JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

159.223.34.104

Neutral Activity

Abuse confidence score ?

0% Low Risk

311 reports

188 reporters · latest 4 years ago

ISP	DigitalOcean, LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS14061
Domain Name	digitalocean.com
Country	🇸🇬 Singapore
City	Singapore

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

159.223.34.104 has been reported 311 times. The most recent report is from 4 years ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

IP Abuse Reports for 159.223.34.104

Export CSV

This IP address has been reported a total of 311 times from 188 distinct sources. 159.223.34.104 was first reported on August 8th 2022, and the most recent report was 4 years ago.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 debaba	2022-08-31 17:02:01 (4 years ago)		Brute-Force SSH
Anonymous	2022-08-26 06:55:21 (4 years ago)	159.223.34.104 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 s ... show more 159.223.34.104 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Aug 26 06:55:18 server2 sshd[11664]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.154.212 user=root Aug 26 06:54:39 server2 sshd[11479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.34.104 user=root Aug 26 06:54:41 server2 sshd[11479]: Failed password for root from 159.223.34.104 port 44472 ssh2 Aug 26 06:50:38 server2 sshd[10446]: Failed password for root from 200.107.160.198 port 20065 ssh2 Aug 26 06:54:57 server2 sshd[11522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.45.62 user=root Aug 26 06:54:58 server2 sshd[11522]: Failed password for root from 161.35.45.62 port 51974 ssh2 IP Addresses Blocked: 139.59.154.212 (DE/Germany/-) show less	Brute-Force
🇲🇳 trentwiles.com	2022-08-26 05:02:53 (4 years ago)	Aug 26 08:49:52 vps-56d031b0 sshd[3071205]: Failed password for invalid user take from 159.223.34.10 ... show more Aug 26 08:49:52 vps-56d031b0 sshd[3071205]: Failed password for invalid user take from 159.223.34.104 port 47478 ssh2 Aug 26 09:01:42 vps-56d031b0 sshd[3077675]: Invalid user oracle from 159.223.34.104 port 47626 Aug 26 09:01:42 vps-56d031b0 sshd[3077675]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.34.104 Aug 26 09:01:44 vps-56d031b0 sshd[3077675]: Failed password for invalid user oracle from 159.223.34.104 port 47626 ssh2 Aug 26 09:02:36 vps-56d031b0 sshd[3078237]: Invalid user marek from 159.223.34.104 port 47662 ... show less	Brute-Force SSH
🇷🇸 Smel	2022-08-26 04:18:08 (4 years ago)	SSH/22 MH Probe, BF, Hack -	Hacking Brute-Force SSH
Anonymous	2022-08-26 04:11:55 (4 years ago)	...	Brute-Force SSH
🇫🇷 M127	2022-08-26 04:05:26 (4 years ago)	Aug 26 07:59:15 scw-focused-cartwright sshd[5959]: Failed password for root from 159.223.34.104 port ... show more Aug 26 07:59:15 scw-focused-cartwright sshd[5959]: Failed password for root from 159.223.34.104 port 45468 ssh2 show less	Brute-Force SSH
🇨🇦 SANYALnet Labs	2022-08-26 03:57:08 (4 years ago)	Aug 26 07:56:52 sanyalnet-cloud-vps2 sshd[887690]: User root from 159.223.34.104 not allowed because ... show more Aug 26 07:56:52 sanyalnet-cloud-vps2 sshd[887690]: User root from 159.223.34.104 not allowed because not listed in AllowUsers Aug 26 07:57:07 sanyalnet-cloud-vps2 sshd[887690]: Failed password for invalid user root from 159.223.34.104 port 36122 ssh2 Aug 26 07:57:07 sanyalnet-cloud-vps2 sshd[887690]: Disconnected from invalid user root 159.223.34.104 port 36122 [preauth] ... show less	Brute-Force
🇳🇱 nick	2022-08-26 02:47:29 (4 years ago)	Aug 26 08:46:28 neptune sshd[5232]: Failed password for www-data from 159.223.34.104 port 35174 ssh2 ... show more Aug 26 08:46:28 neptune sshd[5232]: Failed password for www-data from 159.223.34.104 port 35174 ssh2 Aug 26 08:47:27 neptune sshd[5447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.34.104 Aug 26 08:47:28 neptune sshd[5447]: Failed password for invalid user tom from 159.223.34.104 port 35206 ssh2 show less	Brute-Force SSH
🇩🇪 jwally	2022-08-26 01:33:00 (4 years ago)	$f2bV_matches	Brute-Force SSH
🇸🇪 HyperSpeed	2022-08-26 00:37:50 (4 years ago)	Aug 26 04:37:48 SE1 sshd[3622122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show more Aug 26 04:37:48 SE1 sshd[3622122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.223.34.104 user=root Aug 26 04:37:49 SE1 sshd[3622122]: Failed password for root from 159.223.34.104 port 56962 ssh2 ... show less	Brute-Force SSH
🇩🇪 debaba	2022-08-26 00:37:19 (4 years ago)		Brute-Force SSH
🇸🇪 jonathanselea.se	2022-08-25 23:03:35 (4 years ago)	$f2bV_matches	SSH
🇺🇸 editid	2022-08-25 19:45:54 (4 years ago)	Fri 26 Aug 2022 01:45:54 AM CEST Banned 159.223.34.104 for 14 days 17 hours 34 minutes and 50 second ... show more Fri 26 Aug 2022 01:45:54 AM CEST Banned 159.223.34.104 for 14 days 17 hours 34 minutes and 50 seconds show less	Brute-Force SSH
🇫🇷 Max la Menace	2022-08-25 17:00:18 (4 years ago)	ssh brute force (P)	Brute-Force SSH
🇧🇷 Joaojunior	2022-08-25 16:53:25 (4 years ago)	2022-08-25T17:53:25.180514-0300 [cowrie.ssh.factory.CowrieSSHFactory] New connection: 159.223.34.104 ... show more 2022-08-25T17:53:25.180514-0300 [cowrie.ssh.factory.CowrieSSHFactory] New connection: 159.223.34.104:38736 (::ffff:177.23.168.20:2222) [session: 9f4db3262927] ... show less	Brute-Force SSH

Showing 1 to 15 of 311 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇰 118.193.45.134

🇺🇸 209.177.145.89

🇳🇱 195.178.110.204

🇦🇺 189.81.241.125

🇸🇬 145.223.131.157

🇺🇸 136.112.86.173

🇧🇷 54.207.116.2

🇧🇷 45.95.26.58

🇩🇪 24.40.184.51

🇺🇸 199.165.159.36

🇳🇱 185.136.15.86

🇸🇬 167.71.211.40

🇭🇰 139.198.113.29

🇨🇳 106.117.111.104

🇱🇹 91.224.92.74

🇧🇬 79.124.49.146

🇹🇼 60.250.246.239

🇮🇳 47.11.94.222

🇺🇿 194.213.16.29

🇵🇪 161.132.54.218