Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Aug 20 09:49:27 ip-172-31-1-72 sshd\[4345\]: Invalid user git from 174.138.20.134
Aug 20 09:49:27 ip-172-31-1-72 sshd\[4345\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.134
Aug 20 09:49:29 ip-172-31-1-72 sshd\[4345\]: Failed password for invalid user git from 174.138.20.134 port 34770 ssh2
Aug 20 09:57:20 ip-172-31-1-72 sshd\[4879\]: Invalid user zabbix from 174.138.20.134
Aug 20 09:57:20 ip-172-31-1-72 sshd\[4879\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.134
2019-08-20 17:59:54
attack
Aug 19 14:17:21 hpm sshd\[14883\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.134  user=root
Aug 19 14:17:23 hpm sshd\[14883\]: Failed password for root from 174.138.20.134 port 34412 ssh2
Aug 19 14:24:46 hpm sshd\[15437\]: Invalid user legal1 from 174.138.20.134
Aug 19 14:24:46 hpm sshd\[15437\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.134
Aug 19 14:24:48 hpm sshd\[15437\]: Failed password for invalid user legal1 from 174.138.20.134 port 56734 ssh2
2019-08-20 08:31:53
Comments on same subnet:
IP Type Details Datetime
174.138.20.105 attack
Banned for a week because repeated abuses, for example SSH, but not only
2020-10-13 00:13:33
174.138.20.105 attackbotsspam
2020-10-12T03:18:18+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-10-12 15:35:56
174.138.20.105 attackspam
2020-10-08T17:58:11.015372hostname sshd[70237]: Failed password for root from 174.138.20.105 port 36342 ssh2
...
2020-10-09 03:18:42
174.138.20.105 attackspam
2020-10-08T17:58:08.886151hostname sshd[70237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105  user=root
2020-10-08T17:58:11.015372hostname sshd[70237]: Failed password for root from 174.138.20.105 port 36342 ssh2
...
2020-10-08 19:23:11
174.138.20.105 attackspambots
Total attacks: 2
2020-08-25 17:47:26
174.138.20.105 attack
Aug 23 06:00:30 jumpserver sshd[10376]: Failed password for invalid user train5 from 174.138.20.105 port 60802 ssh2
Aug 23 06:03:55 jumpserver sshd[10411]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105  user=root
Aug 23 06:03:57 jumpserver sshd[10411]: Failed password for root from 174.138.20.105 port 51844 ssh2
...
2020-08-23 14:26:18
174.138.20.163 attack
Aug 21 19:03:19 email sshd\[2609\]: Invalid user 0 from 174.138.20.163
Aug 21 19:03:19 email sshd\[2609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.163
Aug 21 19:03:20 email sshd\[2610\]: Invalid user 0 from 174.138.20.163
Aug 21 19:03:20 email sshd\[2610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.163
Aug 21 19:03:22 email sshd\[2609\]: Failed password for invalid user 0 from 174.138.20.163 port 39114 ssh2
...
2020-08-22 03:25:35
174.138.20.105 attackbotsspam
Brute-force attempt banned
2020-08-21 02:26:34
174.138.20.105 attackbotsspam
Aug  6 07:25:01 host sshd[20573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105  user=root
Aug  6 07:25:04 host sshd[20573]: Failed password for root from 174.138.20.105 port 35440 ssh2
...
2020-08-06 13:30:49
174.138.20.105 attack
fail2ban
2020-08-02 15:56:12
174.138.20.105 attackbotsspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-08-01 01:40:51
174.138.20.105 attackbotsspam
Jul 25 06:02:25 webhost01 sshd[13845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105
Jul 25 06:02:27 webhost01 sshd[13845]: Failed password for invalid user user from 174.138.20.105 port 37404 ssh2
...
2020-07-25 07:05:19
174.138.20.105 attackbotsspam
<6 unauthorized SSH connections
2020-07-20 15:07:58
174.138.20.105 attack
Jul 18 23:52:32 server sshd[6370]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105
Jul 18 23:52:34 server sshd[6370]: Failed password for invalid user norman from 174.138.20.105 port 51108 ssh2
Jul 18 23:57:21 server sshd[6760]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105
...
2020-07-19 06:04:07
174.138.20.105 attackbots
Jul 10 11:32:42 gestao sshd[7843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105 
Jul 10 11:32:44 gestao sshd[7843]: Failed password for invalid user chenglin from 174.138.20.105 port 40208 ssh2
Jul 10 11:36:12 gestao sshd[7924]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=174.138.20.105 
...
2020-07-10 19:02:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 174.138.20.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28974
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;174.138.20.134.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081900 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Aug 19 17:30:57 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 134.20.138.174.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 134.20.138.174.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
143.192.97.178 attackspam
Sep  7 17:52:53 core sshd[11077]: Invalid user david from 143.192.97.178 port 30888
Sep  7 17:52:55 core sshd[11077]: Failed password for invalid user david from 143.192.97.178 port 30888 ssh2
...
2019-09-07 23:53:42
104.45.11.126 attackbotsspam
Sep  7 01:49:12 lcdev sshd\[12003\]: Invalid user test101 from 104.45.11.126
Sep  7 01:49:12 lcdev sshd\[12003\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.11.126
Sep  7 01:49:14 lcdev sshd\[12003\]: Failed password for invalid user test101 from 104.45.11.126 port 57038 ssh2
Sep  7 01:54:16 lcdev sshd\[12410\]: Invalid user admin from 104.45.11.126
Sep  7 01:54:16 lcdev sshd\[12410\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.45.11.126
2019-09-07 22:49:18
51.38.83.164 attack
Sep  7 17:08:29 localhost sshd\[26358\]: Invalid user ts3 from 51.38.83.164 port 42194
Sep  7 17:08:29 localhost sshd\[26358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.83.164
Sep  7 17:08:32 localhost sshd\[26358\]: Failed password for invalid user ts3 from 51.38.83.164 port 42194 ssh2
2019-09-07 23:27:51
40.73.97.99 attack
2019-09-07T14:35:09.190666abusebot-3.cloudsearch.cf sshd\[1433\]: Invalid user git from 40.73.97.99 port 58326
2019-09-07 22:59:02
60.173.252.157 attackspambots
Automatic report - Port Scan Attack
2019-09-07 23:44:10
92.63.194.90 attackspambots
2019-09-07T21:13:41.265630enmeeting.mahidol.ac.th sshd\[21947\]: Invalid user admin from 92.63.194.90 port 44122
2019-09-07T21:13:41.285417enmeeting.mahidol.ac.th sshd\[21947\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90
2019-09-07T21:13:43.717939enmeeting.mahidol.ac.th sshd\[21947\]: Failed password for invalid user admin from 92.63.194.90 port 44122 ssh2
...
2019-09-07 22:56:12
218.98.40.147 attackbots
Sep  7 16:21:33 cvbmail sshd\[7238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.147  user=root
Sep  7 16:21:35 cvbmail sshd\[7238\]: Failed password for root from 218.98.40.147 port 64476 ssh2
Sep  7 16:21:46 cvbmail sshd\[7240\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.147  user=root
2019-09-07 23:23:05
78.0.22.230 attack
Sep  7 17:46:24 server sshd\[27140\]: Invalid user ftptest from 78.0.22.230 port 52080
Sep  7 17:46:24 server sshd\[27140\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.0.22.230
Sep  7 17:46:25 server sshd\[27140\]: Failed password for invalid user ftptest from 78.0.22.230 port 52080 ssh2
Sep  7 17:52:07 server sshd\[8696\]: User root from 78.0.22.230 not allowed because listed in DenyUsers
Sep  7 17:52:07 server sshd\[8696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=78.0.22.230  user=root
2019-09-07 22:57:01
46.8.243.235 attackbotsspam
Chat Spam
2019-09-07 23:46:54
223.245.212.241 attackbots
Sep  7 13:47:00 elektron postfix/smtpd\[30358\]: NOQUEUE: reject: RCPT from unknown\[223.245.212.241\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.245.212.241\]\; from=\ to=\ proto=ESMTP helo=\
Sep  7 13:47:32 elektron postfix/smtpd\[30358\]: NOQUEUE: reject: RCPT from unknown\[223.245.212.241\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.245.212.241\]\; from=\ to=\ proto=ESMTP helo=\
Sep  7 13:48:01 elektron postfix/smtpd\[30358\]: NOQUEUE: reject: RCPT from unknown\[223.245.212.241\]: 450 4.7.1 Client host rejected: cannot find your hostname, \[223.245.212.241\]\; from=\ to=\ proto=ESMTP helo=\
2019-09-07 23:02:16
58.208.229.81 attackbotsspam
Sep  7 04:46:43 mail postfix/postscreen[116062]: PREGREET 11 after 0.2 from [58.208.229.81]:57453: helo trti

