134.209.64.41

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
34% Elevated
71 reports
49 reporters · latest 2 days ago
ISP
DigitalOcean, LLC
Usage Type
Data Center/Web Hosting/Transit
ASN
AS14061
Domain Name
digitalocean.com
Country
🇺🇸 United States of America
City
North Bergen, New Jersey
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
71 from 49 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 2 🇫🇷 France 1 🇸🇪 Sweden 1
Most common categories Port Scan 5 Web App Attack 1 Email Spam 1
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇩🇪 Jochen Pretli
connection to honeypot
Email Spam Port Scan
🇹🇷 Domainhizmetleri.com
Source: DH Hunter (Honeypot) | Reason: HTTP Probe (6936/tcp) [non-standard port]
Web App Attack
Anonymous
Drop from IP address 134.209.64.41 to tcp-port 3306
Port Scan
🇺🇸 xmission.com
Blocked by UFW (TCP on 44444) Source port: 61010 TTL: 241 Packet length: 44 TOS: 0x08 This report (for 134.209.64.41) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
Anonymous
Unauthorized connection to RDP port 3389
Port Scan
🇫🇷 Kejult
Honeypot Finding: repeated TCP service probing on TCP/8040 (service); 2 application-level events across 2 source port(s). Sensor(s): Honeytrap.
Port Scan
🇮🇳 evicky2002
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking Brute-Force SSH
🇫🇷 masterguru
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 134.209.64.41 (US/United States/-): 1 in the last 3600 secs (0-195)
Hacking
🇹🇭 Sawasdee
Port Scan ...
Port Scan
🇬🇧 PeravixGroup
Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud
Brute-Force Hacking
🇺🇸 etu brutus
134.209.64.41 Blocked by [Attack Vector List] ...
Hacking Brute-Force Exploited Host
🇺🇸 technash
Unauthorized network connection attempt(s) via TCP/UDP port(s) from TI-mapped IP entity detected [Fortinet/Sentinel].
Port Scan
🇩🇪 Admins@FBN
FW-PortScan: Traffic Blocked srcport=46392 dstport=8001
Port Scan
🇺🇸 MPL
tcp/8001
Port Scan
🇩🇪 kingjan1999
Blocked by UFW [8001/tcp] | SPT: 42522 | TTL: 50 | LEN: 60 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 212.119.41.158
🇨🇭 179.43.153.18
🇨🇴 179.43.0.199
🇺🇸 147.185.132.133
🇺🇸 136.0.39.68
🇳🇵 111.119.34.0
🇪🇨 38.19.74.129
🇳🇱 213.209.159.226
🇺🇸 207.90.244.18
🇦🇷 181.26.140.75
🇺🇸 172.236.228.86
🇺🇸 156.248.0.87
🇫🇷 141.101.68.215
🇺🇸 50.116.2.150
🇺🇸 47.251.77.20
🇮🇩 36.83.84.5
🇳🇱 34.6.217.175
🇺🇸 20.106.51.45
🇺🇸 20.65.202.85
🇧🇬 193.24.211.219
feedback