Log in to view charts and search reports for this IP.
Log In
No reports in the last 60 days
134.209.82.173 has been reported 60
times. The most recent report is from
.
The full history is preserved below and remains searchable. A
0% score reflects the absence of recent activity, but
this is not a guarantee that earlier reports were invalid. Abuse confidence score decays,
naturally, over time, when the abusive activity stops.
This IP address has been reported a total of
60
times from
55 distinct
sources.
134.209.82.173 was first reported on
, and the most recent report was
.
{"event":{"DateTime":"2026-03-03T18:15:25Z","RemoteAddr":"134.209.82.173:41364","Protocol":"SSH","Co ...
show more{"event":{"DateTime":"2026-03-03T18:15:25Z","RemoteAddr":"134.209.82.173:41364","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"c06afbee-18ff-4482-b90b-990a0ba38b12","Environ":"","User":"server","Password":"server","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH interactive","SourceIp":"134.209.82.173","SourcePort":"41364","TLSServerName":"","Handler":""},"level":"info","msg":"New Event","status":"Stateless"}
{"event":{"DateTime":"2026-03-03T18:16:01Z","RemoteAddr":"134.209.82.173:45790","Protocol":"SSH","Command":"","CommandOutput":"","Status":"Stateless","Msg":"New SSH Login Attempt","ID":"c472ff67-6c61-4907-9400-e1e5bdc34af6","Environ":"","User":"hadoop","Password":"hadoop","Client":"SSH-2.0-Go","Headers":"","HeadersMap":null,"Cookies":"","UserAgent":"","HostHTTPRequest":"","Body":"","HTTPMethod":"","RequestURI":"","Description":"SSH in
show less
Unwanted traffic detected by honeypot on March 03, 2026: port scans (2 port 22 scans), and brute for ...
show moreUnwanted traffic detected by honeypot on March 03, 2026: port scans (2 port 22 scans), and brute force and hacking attacks (73 over ssh).
show less
2026-03-03T10:37:40.013161-08:00 caphector.com sshd-session[3084687]: Invalid user oracle from 134.2 ...
show more2026-03-03T10:37:40.013161-08:00 caphector.com sshd-session[3084687]: Invalid user oracle from 134.209.82.173 port 59436
2026-03-03T10:38:11.289436-08:00 caphector.com sshd-session[3084713]: Invalid user oracle from 134.209.82.173 port 55794
2026-03-03T10:38:11.289436-08:00 caphector.com sshd-session[3084713]: Invalid user oracle from 134.209.82.173 port 55794
2026-03-03T10:38:41.154864-08:00 caphector.com sshd-session[3084718]: Invalid user oracle from 134.209.82.173 port 54234
...
show less
Credential brute-force attack using SSH-2.0-Go client against 20 common service and OS accounts. Cre ...
show moreCredential brute-force attack using SSH-2.0-Go client against 20 common service and OS accounts. Credentials attempted: deploy/deploy, git/git, guest/guest, hadoop/hadoop, mysql/mysql, oracle/oracle, postgres/postgres, root/111111, root/123, root/321, root/pass, root/password, root/qwerty, root/root, root/root123, server/server, test/test, testuser/testuser, user/user, weblogic/weblogic. Attack succeeded on multiple accounts across 24 sessions. Post-exploitation activity included host reconnaissance and persistence hardening. Commands executed: (1) chattr -i $HOME/.bashrc $HOME/.zshrc 2>/dev/null—removes immutable attribute from shell configuration files, enabling modification of .bashrc/.zshrc for persistence injection; (2) system enumeration via uname -s -v -n -m and uname -m to collect kernel version, hostname, and architecture; retrieval of uptime via /proc/uptime parsing. Attack pattern indicates automated reconnaissance footprint collection typical of botnet or worm initial compromise activity. No...
show less
2026-03-03T10:13:24.771996-08:00 caphector.com sshd-session[3083791]: Invalid user oracle from 134.2 ...
show more2026-03-03T10:13:24.771996-08:00 caphector.com sshd-session[3083791]: Invalid user oracle from 134.209.82.173 port 50664
2026-03-03T10:14:00.363008-08:00 caphector.com sshd-session[3083800]: Invalid user user from 134.209.82.173 port 52018
2026-03-03T10:14:35.398253-08:00 caphector.com sshd-session[3083829]: Invalid user vps from 134.209.82.173 port 42660
2026-03-03T10:15:11.009454-08:00 caphector.com sshd-session[3083885]: Invalid user testuser from 134.209.82.173 port 38556
2026-03-03T10:15:45.786540-08:00 caphector.com sshd-session[3083893]: Invalid user server from 134.209.82.173 port 46628
...
show less
Mar 4 04:12:56 webServer-02 sshd[900510]: Invalid user postgres from 134.209.82.173 port 37248
Mar ...
show moreMar 4 04:12:56 webServer-02 sshd[900510]: Invalid user postgres from 134.209.82.173 port 37248
Mar 4 04:13:33 webServer-02 sshd[900525]: Invalid user oracle from 134.209.82.173 port 47596
Mar 4 04:14:09 webServer-02 sshd[900538]: Invalid user user from 134.209.82.173 port 46782
Mar 4 04:14:44 webServer-02 sshd[900540]: Invalid user vps from 134.209.82.173 port 50906
Mar 4 04:15:19 webServer-02 sshd[900553]: Invalid user testuser from 134.209.82.173 port 60662
...
show less
Mar 3 18:12:54 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3233652]: Invalid user postgres from 134.209.8 ...
show moreMar 3 18:12:54 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3233652]: Invalid user postgres from 134.209.82.173 port 33156
Mar 3 18:13:30 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3233687]: Invalid user oracle from 134.209.82.173 port 59906
Mar 3 18:14:06 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3233741]: Invalid user user from 134.209.82.173 port 57520
Mar 3 18:14:42 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3233777]: Invalid user vps from 134.209.82.173 port 32924
Mar 3 18:15:17 ubuntu-s-1vcpu-1gb-intel-sfo3-01 sshd[3234949]: Invalid user testuser from 134.209.82.173 port 55752
...
show less
2026-03-03T13:12:34.485564-05:00 lw-dedi-hdz-48t-mtl sshd-session[1417667]: Invalid user postgres fr ...
show more2026-03-03T13:12:34.485564-05:00 lw-dedi-hdz-48t-mtl sshd-session[1417667]: Invalid user postgres from 134.209.82.173 port 33970
2026-03-03T13:13:10.800256-05:00 lw-dedi-hdz-48t-mtl sshd-session[1417861]: Invalid user oracle from 134.209.82.173 port 45206
2026-03-03T13:13:46.332734-05:00 lw-dedi-hdz-48t-mtl sshd-session[1418045]: Invalid user user from 134.209.82.173 port 45274
...
show less