134.122.90.149

Basic Info

City: unknown

Region: unknown

Country: United States of America

Internet Service Provider: DigitalOcean LLC

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Jul 16 01:20:14 lnxmysql61 sshd[15488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149	2020-07-16 08:06:45
attackbots	Jul 13 14:32:47 dhoomketu sshd[1480287]: Invalid user yinpeng from 134.122.90.149 port 52136 Jul 13 14:32:47 dhoomketu sshd[1480287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149 Jul 13 14:32:47 dhoomketu sshd[1480287]: Invalid user yinpeng from 134.122.90.149 port 52136 Jul 13 14:32:49 dhoomketu sshd[1480287]: Failed password for invalid user yinpeng from 134.122.90.149 port 52136 ssh2 Jul 13 14:35:44 dhoomketu sshd[1480367]: Invalid user oper from 134.122.90.149 port 49400 ...	2020-07-13 18:15:22
attack	Jul 11 06:53:44 jane sshd[31915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149 Jul 11 06:53:46 jane sshd[31915]: Failed password for invalid user janine from 134.122.90.149 port 33442 ssh2 ...	2020-07-11 16:24:35

Type

Details

Datetime

attackspam

Jul 16 01:20:14 lnxmysql61 sshd[15488]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149

2020-07-16 08:06:45

attackbots

Jul 13 14:32:47 dhoomketu sshd[1480287]: Invalid user yinpeng from 134.122.90.149 port 52136
Jul 13 14:32:47 dhoomketu sshd[1480287]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149 
Jul 13 14:32:47 dhoomketu sshd[1480287]: Invalid user yinpeng from 134.122.90.149 port 52136
Jul 13 14:32:49 dhoomketu sshd[1480287]: Failed password for invalid user yinpeng from 134.122.90.149 port 52136 ssh2
Jul 13 14:35:44 dhoomketu sshd[1480367]: Invalid user oper from 134.122.90.149 port 49400
...

2020-07-13 18:15:22

attack

Jul 11 06:53:44 jane sshd[31915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.122.90.149 
Jul 11 06:53:46 jane sshd[31915]: Failed password for invalid user janine from 134.122.90.149 port 33442 ssh2
...

2020-07-11 16:24:35

Comments on same subnet:

IP	Type	Details	Datetime
134.122.90.113	attackbots	134.122.90.113 - - \[08/Jun/2020:16:26:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 10017 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 134.122.90.113 - - \[08/Jun/2020:16:26:11 +0200\] "POST /wp-login.php HTTP/1.1" 200 9821 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" ...	2020-06-08 22:33:16
134.122.90.113	attack	134.122.90.113 - - [06/Jun/2020:02:49:58 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.90.113 - - [06/Jun/2020:02:49:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.122.90.113 - - [06/Jun/2020:02:49:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-06-06 09:45:12
134.122.90.194	attackspam	134.122.90.194 - - [16/Mar/2020:18:16:55 -0400] "GET /+CSCOE+/logon.html HTTP/1.1" "Cisco ASA version fingerprinting tool v2"	2020-03-17 09:07:45

Type

Details

Datetime

134.122.90.113

attackbots

134.122.90.113 - - \[08/Jun/2020:16:26:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 10017 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
134.122.90.113 - - \[08/Jun/2020:16:26:11 +0200\] "POST /wp-login.php HTTP/1.1" 200 9821 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...

2020-06-08 22:33:16

134.122.90.113

attack

134.122.90.113 - - [06/Jun/2020:02:49:58 +0200] "GET /wp-login.php HTTP/1.1" 200 6183 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.122.90.113 - - [06/Jun/2020:02:49:59 +0200] "POST /wp-login.php HTTP/1.1" 200 6434 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.122.90.113 - - [06/Jun/2020:02:49:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

2020-06-06 09:45:12

134.122.90.194

attackspam

134.122.90.194 - - [16/Mar/2020:18:16:55 -0400] "GET /+CSCOE+/logon.html HTTP/1.1" "Cisco ASA version fingerprinting tool v2"

2020-03-17 09:07:45

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.122.90.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5814
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.122.90.149.			IN	A

