Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Copenhagen

Region: Capital Region

Country: Denmark

Internet Service Provider: Blix Group AS

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbotsspam
Spam-Mail via Contact-Form 2019-11-04 19:50
2019-11-06 00:29:40
Comments on same subnet:
IP Type Details Datetime
134.90.149.146 attack
2020-08-14 22:51:59
134.90.149.147 attack
2020-08-14 22:50:48
134.90.149.147 attackspam
fell into ViewStateTrap:wien2018
2020-08-10 16:05:48
134.90.149.150 attack
Port scan detected on ports: 8080[TCP], 5836[TCP], 3121[TCP]
2020-08-05 00:08:34
134.90.149.146 attack
0,47-01/07 [bc01/m11] PostRequest-Spammer scoring: Lusaka01
2020-02-29 21:41:14
134.90.149.146 attack
0,37-01/09 [bc01/m16] PostRequest-Spammer scoring: lisboa
2020-02-29 07:07:42
134.90.149.146 attackbots
0,42-01/06 [bc01/m14] PostRequest-Spammer scoring: harare01
2020-02-28 14:30:35
134.90.149.146 attack
(From tanya-borden@msn.com) Wеlcome Bоnus  - $585 Bоnus + 542 Frеe Speеns: http://qgytgdspn.nccprojects.org/ec89cf
2020-02-27 02:52:57
134.90.149.146 attackbotsspam
(From 5633431@aol.com) Best Online Сasino in Cаnada - $758 Bonus + 423 Frее Speеns: http://eljbi.storyofafeather.com/724ecf
2020-02-26 01:56:01
134.90.149.146 attack
(From jltoney86@gmail.com) Веst Оnline Casino in USA - $985 Воnus + 355 Frее Speеns: http://bqknnaxq.12minuteaffiliate.website/71b11a29
2020-02-25 14:56:59
134.90.149.146 attackspam
0,39-02/05 [bc01/m08] PostRequest-Spammer scoring: rome
2020-02-25 05:51:15
134.90.149.146 attackspam
0,19-01/04 [bc01/m11] PostRequest-Spammer scoring: essen
2020-02-24 13:31:53
134.90.149.147 attackbots
(From afonsosreis@msn.com) UРDАTE: Crуptoсurrenсy Investing Strategу - Q2 2020. Rеcеivе рassive incomе of $ 70,000 рer month: https://links.wtf/oAhi
2020-02-23 06:27:43
134.90.149.147 attackbots
(From irungu.millicent@yahoo.com) Invest $ 5,000 in Bitcoin mining оnce аnd get $ 70,000 passive incоmе pеr month: https://darknesstr.com/getmoney159489
2020-02-23 00:29:23
134.90.149.147 attackspam
(From sbrkovich@msn.com) Bесomе a bitcоin millionairе. Get frоm $ 2500 pеr day: https://1borsa.com/getmillions981769
2020-02-22 20:10:11
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.90.149.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61698
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.90.149.149.			IN	A

;; AUTHORITY SECTION:
.			288	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110500 1800 900 604800 86400

