This IP address has been reported a total of
306
times from
169 distinct
sources.
134.209.80.127 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
Honeypot [nx-infrastructure]: HTTP/1.1 request on 8087
GET /
User-Agent: Mozilla/5.0 (X11; Linux x8 ...
show moreHoneypot [nx-infrastructure]: HTTP/1.1 request on 8087
GET /
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate; 8087 [2] TCP
Reported by: Justin F.
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
SSH abuse or brute-force attack detected by Fail2Ban in ssh jail
Brute-Force
SSH
Anonymous
2026-01-13T23:53:07.766996+02:00 mail sshd[3048691]: Failed password for root from 134.209.80.127 po ...
show more2026-01-13T23:53:07.766996+02:00 mail sshd[3048691]: Failed password for root from 134.209.80.127 port 56366 ssh2
2026-01-13T23:53:45.023527+02:00 mail sshd[3048699]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.80.127 user=root
2026-01-13T23:53:47.794987+02:00 mail sshd[3048699]: Failed password for root from 134.209.80.127 port 53680 ssh2
2026-01-13T23:54:22.204767+02:00 mail sshd[3048723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.80.127 user=root
2026-01-13T23:54:23.857907+02:00 mail sshd[3048723]: Failed password for root from 134.209.80.127 port 50210 ssh2
...
show less
Malicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: ...
show moreMalicious activity detected from this IP during SSH attempts. VPN: No, Datacenter: No, Organization: AS14061 DigitalOcean, LLC, Region: North Holland, Log: 2026-01-13T22:54:00.446152 01:00 Administracion sshd[3588724]: Failed password for root from 134.209.80.127 port 48716 ssh2, Abuse Score: 100, Total Reports: 240
show less
2026-01-13T22:50:40.405273+01:00 router03.eag-fpi.de sshd[3776271]: Connection closed by 134.209.80. ...
show more2026-01-13T22:50:40.405273+01:00 router03.eag-fpi.de sshd[3776271]: Connection closed by 134.209.80.127 port 57874
2026-01-13T22:51:33.189489+01:00 router03.eag-fpi.de sshd[3776391]: Connection closed by authenticating user root 134.209.80.127 port 35100 [preauth]
2026-01-13T22:52:13.119712+01:00 router03.eag-fpi.de sshd[3776505]: Connection closed by authenticating user root 134.209.80.127 port 60454 [preauth]
2026-01-13T22:52:52.921816+01:00 router03.eag-fpi.de sshd[3776535]: Connection closed by authenticating user root 134.209.80.127 port 50092 [preauth]
2026-01-13T22:53:32.399821+01:00 router03.eag-fpi.de sshd[3776648]: Connection closed by authenticating user root 134.209.80.127 port 40344 [preauth]
show less
Brute-Force
Showing 1 to
15
of 306 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