AbuseIPDB » 134.122.70.79

134.122.70.79 was found in our database!

This IP was reported 221 times. Confidence of Abuse is 100%: ?

100%

ISP	DigitalOcean LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	digitalocean.com
Country	Germany
City	Frankfurt am Main, Hessen

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 134.122.70.79

Whois 134.122.70.79

IP Abuse Reports for 134.122.70.79:

This IP address has been reported a total of 221 times from 119 distinct sources. 134.122.70.79 was first reported on December 9th 2021, and the most recent report was 3 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 3 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
begou.dev	2024-08-17 07:29:03 (4 weeks ago)	[Threat Intelligence] FrozenThreat: Port Scanning and/or Unauthorized access -> HoneyPots:PORT/8080	Port Scan
Dark0547	2024-08-17 02:48:58 (4 weeks ago)	[2024-08-17 02:49:12.806029] TELNET/23 Unautorized connection, Suspicious Mirai Botnet.	DDoS Attack Port Scan Hacking Brute-Force IoT Targeted
AvonleaConsulting	2024-08-17 00:41:06 (4 weeks ago)	Brute force attack to crack POP password (port 110)	Email Spam Brute-Force
eskilbrun	2024-08-16 22:50:59 (4 weeks ago)	2024-08-17T00:50:58.122788linode1.eskil.net dovecot[934]: imap-login: Disconnected: Too many invalid ... show more2024-08-17T00:50:58.122788linode1.eskil.net dovecot[934]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=134.122.70.79, lip=194.195.241.187, session=<pffpytQftrmGekZP> 2024-08-17T00:50:58.132367linode1.eskil.net dovecot[934]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=134.122.70.79, lip=194.195.241.187, session=<HR3qytQfxrmGekZP> 2024-08-17T00:50:58.141526linode1.eskil.net dovecot[934]: imap-login: Disconnected: Too many invalid commands (no auth attempts in 0 secs): user=<>, rip=134.122.70.79, lip=194.195.241.187, session=<m0DqytQf1LmGekZP> ... show less	Brute-Force
Gem	2024-08-16 22:04:06 (4 weeks ago)	Unauthorized web scan.	Web App Attack
SaltySoftworks	2024-08-16 13:29:24 (4 weeks ago)	Aug 16 13:29:22 postfix/submission/smtpd: lost connection after STARTTLS from unknown[134.122.70.79 ... show moreAug 16 13:29:22 postfix/submission/smtpd: lost connection after STARTTLS from unknown[134.122.70.79] Aug 16 13:29:23 postfix/submission/smtpd: lost connection after UNKNOWN from unknown[134.122.70.79] show less	Email Spam Hacking Brute-Force Bad Web Bot Web App Attack
Blexyel	2024-08-16 13:13:45 (4 weeks ago)	2024-08-16T15:13:45.080632+02:00 pingusmc postfix/submission/smtpd[4123684]: improper command pipeli ... show more2024-08-16T15:13:45.080632+02:00 pingusmc postfix/submission/smtpd[4123684]: improper command pipelining after CONNECT from unknown[134.122.70.79]: \026\003\003\001\246\001\000\001\242\003\003\357\2764\034\364\204\364S8\235XP\364J\261&va}?\273\\[\021\264\341\340\273J\216z8 \267\023\371\202\255\032\272\302\207\305\274\241Y!\367\226\326\326\210<\215\310_\330j%O\3618\260{\300\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237 2024-08-16T15:13:45.091011+02:00 pingusmc postfix/submission/smtpd[4123684]: improper command pipelining after CONNECT from unknown[134.122.70.79]: \026\003\003\001\246\001\000\001\242\003\003=\227\275\270\0163(\200\351y\322\3055&\211\261\353\237\a\327{.\355\n7\t\234\215ql\003\234 \207\026\222E\252\353\213\346\016c\3637\361h\260X\261V\325E\002\255;\273\301\001\224'\020\2236g\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000= 2024-08-16T15:13:45.102294+02:00 pingusmc postfix/submission/smtpd[4123684 ... show less	Brute-Force
Steve	2024-08-16 12:53:13 (4 weeks ago)	Attempts against Pop3/IMAP	Brute-Force
xor.st	2024-08-16 09:52:46 (1 month ago)	GET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]]<br ... show moreGET /cgi-bin/authLogin.cgi Headers: map[Connection:[close] User-Agent:[Go-http-client/1.1]] Body: show less	Web App Attack
Largnet SOC	2024-08-16 08:37:22 (1 month ago)	134.122.70.79 triggered Icarus honeypot on port 110. Check us out on github.	Port Scan Hacking
RF68	2024-08-16 05:15:34 (1 month ago)	134.122.70.79 [15/Aug/2024 * Spam host detected, probing for vulnerabilities]	Web Spam Exploited Host Web App Attack
GoodOldTOS	2024-08-16 02:11:39 (1 month ago)	Trying to connect to SSHTarpit	Hacking SSH
webbfabriken	2024-08-16 01:45:21 (1 month ago)	spam or other hacking activities reported by webbfabriken security servers Attack reported by ... show morespam or other hacking activities reported by webbfabriken security servers Attack reported by Webbfabiken Security API - WFSecAPI show less	Web Spam
Hobby Bob	2024-08-16 00:45:06 (1 month ago)	Aug 16 01:45:06 server dovecot: imap-login: Disconnected (no auth attempts in 20 secs): user=, rip=1 ... show moreAug 16 01:45:06 server dovecot: imap-login: Disconnected (no auth attempts in 20 secs): user=, rip=134.122.70.79, lip=X.X.X.X session= show less	Port Scan Hacking
AvonleaConsulting	2024-08-16 00:41:06 (1 month ago)	Brute force attack to crack POP password (port 110)	Email Spam Brute-Force