin from 134.209.78.43 port 34816 |
2019-08-18 09:27:32 |
| 134.209.78.43 | attackspam | SSH Brute Force |
2019-08-16 08:41:39 |
| 134.209.78.43 | attackbotsspam | [ssh] SSH attack |
2019-08-15 23:39:49 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.209.78.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56905
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.209.78.149. IN A
;; AUTHORITY SECTION:
. 538 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020030801 1800 900 604800 86400
;; Query time: 95 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Mar 09 06:28:35 CST 2020
;; MSG SIZE rcvd: 118
Host 149.78.209.134.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 149.78.209.134.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.72.135.177 | attackspam | $f2bV_matches |
2019-10-22 16:59:48 |
| 72.18.132.28 | attack | Automatic report - XMLRPC Attack |
2019-10-22 16:49:14 |
| 114.39.54.137 | attack | UTC: 2019-10-21 port: 23/tcp |
2019-10-22 17:04:36 |
| 211.75.194.80 | attackbots | pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.75.194.80 user=root Failed password for root from 211.75.194.80 port 53102 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.75.194.80 user=root Failed password for root from 211.75.194.80 port 35092 ssh2 Invalid user rajesh from 211.75.194.80 port 45344 |
2019-10-22 16:50:53 |
| 46.61.235.111 | attack | Oct 22 07:50:06 vtv3 sshd\[31019\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.61.235.111 user=root Oct 22 07:50:08 vtv3 sshd\[31019\]: Failed password for root from 46.61.235.111 port 42164 ssh2 Oct 22 07:54:50 vtv3 sshd\[715\]: Invalid user fujimoto from 46.61.235.111 port 55774 Oct 22 07:54:50 vtv3 sshd\[715\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.61.235.111 Oct 22 07:54:52 vtv3 sshd\[715\]: Failed password for invalid user fujimoto from 46.61.235.111 port 55774 ssh2 Oct 22 08:06:34 vtv3 sshd\[6977\]: Invalid user user1 from 46.61.235.111 port 38312 Oct 22 08:06:34 vtv3 sshd\[6977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.61.235.111 Oct 22 08:06:35 vtv3 sshd\[6977\]: Failed password for invalid user user1 from 46.61.235.111 port 38312 ssh2 Oct 22 08:10:32 vtv3 sshd\[9042\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tt |
2019-10-22 17:12:10 |
| 92.119.160.107 | attack | Oct 22 10:29:10 mc1 kernel: \[3019301.299350\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=33916 PROTO=TCP SPT=56890 DPT=23595 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 10:31:22 mc1 kernel: \[3019433.730171\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=26558 PROTO=TCP SPT=56890 DPT=23767 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 22 10:32:26 mc1 kernel: \[3019497.541742\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=92.119.160.107 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=4269 PROTO=TCP SPT=56890 DPT=24419 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-10-22 16:48:19 |
| 212.103.61.51 | attackbots | Oct 22 07:25:38 XXX sshd[64911]: Invalid user oracle from 212.103.61.51 port 55812 |
2019-10-22 17:22:27 |
| 218.27.204.33 | attackspambots | Oct 22 11:40:48 server sshd\[28210\]: User root from 218.27.204.33 not allowed because listed in DenyUsers Oct 22 11:40:48 server sshd\[28210\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.27.204.33 user=root Oct 22 11:40:49 server sshd\[28210\]: Failed password for invalid user root from 218.27.204.33 port 49628 ssh2 Oct 22 11:45:41 server sshd\[9352\]: Invalid user stacy from 218.27.204.33 port 40976 Oct 22 11:45:41 server sshd\[9352\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.27.204.33 |
2019-10-22 16:55:53 |
| 175.193.126.46 | attackspam | 2019-10-22T09:02:41.106590shield sshd\[13702\]: Invalid user alex@123 from 175.193.126.46 port 55722 2019-10-22T09:02:41.110681shield sshd\[13702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.193.126.46 2019-10-22T09:02:43.199231shield sshd\[13702\]: Failed password for invalid user alex@123 from 175.193.126.46 port 55722 ssh2 2019-10-22T09:06:59.793167shield sshd\[14603\]: Invalid user jk from 175.193.126.46 port 49266 2019-10-22T09:06:59.797233shield sshd\[14603\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.193.126.46 |
2019-10-22 17:18:41 |
| 104.155.36.113 | attackbotsspam | port scan and connect, tcp 21 (ftp) |
2019-10-22 17:02:45 |
| 172.94.125.131 | attackbots | <6 unauthorized SSH connections |
2019-10-22 17:02:27 |
| 124.166.111.138 | attackspam | UTC: 2019-10-21 port: 123/udp |
2019-10-22 17:19:44 |
| 223.197.175.171 | attackbots | Oct 22 13:06:38 areeb-Workstation sshd[31136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.175.171 Oct 22 13:06:40 areeb-Workstation sshd[31136]: Failed password for invalid user support from 223.197.175.171 port 47634 ssh2 ... |
2019-10-22 16:55:39 |
| 219.135.139.244 | attackspam | 2019-10-21 22:51:20 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:23459 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=nologin@lerctr.org) 2019-10-21 22:51:55 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:16062 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) 2019-10-21 22:52:12 dovecot_login authenticator failed for (sienawx.org) [219.135.139.244]:62968 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=android@lerctr.org) ... |
2019-10-22 16:44:47 |
| 35.222.57.231 | attack | 2019-10-22T08:44:59.979021abusebot-3.cloudsearch.cf sshd\[26995\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=231.57.222.35.bc.googleusercontent.com user=root |
2019-10-22 16:47:21 |