JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

134.175.148.104

Neutral Activity

Abuse confidence score ?

0% Low Risk

706 reports

225 reporters · latest 3 years ago

ISP	Tencent Cloud Computing (Beijing) Co., Ltd
Usage Type	Data Center/Web Hosting/Transit
ASN	AS45090
Domain Name	tencentcloud.com
Country	🇨🇳 China
City	Guangzhou, Guangdong

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

134.175.148.104 has been reported 706 times. The most recent report is from 3 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 134.175.148.104

This IP address has been reported a total of 706 times from 225 distinct sources. 134.175.148.104 was first reported on November 29th 2020, and the most recent report was 3 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 ege8	2022-12-10 19:02:23 (3 years ago)		Brute-Force SSH
🇳🇱 ege8	2022-11-18 21:08:38 (3 years ago)		Brute-Force SSH
🇩🇪 0x00000F	2021-08-27 06:54:23 (5 years ago)	[SRV-02] SSH/p22 134.175.148.104 > password failed (3 attemps)	Brute-Force SSH
🇩🇪 TrainerGamer	2021-08-17 12:47:17 (5 years ago)	Invalid user admin from 134.175.148.104 port 53032	Brute-Force SSH
🇦🇺 Ross Wheatley	2021-08-17 07:22:58 (5 years ago)	rd for invalid user tmpuser from 134.175.148.104 port 36932 ssh2	Brute-Force SSH
🇩🇪 TrainerGamer	2021-08-17 06:41:12 (5 years ago)	Invalid user ubuntu from 134.175.148.104 port 54898	Brute-Force SSH
🇩🇪 Bernhard Fürst	2021-08-17 05:41:42 (5 years ago)	(sshd) Failed SSH login from 134.175.148.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 134.175.148.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Aug 17 11:37:00 vm1 sshd[3574361]: Invalid user lee from 134.175.148.104 port 59240 Aug 17 11:37:03 vm1 sshd[3574361]: Failed password for invalid user lee from 134.175.148.104 port 59240 ssh2 Aug 17 11:39:45 vm1 sshd[3575250]: Invalid user postgres from 134.175.148.104 port 56946 Aug 17 11:39:48 vm1 sshd[3575250]: Failed password for invalid user postgres from 134.175.148.104 port 56946 ssh2 Aug 17 11:41:40 vm1 sshd[3575819]: Invalid user user from 134.175.148.104 port 46322 show less	Port Scan
🇩🇪 Bernhard Fürst	2021-08-17 05:41:42 (5 years ago)	134.175.148.104 (CN/China/-), 5 distributed sshd attacks on account [user] in the last 3600 secs; Po ... show more 134.175.148.104 (CN/China/-), 5 distributed sshd attacks on account [user] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 17 11:41:40 vm1 sshd[3575819]: Invalid user user from 134.175.148.104 port 46322 Aug 17 11:36:47 vm1 sshd[3574280]: Invalid user user from 134.175.120.106 port 24466 Aug 17 11:25:12 vm1 sshd[3570729]: Failed password for invalid user user from 41.93.32.89 port 49924 ssh2 Aug 17 11:25:10 vm1 sshd[3570729]: Invalid user user from 41.93.32.89 port 49924 Aug 17 11:36:48 vm1 sshd[3574280]: Failed password for invalid user user from 134.175.120.106 port 24466 ssh2 IP Addresses Blocked: show less	Port Scan
🇬🇧 HSF3232	2021-08-17 05:40:42 (5 years ago)	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2021-08-17T09:34:45Z and 2021-08-1 ... show more Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2021-08-17T09:34:45Z and 2021-08-17T09:40:42Z show less	Brute-Force SSH
Anonymous	2021-08-17 04:50:35 (5 years ago)	(sshd) Failed SSH login from 134.175.148.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direct ... show more (sshd) Failed SSH login from 134.175.148.104 (CN/China/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Aug 17 04:47:13 server4 sshd[31021]: Invalid user oracle from 134.175.148.104 Aug 17 04:47:13 server4 sshd[31021]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 Aug 17 04:47:15 server4 sshd[31021]: Failed password for invalid user oracle from 134.175.148.104 port 49584 ssh2 Aug 17 04:50:32 server4 sshd[325]: Invalid user alvin from 134.175.148.104 Aug 17 04:50:32 server4 sshd[325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 show less	Brute-Force
🇺🇸 AbuseIPDB AbuseIPDB Official	2021-08-17 02:41:11 (5 years ago)	Triggered by Fail2Ban at Ares web server	Brute-Force SSH
🇩🇪 TrainerGamer	2021-08-17 02:34:15 (5 years ago)	Aug 17 08:29:03 EU01 sshd[7657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Aug 17 08:29:03 EU01 sshd[7657]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 Aug 17 08:29:06 EU01 sshd[7657]: Failed password for invalid user ts from 134.175.148.104 port 54024 ssh2 Aug 17 08:34:14 EU01 sshd[12366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 ... show less	Brute-Force SSH
Anonymous	2021-08-17 02:15:22 (5 years ago)	$f2bV_matches	Brute-Force SSH
🇩🇪 TrainerGamer	2021-08-17 02:13:38 (5 years ago)	Aug 17 08:03:40 EU01 sshd[7687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show more Aug 17 08:03:40 EU01 sshd[7687]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 Aug 17 08:03:42 EU01 sshd[7687]: Failed password for invalid user lw from 134.175.148.104 port 56418 ssh2 Aug 17 08:13:37 EU01 sshd[5756]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.148.104 ... show less	Brute-Force SSH
🇺🇸 x-way	2021-08-17 01:51:47 (5 years ago)	Blocked by Fail2ban	Brute-Force SSH

Showing 1 to 15 of 706 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.52

🇮🇳 20.193.141.133

🇫🇷 2001:41d0:33a:a00::408

🇸🇻 190.150.66.247

🇨🇴 190.85.11.150

🇹🇭 182.52.175.241

🇺🇸 167.172.159.41

🇺🇸 162.216.150.122

🇨🇳 116.172.201.179

🇳🇱 109.160.32.61

🇹🇷 94.154.43.112

🇷🇺 88.205.172.170

🇺🇸 64.23.145.47

🇬🇧 35.203.210.236

🇺🇸 216.218.206.87

🇺🇸 195.184.76.117

🇳🇱 193.47.62.69

🇨🇳 119.4.109.85

🇨🇳 110.179.80.199

🇳🇱 109.160.32.88