JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 134.209.156.5

134.209.156.5 was found in our database!

This IP was reported 5,362 times. Confidence of Abuse is 0%: ?

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇮🇳 India
City	Bengaluru, Karnataka

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 134.209.156.5

Whois 134.209.156.5

IP Abuse Reports for 134.209.156.5:

This IP address has been reported a total of 5,362 times from 753 distinct sources. 134.209.156.5 was first reported on August 4th 2021, and the most recent report was 3 months ago.

Old Reports: The most recent abuse report for this IP address is from 3 months ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇫🇷 centurion	2026-05-24 08:14:06 (3 months ago)	Blocked by UFW on dc00 [1883/tcp] Source port: 61000 TTL: 237 Packet length: 44 TOS: 0x00 This repo ... show more Blocked by UFW on dc00 [1883/tcp] Source port: 61000 TTL: 237 Packet length: 44 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇫🇷 masterguru	2026-05-24 05:30:46 (3 months ago)	(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 134.209.156.5 (IN/India/-): 2 in the ... show more (modsec_5080) ModSec 5080: Infrastructure subdomain probe from 134.209.156.5 (IN/India/-): 2 in the last 3600 secs (0-196) show less	Hacking
🇺🇸 MPL	2026-05-24 04:47:31 (3 months ago)	tcp/8808	Port Scan
Anonymous	2026-05-21 03:55:16 (3 months ago)	DNS AXFR Attempt	DNS Compromise
🇩🇪 ValtonTahiri	2026-03-17 01:52:02 (5 months ago)	Honeypot hit: HTTP/1.1 request on 5552 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKi ... show more Honeypot hit: HTTP/1.1 request on 5552 GET / User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Full payload: GET / HTTP/1.1 Host: [SOME-IP] Connection: keep-alive sec-ch-ua: "Chromium";v="142", "Not:A-Brand";v="24", "Brave";v="142" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Linux" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (X11; Linux x86_64) ... on 5552/TCP (2 attempts) show less	Hacking Bad Web Bot
🇺🇸 MPL	2026-03-17 00:24:18 (5 months ago)	tcp/1224	Port Scan
🇺🇸 MPL	2026-03-14 05:01:01 (5 months ago)	tcp/8443	Port Scan
🇩🇪 _ArminS_	2026-03-14 04:18:56 (5 months ago)	SP-Scan 61008:8090 detected 2026.03.14 05:18:56 blocked until 2026.05.02 23:21:43	Port Scan
🇧🇪 cmbplf	2026-03-13 07:26:16 (5 months ago)	981 POST requests with url.path */wp-login.php	Brute-Force Bad Web Bot
🇩🇪 BlueWire Hosting	2026-03-13 07:01:37 (5 months ago)	Wordpress brute force attempt	Brute-Force Web App Attack
🇮🇹 VHosting	2026-03-13 06:55:05 (5 months ago)	Detected WordPress attack from 4 different servers	Brute-Force Web App Attack
🇰🇷 ericshim.me	2025-11-16 14:55:33 (9 months ago)	Reported from fail2ban historical logs. (Detected at 2025-11-16 17:50:48)	Brute-Force SSH
🇰🇷 forgeban	2025-11-16 08:56:31 (9 months ago)	Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:passw ... show more Honeypot hit: Brute-force attack detected on 22/SSH • Credentials: root:root, root:admin, root:password, root:123456, root:toor • Number of login attempts: 5 • 4 command(s) were executed during the session • Client: SSH-2.0-Go show less	Hacking Brute-Force SSH
🇬🇧 oolivero45	2025-11-16 08:51:15 (9 months ago)	Nov 16 08:49:43 nervous-edison8 sshd[3862014]: Failed password for root from 134.209.156.5 port 3987 ... show more Nov 16 08:49:43 nervous-edison8 sshd[3862014]: Failed password for root from 134.209.156.5 port 39876 ssh2 Nov 16 08:50:26 nervous-edison8 sshd[3862351]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.156.5 user=root Nov 16 08:50:28 nervous-edison8 sshd[3862351]: Failed password for root from 134.209.156.5 port 41138 ssh2 Nov 16 08:51:12 nervous-edison8 sshd[3862673]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.156.5 user=root Nov 16 08:51:14 nervous-edison8 sshd[3862673]: Failed password for root from 134.209.156.5 port 54550 ssh2 ... show less	Brute-Force SSH
🇨🇦 KatSystems	2025-11-16 08:51:01 (9 months ago)	2025-11-16T08:49:29.641106+00:00 vps-b43e0d3e sshd-session[579650]: Failed password for root from 13 ... show more 2025-11-16T08:49:29.641106+00:00 vps-b43e0d3e sshd-session[579650]: Failed password for root from 134.209.156.5 port 55868 ssh2 2025-11-16T08:50:13.593509+00:00 vps-b43e0d3e sshd-session[579672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.156.5 user=root 2025-11-16T08:50:15.114359+00:00 vps-b43e0d3e sshd-session[579672]: Failed password for root from 134.209.156.5 port 58766 ssh2 2025-11-16T08:50:58.223520+00:00 vps-b43e0d3e sshd-session[579696]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.156.5 user=root 2025-11-16T08:51:00.383626+00:00 vps-b43e0d3e sshd-session[579696]: Failed password for root from 134.209.156.5 port 45032 ssh2 ... show less	Brute-Force SSH

Showing 1 to 15 of 5362 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇳🇱 204.76.203.213

🇺🇸 155.94.155.107

🇵🇰 144.48.135.186

🇺🇸 34.57.135.184

🇺🇸 2604:a880:400:d1:0:4:e8bb:8001

🇳🇱 204.76.203.221

🇺🇸 185.191.171.6

🇨🇦 151.244.30.112

🇲🇬 102.17.254.77

🇺🇸 91.230.168.27

🇮🇳 182.78.65.154

🇻🇳 152.32.255.94

🇵🇭 103.178.27.86

🇺🇸 91.230.168.15

🇺🇸 23.94.155.49

🇺🇸 20.106.48.233

🇺🇸 2604:a880:400:d1:0:4:e8bb:d001

🇮🇳 223.185.16.192

🇨🇳 220.154.131.135

🇱🇻 213.176.24.46