City: unknown
Region: unknown
Country: Norway
Internet Service Provider: Blix Group AS
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | 134.90.149.22 - - [27/Jul/2019:07:15:25 +0200] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36" 134.90.149.22 - - [27/Jul/2019:07:15:25 +0200] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET /jmx-console HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1 en-US; rv:1.9.2.18) Gecko/20110614 Firefox/53.6.11" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET ///jmx-console HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1 en-US; rv:1.9.2.18) Gecko/20110614 Firefox/53.6.11" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET /manager/html HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 6.1; WOW6 ... |
2019-07-27 13:20:47 |
| attack | Port scan on 5 port(s): 22 3389 5900 5901 6000 |
2019-07-26 22:58:11 |
| attackspambots | Port scan on 3 port(s): 2301 8080 8081 |
2019-07-25 23:25:36 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.90.149.146 | attack | 2020-08-14 22:51:59 | |
| 134.90.149.147 | attack | 2020-08-14 22:50:48 | |
| 134.90.149.147 | attackspam | fell into ViewStateTrap:wien2018 |
2020-08-10 16:05:48 |
| 134.90.149.150 | attack | Port scan detected on ports: 8080[TCP], 5836[TCP], 3121[TCP] |
2020-08-05 00:08:34 |
| 134.90.149.146 | attack | 0,47-01/07 [bc01/m11] PostRequest-Spammer scoring: Lusaka01 |
2020-02-29 21:41:14 |
| 134.90.149.146 | attack | 0,37-01/09 [bc01/m16] PostRequest-Spammer scoring: lisboa |
2020-02-29 07:07:42 |
| 134.90.149.146 | attackbots | 0,42-01/06 [bc01/m14] PostRequest-Spammer scoring: harare01 |
2020-02-28 14:30:35 |
| 134.90.149.146 | attack | (From tanya-borden@msn.com) Wеlcome Bоnus - $585 Bоnus + 542 Frеe Speеns: http://qgytgdspn.nccprojects.org/ec89cf |
2020-02-27 02:52:57 |
| 134.90.149.146 | attackbotsspam | (From 5633431@aol.com) Best Online Сasino in Cаnada - $758 Bonus + 423 Frее Speеns: http://eljbi.storyofafeather.com/724ecf |
2020-02-26 01:56:01 |
| 134.90.149.146 | attack | (From jltoney86@gmail.com) Веst Оnline Casino in USA - $985 Воnus + 355 Frее Speеns: http://bqknnaxq.12minuteaffiliate.website/71b11a29 |
2020-02-25 14:56:59 |
| 134.90.149.146 | attackspam | 0,39-02/05 [bc01/m08] PostRequest-Spammer scoring: rome |
2020-02-25 05:51:15 |
| 134.90.149.146 | attackspam | 0,19-01/04 [bc01/m11] PostRequest-Spammer scoring: essen |
2020-02-24 13:31:53 |
| 134.90.149.147 | attackbots | (From afonsosreis@msn.com) UРDАTE: Crуptoсurrenсy Investing Strategу - Q2 2020. Rеcеivе рassive incomе of $ 70,000 рer month: https://links.wtf/oAhi |
2020-02-23 06:27:43 |
| 134.90.149.147 | attackbots | (From irungu.millicent@yahoo.com) Invest $ 5,000 in Bitcoin mining оnce аnd get $ 70,000 passive incоmе pеr month: https://darknesstr.com/getmoney159489 |
2020-02-23 00:29:23 |
| 134.90.149.147 | attackspam | (From sbrkovich@msn.com) Bесomе a bitcоin millionairе. Get frоm $ 2500 pеr day: https://1borsa.com/getmillions981769 |
2020-02-22 20:10:11 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.90.149.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31660
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.90.149.22. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019072501 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 23:25:07 CST 2019
;; MSG SIZE rcvd: 117
22.149.90.134.in-addr.arpa domain name pointer s1349014922.blix.com.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
22.149.90.134.in-addr.arpa name = s1349014922.blix.com.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 200.146.229.129 | attackspam | Dovecot Invalid User Login Attempt. |
2020-08-27 23:57:46 |
| 95.188.81.255 | attack | Unauthorized connection attempt from IP address 95.188.81.255 on Port 445(SMB) |
2020-08-27 23:54:43 |
| 181.211.163.122 | attack | DATE:2020-08-27 15:00:01, IP:181.211.163.122, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq) |
2020-08-28 00:19:27 |
| 218.92.0.251 | attackbots | Aug 27 17:53:48 jane sshd[11913]: Failed password for root from 218.92.0.251 port 52685 ssh2 Aug 27 17:53:52 jane sshd[11913]: Failed password for root from 218.92.0.251 port 52685 ssh2 ... |
2020-08-28 00:04:00 |
| 35.184.155.136 | attackspam | Aug 27 12:41:19 ws24vmsma01 sshd[29152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.184.155.136 Aug 27 12:41:21 ws24vmsma01 sshd[29152]: Failed password for invalid user lee from 35.184.155.136 port 57838 ssh2 ... |
2020-08-28 00:02:11 |
| 203.56.24.180 | attackbots | Aug 27 17:09:01 jane sshd[991]: Failed password for root from 203.56.24.180 port 40994 ssh2 Aug 27 17:14:29 jane sshd[6716]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.56.24.180 ... |
2020-08-27 23:51:43 |
| 213.32.93.237 | attack | SSH Brute Force |
2020-08-27 23:56:30 |
| 95.9.186.108 | attackbots | 20/8/27@09:01:07: FAIL: Alarm-Network address from=95.9.186.108 20/8/27@09:01:07: FAIL: Alarm-Network address from=95.9.186.108 ... |
2020-08-27 23:35:33 |
| 94.102.51.95 | attackbots |
|
2020-08-27 23:43:58 |
| 45.129.33.11 | attackspam |
|
2020-08-28 00:06:38 |
| 58.247.111.70 | attackspambots | 27.08.2020 15:01:16 - Login Fail on hMailserver Detected by ELinOX-hMail-A2F |
2020-08-27 23:33:43 |
| 202.171.79.206 | attackspam | [ssh] SSH attack |
2020-08-28 00:04:58 |
| 192.241.222.26 | attackspambots | Aug 27 15:08:57 localhost sshd[128226]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.222.26 user=root Aug 27 15:08:59 localhost sshd[128226]: Failed password for root from 192.241.222.26 port 43768 ssh2 Aug 27 15:12:34 localhost sshd[128530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.222.26 user=root Aug 27 15:12:36 localhost sshd[128530]: Failed password for root from 192.241.222.26 port 40150 ssh2 Aug 27 15:16:03 localhost sshd[128897]: Invalid user seafile from 192.241.222.26 port 36531 ... |
2020-08-27 23:39:14 |
| 157.46.105.40 | attack | Unauthorized connection attempt from IP address 157.46.105.40 on Port 445(SMB) |
2020-08-27 23:52:11 |
| 176.192.70.146 | attackspambots | Unauthorized connection attempt from IP address 176.192.70.146 on Port 445(SMB) |
2020-08-27 23:40:58 |