;; Query time: 183 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 00:29:36 CST 2019
;; MSG SIZE  rcvd: 118
Host info
149.149.90.134.in-addr.arpa domain name pointer s13490149149.blix.com.
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
149.149.90.134.in-addr.arpa	name = s13490149149.blix.com.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
84.180.229.211 attack
May 30 03:19:30 www sshd[16082]: Invalid user kyrsten from 84.180.229.211
May 30 03:19:31 www sshd[16082]: Failed password for invalid user kyrsten from 84.180.229.211 port 47556 ssh2
May 30 03:31:06 www sshd[19799]: Failed password for r.r from 84.180.229.211 port 53108 ssh2
May 30 03:34:41 www sshd[20630]: Invalid user butter from 84.180.229.211
May 30 03:34:42 www sshd[20630]: Failed password for invalid user butter from 84.180.229.211 port 40920 ssh2
May 30 03:38:16 www sshd[21454]: Failed password for r.r from 84.180.229.211 port 64817 ssh2
May 30 03:41:50 www sshd[22395]: Failed password for r.r from 84.180.229.211 port 34647 ssh2
May 30 03:45:39 www sshd[23401]: Invalid user stalin from 84.180.229.211
May 30 03:45:41 www sshd[23401]: Failed password for invalid user stalin from 84.180.229.211 port 49056 ssh2
May 30 03:49:30 www sshd[24336]: Invalid user admin from 84.180.229.211
May 30 03:49:32 www sshd[24336]: Failed password for invalid user admin from 84.180.2........
-------------------------------
2020-05-31 00:21:15
61.146.72.252 attack
2020-05-30T12:04:25.402465abusebot.cloudsearch.cf sshd[17886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.146.72.252  user=root
2020-05-30T12:04:27.648281abusebot.cloudsearch.cf sshd[17886]: Failed password for root from 61.146.72.252 port 58589 ssh2
2020-05-30T12:09:23.415861abusebot.cloudsearch.cf sshd[18231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.146.72.252  user=root
2020-05-30T12:09:25.571544abusebot.cloudsearch.cf sshd[18231]: Failed password for root from 61.146.72.252 port 47495 ssh2
2020-05-30T12:10:32.251448abusebot.cloudsearch.cf sshd[18321]: Invalid user kongxx from 61.146.72.252 port 53906
2020-05-30T12:10:32.256981abusebot.cloudsearch.cf sshd[18321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.146.72.252
2020-05-30T12:10:32.251448abusebot.cloudsearch.cf sshd[18321]: Invalid user kongxx from 61.146.72.252 port 53906
2020-05-30T
...
2020-05-31 00:30:28
114.237.109.175 attack
SpamScore above: 10.0
2020-05-31 00:27:50
195.54.160.180 attackbots
May 30 17:24:04 ks10 sshd[15764]: Failed password for root from 195.54.160.180 port 6155 ssh2
...
2020-05-30 23:50:38
184.170.212.94 attackspambots
May 26 22:25:00 hurricane sshd[3023]: Invalid user ftpuser from 184.170.212.94 port 33708
May 26 22:25:00 hurricane sshd[3023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.170.212.94
May 26 22:25:01 hurricane sshd[3023]: Failed password for invalid user ftpuser from 184.170.212.94 port 33708 ssh2
May 26 22:25:01 hurricane sshd[3023]: Received disconnect from 184.170.212.94 port 33708:11: Bye Bye [preauth]
May 26 22:25:01 hurricane sshd[3023]: Disconnected from 184.170.212.94 port 33708 [preauth]
May 26 22:32:12 hurricane sshd[3108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=184.170.212.94  user=r.r
May 26 22:32:14 hurricane sshd[3108]: Failed password for r.r from 184.170.212.94 port 46234 ssh2
May 26 22:32:14 hurricane sshd[3108]: Received disconnect from 184.170.212.94 port 46234:11: Bye Bye [preauth]
May 26 22:32:14 hurricane sshd[3108]: Disconnected from 184.170.212.94 port........
-------------------------------
2020-05-31 00:26:14
112.85.42.172 attack
May 30 18:19:10 *host* sshd\[9432\]: Unable to negotiate with 112.85.42.172 port 12954: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\]
2020-05-31 00:19:27
106.54.65.228 attack
May 30 10:16:04 firewall sshd[32747]: Failed password for root from 106.54.65.228 port 54614 ssh2
May 30 10:18:35 firewall sshd[429]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.65.228  user=root
May 30 10:18:37 firewall sshd[429]: Failed password for root from 106.54.65.228 port 53776 ssh2
...
2020-05-31 00:16:16
131.117.150.106 attackspam
Triggered by Fail2Ban at Ares web server
2020-05-31 00:20:31
182.151.15.175 attackspambots
May 30 16:46:01 v22019038103785759 sshd\[20619\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.15.175  user=root
May 30 16:46:03 v22019038103785759 sshd\[20619\]: Failed password for root from 182.151.15.175 port 54021 ssh2
May 30 16:49:31 v22019038103785759 sshd\[20839\]: Invalid user z from 182.151.15.175 port 43952
May 30 16:49:31 v22019038103785759 sshd\[20839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.15.175
May 30 16:49:33 v22019038103785759 sshd\[20839\]: Failed password for invalid user z from 182.151.15.175 port 43952 ssh2
...
2020-05-31 00:24:05
96.8.121.32 attackspambots
Lines containing failures of 96.8.121.32
May 30 08:01:29 neweola sshd[6918]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.8.121.32  user=r.r
May 30 08:01:31 neweola sshd[6918]: Failed password for r.r from 96.8.121.32 port 53866 ssh2
May 30 08:01:31 neweola sshd[6918]: Received disconnect from 96.8.121.32 port 53866:11: Bye Bye [preauth]
May 30 08:01:31 neweola sshd[6918]: Disconnected from authenticating user r.r 96.8.121.32 port 53866 [preauth]
May 30 08:17:59 neweola sshd[8584]: Invalid user user2 from 96.8.121.32 port 58094
May 30 08:17:59 neweola sshd[8584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=96.8.121.32 
May 30 08:18:01 neweola sshd[8584]: Failed password for invalid user user2 from 96.8.121.32 port 58094 ssh2
May 30 08:18:03 neweola sshd[8584]: Received disconnect from 96.8.121.32 port 58094:11: Bye Bye [preauth]
May 30 08:18:03 neweola sshd[8584]: Disconnected from ........
------------------------------
2020-05-31 00:29:00
1.173.166.214 attackspam
Port probing on unauthorized port 23
2020-05-31 00:25:23
45.164.40.46 attack
TCP src-port=36598   dst-port=25   Listed on   abuseat-org barracuda spamcop       (Project Honey Pot rated Suspicious)   (71)
2020-05-30 23:50:22
202.152.1.89 attackbots
May 30 14:10:46 debian-2gb-nbg1-2 kernel: \[13099427.233496\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=202.152.1.89 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=45604 PROTO=TCP SPT=51548 DPT=1199 WINDOW=1024 RES=0x00 SYN URGP=0
2020-05-31 00:22:49
120.209.98.91 attack
port scan and connect, tcp 23 (telnet)
2020-05-31 00:06:40
104.248.16.41 attackspambots
May 30 16:06:24 prox sshd[20063]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.248.16.41 
May 30 16:06:26 prox sshd[20063]: Failed password for invalid user matt from 104.248.16.41 port 47670 ssh2
2020-05-30 23:49:01

Recently Reported IPs

217.23.4.69 119.90.98.30 177.189.141.154 123.191.133.216
222.132.24.107 190.15.52.93 51.89.100.98 159.203.201.225
95.211.171.134 51.255.20.29 202.54.73.202 185.114.225.207
41.107.136.0 45.82.32.30 201.247.103.197 51.255.170.213
161.53.18.64 82.50.91.8 107.4.45.105 87.112.52.110