134.159.22.165

Basic Info

City: unknown

Region: unknown

Country: Australia

Internet Service Provider: Telstra

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
134.159.225.143	attackbots	Unauthorized connection attempt from IP address 134.159.225.143 on Port 445(SMB)	2020-08-21 01:20:42
134.159.225.143	attack	1596314746 - 08/01/2020 22:45:46 Host: 134.159.225.143/134.159.225.143 Port: 445 TCP Blocked	2020-08-02 08:38:39
134.159.225.131	attackbotsspam	Unauthorized connection attempt from IP address 134.159.225.131 on Port 445(SMB)	2019-12-05 02:05:56

Type

Details

Datetime

134.159.225.143

attackbots

Unauthorized connection attempt from IP address 134.159.225.143 on Port 445(SMB)

2020-08-21 01:20:42

134.159.225.143

attack

1596314746 - 08/01/2020 22:45:46 Host: 134.159.225.143/134.159.225.143 Port: 445 TCP Blocked

2020-08-02 08:38:39

134.159.225.131

attackbotsspam

Unauthorized connection attempt from IP address 134.159.225.131 on Port 445(SMB)

2019-12-05 02:05:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.159.22.165
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40195
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.159.22.165.			IN	A

;; AUTHORITY SECTION:
.			420	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019102501 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Oct 26 04:23:46 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 165.22.159.134.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 165.22.159.134.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.13.209.154	attackspambots	Dec 8 04:50:22 wbs sshd\[26096\]: Invalid user olmedo from 83.13.209.154 Dec 8 04:50:22 wbs sshd\[26096\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fib154.internetdsl.tpnet.pl Dec 8 04:50:24 wbs sshd\[26096\]: Failed password for invalid user olmedo from 83.13.209.154 port 48922 ssh2 Dec 8 04:56:24 wbs sshd\[26645\]: Invalid user test from 83.13.209.154 Dec 8 04:56:24 wbs sshd\[26645\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=fib154.internetdsl.tpnet.pl	2019-12-08 23:11:42
78.36.16.214	attackbotsspam	2019-12-08T14:56:31.980323beta postfix/smtpd[9264]: NOQUEUE: reject: RCPT from 78-36-16-214.dynamic.murmansk.dslavangard.ru[78.36.16.214]: 554 5.7.1 Service unavailable; Client host [78.36.16.214] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/78.36.16.214; from= to= proto=ESMTP helo=<78-36-16-214.dynamic.murmansk.dslavangard.ru> ...	2019-12-08 23:00:00
218.92.0.187	attack	Dec 8 16:15:45 eventyay sshd[18849]: Failed password for root from 218.92.0.187 port 19999 ssh2 Dec 8 16:15:56 eventyay sshd[18849]: error: maximum authentication attempts exceeded for root from 218.92.0.187 port 19999 ssh2 [preauth] Dec 8 16:16:03 eventyay sshd[18857]: Failed password for root from 218.92.0.187 port 53066 ssh2 ...	2019-12-08 23:17:42
158.69.220.70	attackspambots	Dec 8 15:51:02 meumeu sshd[23999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.220.70 Dec 8 15:51:04 meumeu sshd[23999]: Failed password for invalid user test from 158.69.220.70 port 53620 ssh2 Dec 8 15:56:30 meumeu sshd[24971]: Failed password for root from 158.69.220.70 port 34034 ssh2 ...	2019-12-08 23:04:09
108.235.160.215	attackbotsspam	Dec 8 15:13:06 XXX sshd[5224]: Invalid user gabey from 108.235.160.215 port 42490	2019-12-08 23:11:57
218.92.0.133	attack	Dec 8 16:13:11 dcd-gentoo sshd[23483]: User root from 218.92.0.133 not allowed because none of user's groups are listed in AllowGroups Dec 8 16:13:14 dcd-gentoo sshd[23483]: error: PAM: Authentication failure for illegal user root from 218.92.0.133 Dec 8 16:13:11 dcd-gentoo sshd[23483]: User root from 218.92.0.133 not allowed because none of user's groups are listed in AllowGroups Dec 8 16:13:14 dcd-gentoo sshd[23483]: error: PAM: Authentication failure for illegal user root from 218.92.0.133 Dec 8 16:13:11 dcd-gentoo sshd[23483]: User root from 218.92.0.133 not allowed because none of user's groups are listed in AllowGroups Dec 8 16:13:14 dcd-gentoo sshd[23483]: error: PAM: Authentication failure for illegal user root from 218.92.0.133 Dec 8 16:13:14 dcd-gentoo sshd[23483]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.133 port 64331 ssh2 ...	2019-12-08 23:20:37
51.77.245.181	attack	k+ssh-bruteforce	2019-12-08 22:58:16
77.42.125.77	attackspam	UTC: 2019-12-07 port: 23/tcp	2019-12-08 22:53:51
112.85.42.237	attackbots	Dec 8 18:12:03 debian-2gb-vpn-nbg1-1 sshd[25708]: Failed password for root from 112.85.42.237 port 50363 ssh2 Dec 8 18:12:06 debian-2gb-vpn-nbg1-1 sshd[25708]: Failed password for root from 112.85.42.237 port 50363 ssh2 Dec 8 18:12:10 debian-2gb-vpn-nbg1-1 sshd[25708]: Failed password for root from 112.85.42.237 port 50363 ssh2	2019-12-08 23:28:12
218.60.41.227	attackspam	$f2bV_matches	2019-12-08 22:52:27
89.252.143.4	attack	89.252.143.4 was recorded 11 times by 11 hosts attempting to connect to the following ports: 123. Incident counter (4h, 24h, all-time): 11, 15, 15	2019-12-08 23:31:12
78.183.116.186	attack	Automatic report - Port Scan Attack	2019-12-08 22:46:03
94.158.83.31	attackspam	SSH Brute Force, server-1 sshd[1876]: Failed password for backup from 94.158.83.31 port 45862 ssh2	2019-12-08 23:30:20
111.204.101.247	attackspam	2019-12-08T14:19:29.435117abusebot-4.cloudsearch.cf sshd\[14740\]: Invalid user piano from 111.204.101.247 port 18306	2019-12-08 22:51:06
1.53.144.8	attackbots	Telnet Server BruteForce Attack	2019-12-08 22:56:44

Recently Reported IPs

50.48.162.245	79.220.192.87	122.53.182.219	111.198.152.230
85.203.126.200	130.176.210.65	157.40.164.86	191.183.10.58
23.19.121.220	94.191.4.220	201.105.150.119	159.203.201.131
1.53.88.171	79.173.246.162	92.244.238.139	107.180.122.30
112.175.120.255	47.98.39.61	95.12.23.138	221.165.62.233