...
2019-09-07 23:27:09
106.12.121.40 attackspam
Sep  7 04:39:36 hpm sshd\[7199\]: Invalid user minecraft from 106.12.121.40
Sep  7 04:39:36 hpm sshd\[7199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.121.40
Sep  7 04:39:38 hpm sshd\[7199\]: Failed password for invalid user minecraft from 106.12.121.40 port 54562 ssh2
Sep  7 04:43:05 hpm sshd\[7503\]: Invalid user vbox from 106.12.121.40
Sep  7 04:43:05 hpm sshd\[7503\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.121.40
2019-09-07 23:13:20
137.74.47.22 attack
Sep  7 16:51:47 SilenceServices sshd[14148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.47.22
Sep  7 16:51:49 SilenceServices sshd[14148]: Failed password for invalid user 182 from 137.74.47.22 port 51860 ssh2
Sep  7 16:55:49 SilenceServices sshd[15588]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.74.47.22
2019-09-07 23:00:56
5.135.182.84 attack
Sep  7 04:46:19 hcbb sshd\[29851\]: Invalid user user from 5.135.182.84
Sep  7 04:46:19 hcbb sshd\[29851\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns342662.ip-5-135-182.eu
Sep  7 04:46:21 hcbb sshd\[29851\]: Failed password for invalid user user from 5.135.182.84 port 39870 ssh2
Sep  7 04:52:08 hcbb sshd\[30354\]: Invalid user csr1dev from 5.135.182.84
Sep  7 04:52:08 hcbb sshd\[30354\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns342662.ip-5-135-182.eu
2019-09-07 22:52:14
52.253.228.47 attackbotsspam
Sep  7 14:10:36 mail sshd[28731]: Invalid user tsbot from 52.253.228.47
Sep  7 14:10:36 mail sshd[28731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.253.228.47
Sep  7 14:10:36 mail sshd[28731]: Invalid user tsbot from 52.253.228.47
Sep  7 14:10:38 mail sshd[28731]: Failed password for invalid user tsbot from 52.253.228.47 port 1344 ssh2
Sep  7 14:28:34 mail sshd[24222]: Invalid user oracle from 52.253.228.47
...
2019-09-07 23:44:46

Recently Reported IPs

92.86.4.50 201.33.39.58 170.254.155.142 216.70.11.83
213.185.240.65 167.57.96.108 47.146.91.131 110.138.3.94
208.123.147.150 58.54.223.156 45.77.108.190 118.25.54.60
167.71.206.188 114.134.187.130 49.232.4.151 150.125.166.255
128.163.229.242 128.245.237.111 163.172.251.80 155.0.142.240