134.209.223.94
Classification: Malicious
134.209.223.94 is a malicious IP address. Reported by 5 threat sources, last seen 2026-09-09. Network: AS14061 DigitalOcean, LLC.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2026-09-09 09:10:13 | 2026-09-09 09:10:13 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2026-09-09 09:10:11 | 2026-09-09 09:10:11 | malicious-activity | |
| Port Scanner | AbuseIPDB | 2026-08-30 08:50:34 | 2026-09-08 01:47:17 | anomalous-activity attacker malicious-activity reconnaissance | |
| Bruteforce | AbuseIPDB | 2026-08-28 08:19:08 | 2026-09-08 01:29:41 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2026-09-08 01:27:42 | 2026-09-08 01:27:42 | anomalous-activity attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2026-09-08 01:02:29 | 2026-09-08 01:27:42 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-05 09:22:16 | 2026-09-08 01:27:42 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-09-01 06:00:15 | 2026-09-08 01:27:42 | attacker malicious-activity | |
| IMAP Attacker | AbuseIPDB | 2026-09-07 22:25:11 | 2026-09-07 22:25:11 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-28 08:19:08 | 2026-09-07 19:21:42 | attacker malicious-activity | |
| FTP Attacker | AbuseIPDB | 2026-08-31 09:31:58 | 2026-09-07 16:42:00 | attacker malicious-activity | |
| Malicious Host | CIArmy | 2023-01-07 06:44:51 | 2026-09-05 20:02:20 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-09-05 17:01:52 | 2026-09-05 17:01:52 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-09-05 10:17:33 | 2026-09-05 10:17:33 | attacker compromised malicious-activity | |
| SSH Attacker | Blocklist.de | 2026-08-28 14:01:29 | 2026-09-04 14:01:18 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2023-01-06 00:00:00 | 2023-01-06 00:00:00 | malicious-activity |
Tags
ssh bruteforce botWhois information
- AS name
- AS14061 DigitalOcean, LLC
- AS registry
- arin
- AS date
- 2018-10-18 00:00:00
- AS CIDR
- 134.209.208.0/20
- CIDR
- 134.209.0.0/16
- Registrant
- DigitalOcean, LLC
- Address
- 101 Ave of the Americas FL2
- City
- North Bergen
- State
- NJ
- Postal code
- 07047
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2023-01-07 06:44:51
- Last updated
- 2026-09-09 09:11:03
Malicious IPs in the same CIDR
134.209.220.45 134.209.217.134 134.209.223.94 134.209.210.18 134.209.218.203 134.209.214.192 134.209.219.144 134.209.219.174 134.209.214.178 134.209.215.61 134.209.214.239 134.209.218.122