City: unknown
Region: unknown
Country: United Kingdom
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.213.201.20 | attack | SSH 2020-09-19 11:09:10 134.213.201.20 139.99.182.230 > POST puripadihotel.indonesiaroom.com /wp-login.php HTTP/1.1 - - 2020-09-20 02:02:12 134.213.201.20 139.99.182.230 > GET kelimutudaniellodgehotel.indonesiaroom.com /wp-login.php HTTP/1.1 - - 2020-09-20 02:02:14 134.213.201.20 139.99.182.230 > POST kelimutudaniellodgehotel.indonesiaroom.com /wp-login.php HTTP/1.1 - - |
2020-09-20 03:36:58 |
| 134.213.201.20 | attackspambots | 134.213.201.20 - - [19/Sep/2020:11:00:14 +0100] "POST /wp-login.php HTTP/1.1" 200 4401 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.213.201.20 - - [19/Sep/2020:11:00:15 +0100] "POST /wp-login.php HTTP/1.1" 200 4401 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.213.201.20 - - [19/Sep/2020:11:00:15 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-09-19 19:39:44 |
| 134.213.27.17 | attackspam | May 27 12:57:58 game-panel sshd[1924]: Failed password for root from 134.213.27.17 port 45068 ssh2 May 27 13:01:27 game-panel sshd[2124]: Failed password for root from 134.213.27.17 port 50612 ssh2 |
2020-05-27 21:44:02 |
| 134.213.210.253 | attackbots | Automatic report - XMLRPC Attack |
2020-05-08 16:52:19 |
| 134.213.27.221 | attackbots | Sep 11 08:56:44 hpm sshd\[9438\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.213.27.221 user=root Sep 11 08:56:45 hpm sshd\[9438\]: Failed password for root from 134.213.27.221 port 37876 ssh2 Sep 11 08:56:46 hpm sshd\[9445\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.213.27.221 user=root Sep 11 08:56:48 hpm sshd\[9445\]: Failed password for root from 134.213.27.221 port 38396 ssh2 Sep 11 08:56:49 hpm sshd\[9455\]: Invalid user pi from 134.213.27.221 |
2019-09-12 05:31:04 |
| 134.213.27.221 | attackspambots | Sep 7 23:24:11 mail sshd[30756]: Failed password for r.r from 134.213.27.221 port 55674 ssh2 Sep 7 23:24:17 mail sshd[30758]: Failed password for r.r from 134.213.27.221 port 56030 ssh2 Sep 7 23:24:18 mail sshd[30760]: Invalid user pi from 134.213.27.221 Sep 7 23:24:21 mail sshd[30760]: Failed password for invalid user pi from 134.213.27.221 port 56518 ssh2 Sep 7 23:24:22 mail sshd[30762]: Invalid user pi from 134.213.27.221 Sep 7 23:24:25 mail sshd[30762]: Failed password for invalid user pi from 134.213.27.221 port 57144 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=134.213.27.221 |
2019-09-08 14:09:33 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.213.2.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4658
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;134.213.2.8. IN A
;; AUTHORITY SECTION:
. 403 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400
;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 11:41:51 CST 2022
;; MSG SIZE rcvd: 104
8.2.213.134.in-addr.arpa domain name pointer prod04.dekodes.no.
Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
8.2.213.134.in-addr.arpa name = prod04.dekodes.no.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 14.244.132.126 | attack | unauthorized connection attempt |
2020-01-17 20:25:54 |
| 200.94.197.105 | attackspam | unauthorized connection attempt |
2020-01-17 20:55:22 |
| 200.233.232.79 | attack | unauthorized connection attempt |
2020-01-17 20:27:46 |
| 151.235.196.84 | attack | unauthorized connection attempt |
2020-01-17 20:32:29 |
| 201.187.80.146 | attackbotsspam | unauthorized connection attempt |
2020-01-17 20:54:49 |
| 195.138.67.137 | attack | unauthorized connection attempt |
2020-01-17 20:28:31 |
| 178.242.57.236 | attack | Unauthorized connection attempt detected from IP address 178.242.57.236 to port 23 [J] |
2020-01-17 20:57:15 |
| 186.204.82.22 | attack | unauthorized connection attempt |
2020-01-17 20:56:26 |
| 223.150.230.135 | attackbots | unauthorized connection attempt |
2020-01-17 20:27:05 |
| 95.9.133.59 | attackspam | MVPower DVR TV Shell Unauthenticated Command Execution Vulnerability |
2020-01-17 20:21:26 |
| 177.0.244.162 | attackbots | unauthorized connection attempt |
2020-01-17 20:48:06 |
| 108.52.243.101 | attackbots | Unauthorized connection attempt detected from IP address 108.52.243.101 to port 8080 [J] |
2020-01-17 20:36:00 |
| 177.70.145.236 | attack | unauthorized connection attempt |
2020-01-17 20:47:45 |
| 223.72.84.206 | attackbots | unauthorized connection attempt |
2020-01-17 20:40:38 |
| 187.10.44.91 | attackspam | unauthorized connection attempt |
2020-01-17 20:42:23 |