City: unknown
Region: unknown
Country: United States of America
Internet Service Provider: Microsoft Corporation
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attack | Invalid user localhost from 52.149.134.66 port 53251 |
2020-09-28 06:05:56 |
| attack | Invalid user 162 from 52.149.134.66 port 19013 |
2020-09-27 22:27:47 |
| attack | 2020-09-27 00:50:32.343294-0500 localhost sshd[20428]: Failed password for invalid user 163 from 52.149.134.66 port 15876 ssh2 |
2020-09-27 14:19:27 |
| attackspambots | 2020-09-26T23:46:52.645890ks3355764 sshd[17249]: Invalid user rimes from 52.149.134.66 port 29563 2020-09-26T23:46:54.461242ks3355764 sshd[17249]: Failed password for invalid user rimes from 52.149.134.66 port 29563 ssh2 ... |
2020-09-27 05:57:45 |
| attack | Sep 26 16:12:01 rancher-0 sshd[314705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.66 user=root Sep 26 16:12:03 rancher-0 sshd[314705]: Failed password for root from 52.149.134.66 port 42403 ssh2 ... |
2020-09-26 22:17:21 |
| attackspambots | Sep 26 07:08:01 *hidden* sshd[24325]: Invalid user admin from 52.149.134.66 port 60912 Sep 26 07:08:01 *hidden* sshd[24325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.66 Sep 26 07:08:03 *hidden* sshd[24325]: Failed password for invalid user admin from 52.149.134.66 port 60912 ssh2 |
2020-09-26 14:01:17 |
| attack | 2020-09-24T20:30:12.132592ks3355764 sshd[32225]: Invalid user ityx from 52.149.134.66 port 26538 2020-09-24T20:30:14.584632ks3355764 sshd[32225]: Failed password for invalid user ityx from 52.149.134.66 port 26538 ssh2 ... |
2020-09-25 02:30:57 |
| attack | Lines containing failures of 52.149.134.66 (max 1000) Sep 23 12:05:54 UTC__SANYALnet-Labs__cac12 sshd[19035]: Connection from 52.149.134.66 port 22729 on 64.137.176.96 port 22 Sep 23 12:05:54 UTC__SANYALnet-Labs__cac12 sshd[19036]: Connection from 52.149.134.66 port 22728 on 64.137.176.104 port 22 Sep 23 12:05:55 UTC__SANYALnet-Labs__cac12 sshd[19035]: User r.r from 52.149.134.66 not allowed because not listed in AllowUsers Sep 23 12:05:55 UTC__SANYALnet-Labs__cac12 sshd[19036]: User r.r from 52.149.134.66 not allowed because not listed in AllowUsers Sep 23 12:05:55 UTC__SANYALnet-Labs__cac12 sshd[19035]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.66 user=r.r Sep 23 12:05:55 UTC__SANYALnet-Labs__cac12 sshd[19036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.66 user=r.r Sep 23 12:05:57 UTC__SANYALnet-Labs__cac12 sshd[19035]: Failed password for invalid user r.r........ ------------------------------ |
2020-09-24 18:11:46 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 52.149.134.26 | attack | Unauthorized connection attempt detected from IP address 52.149.134.26 to port 1433 [T] |
2020-07-22 03:45:08 |
| 52.149.134.26 | attackbotsspam | Jul 18 09:28:31 nextcloud sshd\[24783\]: Invalid user admin from 52.149.134.26 Jul 18 09:28:31 nextcloud sshd\[24783\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.26 Jul 18 09:28:32 nextcloud sshd\[24783\]: Failed password for invalid user admin from 52.149.134.26 port 5283 ssh2 |
2020-07-18 15:48:51 |
| 52.149.134.26 | attackbots | Jul 18 02:43:57 rancher-0 sshd[424664]: Invalid user admin from 52.149.134.26 port 42830 ... |
2020-07-18 08:49:36 |
| 52.149.134.26 | attackspambots | Unauthorized SSH login attempts |
2020-07-17 00:38:55 |
| 52.149.134.26 | attackbotsspam | Jul 15 11:11:25 nextcloud sshd\[30208\]: Invalid user admin from 52.149.134.26 Jul 15 11:11:25 nextcloud sshd\[30208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.26 Jul 15 11:11:27 nextcloud sshd\[30208\]: Failed password for invalid user admin from 52.149.134.26 port 20149 ssh2 |
2020-07-15 17:12:09 |
| 52.149.134.171 | attack | Jul 15 02:05:08 fhem-rasp sshd[3277]: Disconnected from invalid user admin 52.149.134.171 port 33126 [preauth] Jul 15 04:12:48 fhem-rasp sshd[19673]: Invalid user admin from 52.149.134.171 port 17854 ... |
2020-07-15 10:50:55 |
| 52.149.134.171 | attack | Jul 14 20:27:51 odroid64 sshd\[25506\]: Invalid user 123 from 52.149.134.171 Jul 14 20:27:51 odroid64 sshd\[25506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.171 ... |
2020-07-15 03:49:39 |
