91.134.5.42 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: France

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
91.134.50.12	attackbotsspam	Mar 21 11:46:06 dev0-dcde-rnet sshd[18586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12 Mar 21 11:46:07 dev0-dcde-rnet sshd[18586]: Failed password for invalid user demetrio from 91.134.50.12 port 32786 ssh2 Mar 21 11:59:34 dev0-dcde-rnet sshd[18800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12	2020-03-21 20:01:14
91.134.50.12	attackspam	Mar 21 02:46:01 ArkNodeAT sshd\[27173\]: Invalid user polycom from 91.134.50.12 Mar 21 02:46:01 ArkNodeAT sshd\[27173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12 Mar 21 02:46:03 ArkNodeAT sshd\[27173\]: Failed password for invalid user polycom from 91.134.50.12 port 38630 ssh2	2020-03-21 10:34:02

Type

Details

Datetime

91.134.50.12

attackbotsspam

Mar 21 11:46:06 dev0-dcde-rnet sshd[18586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12
Mar 21 11:46:07 dev0-dcde-rnet sshd[18586]: Failed password for invalid user demetrio from 91.134.50.12 port 32786 ssh2
Mar 21 11:59:34 dev0-dcde-rnet sshd[18800]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12

2020-03-21 20:01:14

91.134.50.12

attackspam

Mar 21 02:46:01 ArkNodeAT sshd\[27173\]: Invalid user polycom from 91.134.50.12
Mar 21 02:46:01 ArkNodeAT sshd\[27173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.50.12
Mar 21 02:46:03 ArkNodeAT sshd\[27173\]: Failed password for invalid user polycom from 91.134.50.12 port 38630 ssh2

2020-03-21 10:34:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 91.134.5.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2331
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;91.134.5.42.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 22:24:02 CST 2025
;; MSG SIZE  rcvd: 104

Host info

42.5.134.91.in-addr.arpa domain name pointer ns31737289.ip-91-134-5.eu.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
42.5.134.91.in-addr.arpa	name = ns31737289.ip-91-134-5.eu.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
158.69.0.38	attackspam	Sep 12 03:49:39 l03 sshd[20939]: Invalid user wordpress from 158.69.0.38 port 46432 ...	2020-09-12 12:04:39
20.52.44.92	attack	DE US/United States/- Hits: 11	2020-09-12 12:15:28
128.199.54.199	attackbotsspam	Port 22 Scan, PTR: None	2020-09-12 07:48:26
106.54.217.12	attackbotsspam	Sep 11 22:10:10 sshgateway sshd\[20875\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12 user=root Sep 11 22:10:11 sshgateway sshd\[20875\]: Failed password for root from 106.54.217.12 port 56920 ssh2 Sep 11 22:12:53 sshgateway sshd\[21391\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.217.12 user=root	2020-09-12 07:40:24
82.64.15.106	attackspambots	Sep 12 01:58:37 XXX sshd[52371]: Invalid user pi from 82.64.15.106 port 58364	2020-09-12 12:24:54
178.128.232.28	attack	$f2bV_matches	2020-09-12 12:13:12
167.114.185.237	attackbotsspam	Time: Sat Sep 12 05:05:15 2020 +0200 IP: 167.114.185.237 (CA/Canada/237.ip-167-114-185.net) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 12 04:51:16 mail-01 sshd[19079]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 user=root Sep 12 04:51:18 mail-01 sshd[19079]: Failed password for root from 167.114.185.237 port 57844 ssh2 Sep 12 05:01:25 mail-01 sshd[24690]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 user=root Sep 12 05:01:27 mail-01 sshd[24690]: Failed password for root from 167.114.185.237 port 51810 ssh2 Sep 12 05:05:10 mail-01 sshd[24985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.185.237 user=root	2020-09-12 12:04:11
14.142.219.150	attackbots	1599843570 - 09/11/2020 18:59:30 Host: 14.142.219.150/14.142.219.150 Port: 445 TCP Blocked	2020-09-12 12:24:35
104.248.158.95	attack	104.248.158.95 - - [12/Sep/2020:04:27:41 +0200] "GET /wp-login.php HTTP/1.1" 200 8796 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.158.95 - - [12/Sep/2020:04:27:42 +0200] "POST /wp-login.php HTTP/1.1" 200 9047 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 104.248.158.95 - - [12/Sep/2020:04:27:43 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-09-12 12:20:09
206.189.231.196	attackbots	206.189.231.196 - - [12/Sep/2020:03:47:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1874 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [12/Sep/2020:03:47:30 +0100] "POST /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 206.189.231.196 - - [12/Sep/2020:03:47:31 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-12 12:23:24
51.83.104.120	attack	Fail2Ban Ban Triggered (2)	2020-09-12 07:42:43
180.254.121.94	attackspam	Automatic report - Port Scan Attack	2020-09-12 12:21:48
79.129.29.237	attack	Invalid user lehranstalt from 79.129.29.237 port 56644	2020-09-12 07:41:55
80.82.70.214	attack	Sep 12 00:42:14 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 00:43:24 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session=<9Z14aRGvhn1QUkbW> Sep 12 00:43:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 00:46:41 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 12 00:46:59 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<	2020-09-12 07:51:41
104.131.13.199	attackspambots	Connection to SSH Honeypot - Detected by HoneypotDB	2020-09-12 07:53:19

Recently Reported IPs

194.60.199.125	98.247.171.6	237.74.59.187	205.101.238.84
217.245.37.216	225.128.146.221	67.255.19.98	63.221.135.77
150.111.198.178	141.199.148.48	227.57.187.121	90.118.63.93
137.90.171.117	89.73.67.141	136.169.69.30	107.44.208.171
41.156.120.76	73.156.10.19	20.76.232.32	37.211.40.253