City: unknown
Region: unknown
Country: Norway
Internet Service Provider: Blix Group AS
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | 134.90.149.22 - - [27/Jul/2019:07:15:25 +0200] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 458 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36" 134.90.149.22 - - [27/Jul/2019:07:15:25 +0200] "GET /Autodiscover/Autodiscover.xml HTTP/1.1" 404 402 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.2223.0 Safari/537.36" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET /jmx-console HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1 en-US; rv:1.9.2.18) Gecko/20110614 Firefox/53.6.11" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET ///jmx-console HTTP/1.1" 404 440 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.1 en-US; rv:1.9.2.18) Gecko/20110614 Firefox/53.6.11" 134.90.149.22 - - [27/Jul/2019:07:15:26 +0200] "GET /manager/html HTTP/1.1" 404 441 "-" "Mozilla/5.0 (Windows NT 6.1; WOW6 ... |
2019-07-27 13:20:47 |
| attack | Port scan on 5 port(s): 22 3389 5900 5901 6000 |
2019-07-26 22:58:11 |
| attackspambots | Port scan on 3 port(s): 2301 8080 8081 |
2019-07-25 23:25:36 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 134.90.149.146 | attack | 2020-08-14 22:51:59 | |
| 134.90.149.147 | attack | 2020-08-14 22:50:48 | |
| 134.90.149.147 | attackspam | fell into ViewStateTrap:wien2018 |
2020-08-10 16:05:48 |
| 134.90.149.150 | attack | Port scan detected on ports: 8080[TCP], 5836[TCP], 3121[TCP] |
2020-08-05 00:08:34 |
| 134.90.149.146 | attack | 0,47-01/07 [bc01/m11] PostRequest-Spammer scoring: Lusaka01 |
2020-02-29 21:41:14 |
| 134.90.149.146 | attack | 0,37-01/09 [bc01/m16] PostRequest-Spammer scoring: lisboa |
2020-02-29 07:07:42 |
| 134.90.149.146 | attackbots | 0,42-01/06 [bc01/m14] PostRequest-Spammer scoring: harare01 |
2020-02-28 14:30:35 |
| 134.90.149.146 | attack | (From tanya-borden@msn.com) Wеlcome Bоnus - $585 Bоnus + 542 Frеe Speеns: http://qgytgdspn.nccprojects.org/ec89cf |
2020-02-27 02:52:57 |
| 134.90.149.146 | attackbotsspam | (From 5633431@aol.com) Best Online Сasino in Cаnada - $758 Bonus + 423 Frее Speеns: http://eljbi.storyofafeather.com/724ecf |
2020-02-26 01:56:01 |
| 134.90.149.146 | attack | (From jltoney86@gmail.com) Веst Оnline Casino in USA - $985 Воnus + 355 Frее Speеns: http://bqknnaxq.12minuteaffiliate.website/71b11a29 |
2020-02-25 14:56:59 |
| 134.90.149.146 | attackspam | 0,39-02/05 [bc01/m08] PostRequest-Spammer scoring: rome |
2020-02-25 05:51:15 |
| 134.90.149.146 | attackspam | 0,19-01/04 [bc01/m11] PostRequest-Spammer scoring: essen |
2020-02-24 13:31:53 |
| 134.90.149.147 | attackbots | (From afonsosreis@msn.com) UРDАTE: Crуptoсurrenсy Investing Strategу - Q2 2020. Rеcеivе рassive incomе of $ 70,000 рer month: https://links.wtf/oAhi |
2020-02-23 06:27:43 |
| 134.90.149.147 | attackbots | (From irungu.millicent@yahoo.com) Invest $ 5,000 in Bitcoin mining оnce аnd get $ 70,000 passive incоmе pеr month: https://darknesstr.com/getmoney159489 |
2020-02-23 00:29:23 |
| 134.90.149.147 | attackspam | (From sbrkovich@msn.com) Bесomе a bitcоin millionairе. Get frоm $ 2500 pеr day: https://1borsa.com/getmillions981769 |
2020-02-22 20:10:11 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 134.90.149.22
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31660
