AbuseIPDB » 205.209.166.134

205.209.166.134 was found in our database!

This IP was reported 88 times. Confidence of Abuse is 43%: ?

43%

ISP	DCS Pacific Star LLC
Usage Type	Data Center/Web Hosting/Transit
Domain Name	dcsmanage.com
Country	United States of America
City	San Jose, California

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 205.209.166.134

Whois 205.209.166.134

IP Abuse Reports for 205.209.166.134:

This IP address has been reported a total of 88 times from 36 distinct sources. 205.209.166.134 was first reported on November 29th 2020, and the most recent report was 4 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 4 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
MPL	2024-08-10 04:25:15 (1 month ago)	tcp ports: 3305,3302 (61 or more attempts)	Port Scan
Admins@FBN	2024-08-10 03:19:25 (1 month ago)	FW-PortScan: Traffic Blocked srcport=53268 dstport=3300	Port Scan
diego	2024-08-10 03:05:11 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 64 times in the last 10800 seconds	DDoS Attack
iNetWorker	2024-08-10 02:58:13 (1 month ago)	trying to access non-authorized port	Port Scan
wuemeli.com	2024-08-10 02:57:30 (1 month ago)	2024-08-10T04:57:29.381486+02:00 api kernel: [1489675.380962] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11: ... show more2024-08-10T04:57:29.381486+02:00 api kernel: [1489675.380962] [UFW BLOCK] IN=eth0 OUT= MAC=bc:24:11:a1:cc:c1:bc:24:11:e0:c3:6b:08:00 SRC=205.209.166.134 DST=37.221.95.157 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=25963 PROTO=TCP SPT=53268 DPT=3305 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
MPL	2024-08-10 01:49:40 (1 month ago)	tcp/3301 (31 or more attempts)	Port Scan
diego	2024-08-10 01:48:40 (1 month ago)	Events: TCP SYN Discovery or Flooding, Seen 29 times in the last 10800 seconds	DDoS Attack
MPL	2024-08-10 01:41:13 (1 month ago)	tcp/3301 (5 or more attempts)	Port Scan
urnilxfgbez	2024-08-09 22:45:00 (1 month ago)	Last 24 Hours suspicious: (DPT=445\|DPT=3389\|DPT=22\|DPT=3306\|DPT=8080\|DPT=23\|DPT=5900\|DPT=1433)	Port Scan
MPL	2024-08-09 22:41:35 (1 month ago)	tcp/3358 (5 or more attempts)	Port Scan
MPL	2024-08-09 22:41:35 (1 month ago)	tcp/3358 (4 or more attempts)	Port Scan
bakunin1848	2024-08-09 20:56:04 (1 month ago)	Firewall IPS Detection on 09-08-2024 at 22:56:04	Port Scan Exploited Host
london2038.com	2024-08-09 20:29:49 (1 month ago)	Connection atttempts against closed TCP ports Aug 9 14:44:58 [BLOCK] SRC=205.209.166.134 LEN= ... show moreConnection atttempts against closed TCP ports Aug 9 14:44:58 [BLOCK] SRC=205.209.166.134 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=51128 PROTO=TCP SPT=42727 DPT=3372 WINDOW=1024 RES=0x00 SYN Aug 9 17:33:30 [BLOCK] SRC=205.209.166.134 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=32581 PROTO=TCP SPT=42727 DPT=3313 WINDOW=1024 RES=0x00 SYN Aug 9 22:29:28 [BLOCK] SRC=205.209.166.134 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=63146 PROTO=TCP SPT=42727 DPT=3375 WINDOW=1024 RES=0x00 SYN show less	Port Scan
MPL	2024-08-09 20:01:36 (1 month ago)	tcp ports: 3328,3363 (5 or more attempts)	Port Scan
TimmiORG	2024-08-09 19:25:19 (1 month ago)	Unauthorized connection to RDP port 3389	Port Scan