134.122.78.9

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
100% Critical
63 reports
51 reporters · latest 3 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇩🇪 Germany
City
Frankfurt am Main, Hesse
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
63 from 51 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇫🇷 France 14 🇺🇸 United States of America 7 🇩🇪 Germany 5
Most common categories Port Scan 20 Brute-Force 15 Web App Attack 15 Hacking 9 SSH 5
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇸🇪 vaia.cloud
crowdsecurity/http-cve-probing
Brute-Force Web App Attack
🇫🇷 Sysadmin Peter
134.122.78.9 - - [09/Nov/2026:09:44:00 +0100] "POST /wp-login.php HTTP/1.1" 200 11298 "-" "Mozilla/5.0" 134.122.78.9 - - [09/Nov/2026:09:46:10 +0100] "POST /wp-login.php HTTP/1.1" 200 11298 "-" "Mozilla/5.0" ...
Brute-Force Web App Attack
🇫🇷 masterguru
wp-login request blocked, no referer. Pattern match "wp-login.php" at REQUEST_URI. (88020-201)
Hacking
🇫🇷 Sysadmin Peter
134.122.78.9 - - [09/Nov/2026:08:01:50 +0100] "POST /wp-login.php HTTP/1.1" 200 11298 "-" "Mozilla/5.0" 134.122.78.9 - - [09/Nov/2026:08:02:56 +0100] "POST /wp-login.php HTTP/1.1" 200 11298 "-" "Mozilla/5.0" ...
Brute-Force Web App Attack
🇩🇪 Florian Warncke
Web attack: requested known exploit path (GET /wp-login.php) - automated report, Wazuh SIEM
Hacking Web App Attack
🇧🇷 Sipo Chutão
/nice%20ports%2C/Tri%6Eity.txt%2ebak
Hacking
🇩🇪 Albram
Blocked by DNSBL - Mailserver check_relay ...
Brute-Force
🇫🇷 Thaliruth
Nov 6 13:41:26 151 postfix/smtpd[387247]: lost connection after CONNECT from unknown[134.122.78.9] ...
Hacking Brute-Force
🇧🇷 diego
[arem1] 2026-11-06 12:07:07, Client: 134.122.78.9, Protocol: 6, Unauthorized activity to HTTP: GET /
Web App Attack
🇧🇷 diego
[rede-arem1] 11/06/2026-09:07:08.044059, 134.122.78.9, Protocol: 6, LOCAL MikroTik recon multi-porta
Port Scan
🇰🇷 winter
Connection attemp from 134.122.78.9 to port 22
Brute-Force SSH
🇫🇷 uthul
T-Pot honeypot: 13 hits on ports [6443] (automated)
Port Scan
🇹🇷 pashait
Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (1 events in 5min) at 2026-11-06 06:02
Web App Attack Bad Web Bot
🇺🇸 donarev419
Port scan detected on port 1234 (connection without data transfer)
Port Scan
🇺🇸 LSPCCU
Port Scan Hacking Brute-Force Web App Attack SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇴 193.46.255.86
🇳🇱 142.93.135.91
🇦🇷 131.255.183.195
🇮🇳 117.205.2.250
🇭🇰 223.197.146.173
🇰🇷 220.122.115.9
🇺🇸 203.100.222.244
🇺🇦 176.121.5.173
🇮🇩 163.7.5.128
🇺🇸 76.38.129.158
🇺🇸 66.132.186.254
🇧🇪 34.77.153.177
🇫🇷 104.28.164.244
🇫🇷 92.153.106.183
🇷🇴 92.118.39.78
🇺🇸 70.114.108.19
🇨🇮 41.207.21.96
🇺🇸 35.237.94.18
🇧🇪 34.22.196.121
🇺🇸 20.46.255.57
feedback