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.90.149.22. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019072501 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 25 23:25:07 CST 2019
;; MSG SIZE rcvd: 11722.149.90.134.in-addr.arpa domain name pointer s1349014922.blix.com.Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
22.149.90.134.in-addr.arpa name = s1349014922.blix.com.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.175.182 | attackbotsspam | SSH bruteforce |
2020-05-25 04:49:12 |
| 120.92.84.145 | attackbots | May 24 22:32:16 * sshd[389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.84.145 May 24 22:32:19 * sshd[389]: Failed password for invalid user gitadmin from 120.92.84.145 port 26338 ssh2 |
2020-05-25 04:37:33 |
| 139.59.32.156 | attack | May 24 23:00:55 vps647732 sshd[26465]: Failed password for root from 139.59.32.156 port 47884 ssh2 ... |
2020-05-25 05:09:18 |
| 49.236.195.150 | attackbots | May 24 22:31:37 pve1 sshd[2459]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.236.195.150 May 24 22:31:38 pve1 sshd[2459]: Failed password for invalid user p from 49.236.195.150 port 34046 ssh2 ... |
2020-05-25 05:09:41 |
| 193.112.123.100 | attack | May 24 22:27:04 prod4 sshd\[16763\]: Invalid user hadoop from 193.112.123.100 May 24 22:27:06 prod4 sshd\[16763\]: Failed password for invalid user hadoop from 193.112.123.100 port 52552 ssh2 May 24 22:31:47 prod4 sshd\[18221\]: Invalid user olivier from 193.112.123.100 ... |
2020-05-25 05:03:20 |
| 150.109.34.190 | attackspam | May 24 22:58:40 abendstille sshd\[5406\]: Invalid user hunter from 150.109.34.190 May 24 22:58:40 abendstille sshd\[5406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.34.190 May 24 22:58:42 abendstille sshd\[5406\]: Failed password for invalid user hunter from 150.109.34.190 port 45128 ssh2 May 24 23:02:41 abendstille sshd\[9532\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.34.190 user=root May 24 23:02:43 abendstille sshd\[9532\]: Failed password for root from 150.109.34.190 port 51624 ssh2 ... |
2020-05-25 05:05:36 |
| 104.248.143.177 | attackbots | Auto Fail2Ban report, multiple SSH login attempts. |
2020-05-25 04:58:56 |
| 222.186.180.41 | attack | Multiple SSH login attempts. |
2020-05-25 04:46:01 |
| 222.186.175.154 | attackspam | $f2bV_matches |
2020-05-25 05:16:05 |
| 189.62.69.106 | attack | May 24 22:45:04 vps647732 sshd[25905]: Failed password for root from 189.62.69.106 port 41632 ssh2 ... |
2020-05-25 04:58:30 |
| 202.154.63.70 | attackspam | May 24 22:27:50 melroy-server sshd[19567]: Failed password for root from 202.154.63.70 port 48776 ssh2 ... |
2020-05-25 05:16:19 |
| 40.89.174.145 | attackspam | Automatic report - Port Scan |
2020-05-25 04:57:51 |
| 218.92.0.212 | attack | May 24 22:48:25 prod4 sshd\[25043\]: Failed password for root from 218.92.0.212 port 46271 ssh2 May 24 22:48:28 prod4 sshd\[25043\]: Failed password for root from 218.92.0.212 port 46271 ssh2 May 24 22:48:31 prod4 sshd\[25043\]: Failed password for root from 218.92.0.212 port 46271 ssh2 ... |
2020-05-25 04:57:21 |
| 82.131.160.225 | attackspam | Wordpress_xmlrpc_attack |
2020-05-25 04:45:03 |
| 222.186.169.194 | attack | Failed password for invalid user from 222.186.169.194 port 31364 ssh2 |
2020-05-25 05:08:51 |