;; AUTHORITY SECTION:
.			361	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020071001 1800 900 604800 86400

;; Query time: 10 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Jul 11 16:24:27 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 149.90.122.134.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.90.122.134.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.109.72	attack	\[2019-07-19 02:45:47\] NOTICE\[20804\] chan_sip.c: Registration from '"333" \' failed for '77.247.109.72:6225' - Wrong password \[2019-07-19 02:45:47\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T02:45:47.550-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="333",SessionID="0x7f06f88cc728",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/6225",Challenge="09ce49b5",ReceivedChallenge="09ce49b5",ReceivedHash="bb8ca31ff5b6db60fa8cf1658ac96bae" \[2019-07-19 02:45:47\] NOTICE\[20804\] chan_sip.c: Registration from '"333" \' failed for '77.247.109.72:6225' - Wrong password \[2019-07-19 02:45:47\] SECURITY\[20812\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-19T02:45:47.797-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="333",SessionID="0x7f06f803c558",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-19 15:07:00
52.46.130.13	attackspambots	[DoS attack: ACK Scan] from source: 52.46.130.13:443 Thursday, July 18,2019 22:31:28	2019-07-19 14:56:43
60.54.84.69	attack	Jul 19 06:02:12 MK-Soft-VM7 sshd\[26119\]: Invalid user bouncer from 60.54.84.69 port 44104 Jul 19 06:02:12 MK-Soft-VM7 sshd\[26119\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.54.84.69 Jul 19 06:02:14 MK-Soft-VM7 sshd\[26119\]: Failed password for invalid user bouncer from 60.54.84.69 port 44104 ssh2 ...	2019-07-19 14:43:13
219.90.105.196	attackspam	firewall-block, port(s): 57085/tcp	2019-07-19 14:53:02
81.22.45.25	attackspam	19.07.2019 06:58:04 Connection to port 8888 blocked by firewall	2019-07-19 15:01:09
188.225.225.227	attackbots	Unauthorized connection attempt from IP address 188.225.225.227 on Port 445(SMB)	2019-07-19 14:30:45
96.114.71.147	attackspam	Jul 19 08:02:38 herz-der-gamer sshd[32739]: Failed password for invalid user ms from 96.114.71.147 port 40890 ssh2 ...	2019-07-19 14:19:43
159.65.7.56	attack	2019-07-19T06:23:32.853749abusebot-8.cloudsearch.cf sshd\[20467\]: Invalid user tomcat from 159.65.7.56 port 49774	2019-07-19 14:40:29
223.204.191.143	attackspam	Unauthorized connection attempt from IP address 223.204.191.143 on Port 445(SMB)	2019-07-19 14:53:54
116.12.200.194	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-19 04:36:50,763 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.12.200.194)	2019-07-19 14:48:06
62.4.14.198	attack	19.07.2019 06:01:54 HTTP access blocked by firewall	2019-07-19 15:07:19
124.112.45.222	attackspam	Brute force attempt	2019-07-19 15:10:25
210.14.77.102	attackspam	Jul 19 07:56:41 eventyay sshd[27001]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.77.102 Jul 19 07:56:43 eventyay sshd[27001]: Failed password for invalid user ts3server1 from 210.14.77.102 port 11076 ssh2 Jul 19 08:02:23 eventyay sshd[28307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.14.77.102 ...	2019-07-19 14:32:18
200.61.186.53	attackbotsspam	Unauthorized connection attempt from IP address 200.61.186.53 on Port 445(SMB)	2019-07-19 14:23:27
49.231.222.9	attackspambots	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-19 04:37:24,515 INFO [amun_request_handler] PortScan Detected on Port: 445 (49.231.222.9)	2019-07-19 14:33:04

Recently Reported IPs

122.26.228.215	156.227.19.252	60.199.237.4	89.218.75.119
232.73.115.217	19.119.231.46	137.67.6.32	214.109.230.42
219.34.76.40	241.225.55.31	158.40.70.115	170.192.19.209
138.36.147.161	27.2.64.162	159.75.210.188	248.140.224.17
144.38.143.8	251.79.124.12	207.153.117.248	95.239.20.194