| 52.149.134.26 | attackbotsspam | Jul 14 20:27:52 *hidden* sshd[353]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.149.134.26 Jul 14 20:27:54 *hidden* sshd[353]: Failed password for invalid user 123 from 52.149.134.26 port 26674 ssh2 |
2020-07-15 03:45:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 52.149.134.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22142
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;52.149.134.66. IN A
;; AUTHORITY SECTION:
. 451 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020092400 1800 900 604800 86400
;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Sep 24 18:11:43 CST 2020
;; MSG SIZE rcvd: 117Host 66.134.149.52.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.134.149.52.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.219.161.103 | attackspam | Automatic report - Port Scan Attack |
2019-08-11 20:27:29 |
| 173.77.165.80 | attackspambots | port scan and connect, tcp 80 (http) |
2019-08-11 20:16:27 |
| 51.91.229.17 | attackbotsspam | Aug 11 14:30:03 vps647732 sshd[28874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.229.17 Aug 11 14:30:05 vps647732 sshd[28874]: Failed password for invalid user nologin from 51.91.229.17 port 42250 ssh2 ... |
2019-08-11 20:48:48 |
| 13.65.151.171 | attackbotsspam | Aug 11 15:28:18 www sshd\[58889\]: Invalid user mike from 13.65.151.171Aug 11 15:28:20 www sshd\[58889\]: Failed password for invalid user mike from 13.65.151.171 port 33360 ssh2Aug 11 15:33:00 www sshd\[58919\]: Failed password for root from 13.65.151.171 port 56694 ssh2 ... |
2019-08-11 20:44:48 |
| 80.254.98.176 | attackspambots | Aug 11 08:12:36 vps200512 sshd\[12601\]: Invalid user demouser from 80.254.98.176 Aug 11 08:12:36 vps200512 sshd\[12601\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.254.98.176 Aug 11 08:12:38 vps200512 sshd\[12601\]: Failed password for invalid user demouser from 80.254.98.176 port 55446 ssh2 Aug 11 08:16:57 vps200512 sshd\[12681\]: Invalid user samba1 from 80.254.98.176 Aug 11 08:16:57 vps200512 sshd\[12681\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.254.98.176 |
2019-08-11 20:18:36 |
| 27.34.106.232 | attackbotsspam | /wp-login.php |
2019-08-11 21:03:06 |
| 198.108.67.47 | attackbots | 2554/tcp 8991/tcp 8010/tcp... [2019-06-10/08-11]137pkt,128pt.(tcp) |
2019-08-11 20:51:46 |
| 122.165.202.243 | attack | @LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-08-11 06:33:41,609 INFO [amun_request_handler] PortScan Detected on Port: 445 (122.165.202.243) |
2019-08-11 20:35:27 |
| 23.126.140.33 | attackspambots | Aug 11 14:24:03 srv-4 sshd\[19336\]: Invalid user dev from 23.126.140.33 Aug 11 14:24:03 srv-4 sshd\[19336\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.126.140.33 Aug 11 14:24:05 srv-4 sshd\[19336\]: Failed password for invalid user dev from 23.126.140.33 port 44550 ssh2 ... |
2019-08-11 20:45:24 |
| 68.183.179.113 | attackspam | Aug 11 14:18:49 vps691689 sshd[16516]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.179.113 Aug 11 14:18:52 vps691689 sshd[16516]: Failed password for invalid user samp from 68.183.179.113 port 45976 ssh2 Aug 11 14:23:58 vps691689 sshd[16558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.179.113 ... |
2019-08-11 20:26:47 |
| 123.21.247.250 | attackspam | Aug 11 10:51:01 srv-4 sshd\[32156\]: Invalid user admin from 123.21.247.250 Aug 11 10:51:01 srv-4 sshd\[32156\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.21.247.250 Aug 11 10:51:03 srv-4 sshd\[32156\]: Failed password for invalid user admin from 123.21.247.250 port 49513 ssh2 ... |
2019-08-11 20:53:38 |
| 198.108.66.160 | attackspambots | firewall-block, port(s): 1433/tcp |
2019-08-11 20:45:54 |
| 80.252.144.158 | attackspam | 23/tcp 23/tcp [2019-06-13/08-11]2pkt |
2019-08-11 20:25:59 |
| 37.114.169.94 | attackspam | Aug 11 10:51:07 srv-4 sshd\[32184\]: Invalid user admin from 37.114.169.94 Aug 11 10:51:07 srv-4 sshd\[32184\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.114.169.94 Aug 11 10:51:09 srv-4 sshd\[32184\]: Failed password for invalid user admin from 37.114.169.94 port 53551 ssh2 ... |
2019-08-11 20:49:43 |
| 162.244.81.196 | attackbotsspam | GET posting.php |
2019-08-11 20:43:42 |