This IP address has been reported a total of
263
times from
185 distinct
sources.
134.209.89.92 was first reported on
, and the most recent report was
.
Old Reports:
The most recent abuse report for this IP address is from
. It is possible that this IP is no longer involved in abusive activities.
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 134.209.89.92 (NL/The Netherlands/- ...
show moreLF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 134.209.89.92 (NL/The Netherlands/-): 1 in the last 3600 secs
show less
Fail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security too ...
show moreFail2Ban sshd: repeated SSH login failures (possible brute-force) detected by automated security tooling. Technical log details and local server identifiers intentionally omitted for privacy.
show less
High-volume attacker - SSH honeypot detected 100 brute force attempts from this IP. Attack types: di ...
show moreHigh-volume attacker - SSH honeypot detected 100 brute force attempts from this IP. Attack types: dictionary. Threat level: critical. Country: US.
show less
Persistent attacker - SSH honeypot detected 50 brute force attempts from this IP. Attack types: dict ...
show morePersistent attacker - SSH honeypot detected 50 brute force attempts from this IP. Attack types: dictionary. Threat level: high. Country: US.
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Number of sessions: 7
• Credentials: postgres: ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Number of sessions: 7
• Credentials: postgres:123qwe, postgres:passpass, postgres:pass123, postgres:pass1234, postgres:wasd, postgres:qwerty, postgres:q1w2e3
• Number of login attempts: 7
• Client: SSH-2.0-Go
show less
2026-02-05T23:37:12.329556-08:00 cm0app00 sshd[2640715]: Invalid user postgres from 134.209.89.92 po ...
show more2026-02-05T23:37:12.329556-08:00 cm0app00 sshd[2640715]: Invalid user postgres from 134.209.89.92 port 34922
2026-02-05T23:38:39.399028-08:00 cm0app00 sshd[2641452]: Invalid user postgres from 134.209.89.92 port 35426
2026-02-05T23:40:11.998971-08:00 cm0app00 sshd[2642222]: Invalid user postgres from 134.209.89.92 port 52900
2026-02-05T23:41:48.102911-08:00 cm0app00 sshd[2642983]: Invalid user postgres from 134.209.89.92 port 56250
2026-02-05T23:43:30.111098-08:00 cm0app00 sshd[2643795]: Invalid user postgres from 134.209.89.92 port 46278
...
show less
2026-02-06T08:25:37.460785+01:00 git-lab sshd[1048522]: pam_unix(sshd:auth): authentication failure; ...
show more2026-02-06T08:25:37.460785+01:00 git-lab sshd[1048522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.89.92
2026-02-06T08:25:39.423962+01:00 git-lab sshd[1048522]: Failed password for invalid user postgres from 134.209.89.92 port 52688 ssh2
2026-02-06T08:26:38.776088+01:00 git-lab sshd[1049508]: Invalid user postgres from 134.209.89.92 port 42234
...
show less
Honeypot hit: Brute-force attack detected on 22/SSH
• Number of sessions: 8
• Credentials: apache:ap ...
show moreHoneypot hit: Brute-force attack detected on 22/SSH
• Number of sessions: 8
• Credentials: apache:apache, postgres:123456, postgres:654321, postgres:123, postgres:321, postgres:test, postgres:test123, postgres:test321
• Number of login attempts: 8
• Client: SSH-2.0-Go
show less
Feb 5 23:16:35 ismay sshd[2868881]: Failed password for invalid user postgres from 134.209.89.92 po ...
show moreFeb 5 23:16:35 ismay sshd[2868881]: Failed password for invalid user postgres from 134.209.89.92 port 43250 ssh2
Feb 5 23:18:13 ismay sshd[2869080]: Invalid user postgres from 134.209.89.92 port 49440
Feb 5 23:18:14 ismay sshd[2869080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.89.92
Feb 5 23:18:16 ismay sshd[2869080]: Failed password for invalid user postgres from 134.209.89.92 port 49440 ssh2
Feb 5 23:19:51 ismay sshd[2869126]: Invalid user postgres from 134.209.89.92 port 37416
...
show less
Brute-Force
SSH
Showing 1 to
15
of 263 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