Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Frankfurt am Main

Region: Hesse

Country: Germany

Internet Service Provider: A100 ROW GmbH

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Brute forcing RDP port 3389
2019-11-10 05:22:55
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 3.124.221.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18447
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;3.124.221.134.			IN	A

;; AUTHORITY SECTION:
.			452	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110901 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 10 05:22:52 CST 2019
;; MSG SIZE  rcvd: 117
Host info
134.221.124.3.in-addr.arpa domain name pointer ec2-3-124-221-134.eu-central-1.compute.amazonaws.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
134.221.124.3.in-addr.arpa	name = ec2-3-124-221-134.eu-central-1.compute.amazonaws.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
49.233.183.155 attackspambots
Oct  8 21:51:17 host1 sshd[1604103]: Failed password for root from 49.233.183.155 port 42362 ssh2
Oct  8 21:55:56 host1 sshd[1604502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.183.155  user=root
Oct  8 21:55:58 host1 sshd[1604502]: Failed password for root from 49.233.183.155 port 38258 ssh2
Oct  8 21:55:56 host1 sshd[1604502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.183.155  user=root
Oct  8 21:55:58 host1 sshd[1604502]: Failed password for root from 49.233.183.155 port 38258 ssh2
...
2020-10-09 04:53:37
103.145.13.124 attackbotsspam
UDP port : 5060
2020-10-09 04:44:22
218.92.0.250 attackspambots
Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:47 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
...
2020-10-09 04:46:34
190.153.174.162 attackbots
Unauthorized connection attempt from IP address 190.153.174.162 on Port 445(SMB)
2020-10-09 05:14:51
119.45.39.188 attackspambots
Lines containing failures of 119.45.39.188
Oct  5 06:13:19 shared07 sshd[12500]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.39.188  user=r.r
Oct  5 06:13:21 shared07 sshd[12500]: Failed password for r.r from 119.45.39.188 port 59724 ssh2
Oct  5 06:13:22 shared07 sshd[12500]: Received disconnect from 119.45.39.188 port 59724:11: Bye Bye [preauth]
Oct  5 06:13:22 shared07 sshd[12500]: Disconnected from authenticating user r.r 119.45.39.188 port 59724 [preauth]
Oct  5 06:23:48 shared07 sshd[17206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.39.188  user=r.r
Oct  5 06:23:50 shared07 sshd[17206]: Failed password for r.r from 119.45.39.188 port 45320 ssh2
Oct  5 06:23:51 shared07 sshd[17206]: Received disconnect from 119.45.39.188 port 45320:11: Bye Bye [preauth]
Oct  5 06:23:51 shared07 sshd[17206]: Disconnected from authenticating user r.r 119.45.39.188 port 45320 [preauth........
------------------------------
2020-10-09 04:54:32
202.137.124.210 attack
Oct  8 18:29:59 rush sshd[22802]: Failed password for root from 202.137.124.210 port 33144 ssh2
Oct  8 18:34:07 rush sshd[22885]: Failed password for root from 202.137.124.210 port 55922 ssh2
...
2020-10-09 04:58:05
69.85.84.14 attackbots
Oct  8 17:09:55 vm0 sshd[10275]: Failed password for root from 69.85.84.14 port 47566 ssh2
...
2020-10-09 05:18:32
101.231.124.6 attackbots
Triggered by Fail2Ban at Ares web server
2020-10-09 04:54:47
139.162.77.6 attackspambots
 TCP (SYN) 139.162.77.6:38389 -> port 3389, len 44
2020-10-09 04:47:07
203.56.24.180 attackbotsspam
Oct  8 20:35:17 prox sshd[5403]: Failed password for root from 203.56.24.180 port 38466 ssh2
2020-10-09 04:38:57
117.220.5.49 attackspambots
Port Scan
...
2020-10-09 04:56:20
211.193.253.14 attackspam
Icarus honeypot on github
2020-10-09 04:50:40
80.251.216.109 attackspam
80.251.216.109 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Oct  8 14:19:44 server5 sshd[14397]: Failed password for root from 106.12.69.35 port 48876 ssh2
Oct  8 14:20:08 server5 sshd[14522]: Failed password for root from 103.45.129.159 port 45418 ssh2
Oct  8 14:19:42 server5 sshd[14397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.69.35  user=root
Oct  8 14:20:05 server5 sshd[14522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.129.159  user=root
Oct  8 14:20:42 server5 sshd[14857]: Failed password for root from 80.251.216.109 port 37946 ssh2
Oct  8 14:19:14 server5 sshd[14046]: Failed password for root from 203.81.67.138 port 36551 ssh2

IP Addresses Blocked:

106.12.69.35 (CN/China/-)
103.45.129.159 (CN/China/-)
2020-10-09 05:02:41
112.85.42.74 attackspambots
Oct  8 20:36:48 plex-server sshd[2241369]: Failed password for root from 112.85.42.74 port 19800 ssh2
Oct  8 20:39:49 plex-server sshd[2244019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74  user=root
Oct  8 20:39:51 plex-server sshd[2244019]: Failed password for root from 112.85.42.74 port 17699 ssh2
Oct  8 20:43:06 plex-server sshd[2245412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74  user=root
Oct  8 20:43:08 plex-server sshd[2245412]: Failed password for root from 112.85.42.74 port 23552 ssh2
...
2020-10-09 04:43:55
189.7.81.29 attack
Bruteforce detected by fail2ban
2020-10-09 04:42:58

Recently Reported IPs

200.39.236.176 180.104.5.44 154.79.222.211 142.93.49.202
116.66.238.152 212.129.38.35 27.7.166.177 2.51.89.9
191.31.112.163 187.149.41.122 129.211.117.101 37.146.182.38
181.53.12.121 185.103.46.3 115.53.108.136 178.63.192.88
79.189.99.109 190.104.149.193 78.93.119.9 173.212.193.229