City: unknown
Region: unknown
Country: United States
Internet Service Provider: GoDaddy.com LLC
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackbots | 132.148.142.117 - - [23/Jul/2019:23:14:34 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1632 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.142.117 - - [23/Jul/2019:23:14:35 +0200] "POST /wp-login.php HTTP/1.1" 200 1607 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.142.117 - - [23/Jul/2019:23:14:36 +0200] "GET /wp-login.php HTTP/1.1" 200 1237 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 132.148.142.117 - - [23/Jul/2019:23:14:36 +0200] "POST /wp-login.php HTTP/1.1" 200 1608 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" . |
2019-07-24 08:50:27 |
| attackbots | www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:23 +0200\] "POST /wp-login.php HTTP/1.1" 200 2174 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:24 +0200\] "POST /wp-login.php HTTP/1.1" 200 2144 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" www.ft-1848-basketball.de 132.148.142.117 \[12/Jul/2019:14:44:26 +0200\] "POST /wp-login.php HTTP/1.1" 200 2131 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-07-12 21:35:55 |
| attack | WordPress login Brute force / Web App Attack on client site. |
2019-07-09 20:44:25 |
| attack | belitungshipwreck.org 132.148.142.117 \[22/Jun/2019:17:02:48 +0200\] "POST /wp-login.php HTTP/1.1" 200 5597 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" belitungshipwreck.org 132.148.142.117 \[22/Jun/2019:17:02:49 +0200\] "POST /wp-login.php HTTP/1.1" 200 5575 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2019-06-23 07:20:42 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 132.148.142.61 | attackspam | [munged]::443 132.148.142.61 - - [05/Oct/2019:21:40:59 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:01 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:04 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:06 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:08 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" [munged]::443 132.148.142.61 - - [05/Oct/2019:21:41:10 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11 |
2019-10-06 04:21:20 |
| 132.148.142.246 | attackbots | Port Scan: TCP/445 |
2019-08-17 00:10:45 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.148.142.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3049
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;132.148.142.117. IN A
;; AUTHORITY SECTION:
. 3600 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052501 1800 900 604800 86400
;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun May 26 08:59:51 CST 2019
;; MSG SIZE rcvd: 119
117.142.148.132.in-addr.arpa domain name pointer ip-132-148-142-117.ip.secureserver.net.
Server: 67.207.67.2
Address: 67.207.67.2#53
Non-authoritative answer:
117.142.148.132.in-addr.arpa name = ip-132-148-142-117.ip.secureserver.net.
Authoritative answers can be found from:
| IP | Type | Details | Datetime |
|---|---|---|---|
| 199.167.22.133 | attackbotsspam | Invalid user iac from 199.167.22.133 port 47615 |
2020-04-04 01:47:38 |
| 221.148.45.168 | attackbotsspam | frenzy |
2020-04-04 02:27:34 |
| 59.127.172.234 | attackspam | SSH Brute Force |
2020-04-04 02:19:24 |
| 106.12.208.31 | attackspam | Invalid user cy from 106.12.208.31 port 33944 |
2020-04-04 02:13:48 |
| 179.185.104.250 | attack | frenzy |
2020-04-04 01:53:21 |
| 49.235.16.103 | attack | Invalid user ym from 49.235.16.103 port 53184 |
2020-04-04 02:23:58 |
| 46.136.173.103 | attackbots | SSH Brute Force |
2020-04-04 02:25:06 |
| 103.236.134.74 | attackspam | Invalid user ow from 103.236.134.74 port 55458 |
2020-04-04 02:16:26 |
| 192.241.173.142 | attackspambots | Apr 3 15:13:25 work-partkepr sshd\[20639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.241.173.142 user=root Apr 3 15:13:27 work-partkepr sshd\[20639\]: Failed password for root from 192.241.173.142 port 36609 ssh2 ... |
2020-04-04 02:34:37 |
| 104.236.228.46 | attackbotsspam | Invalid user sun from 104.236.228.46 port 59728 |
2020-04-04 02:14:27 |
| 119.192.55.100 | attackspambots | 2020-04-03T15:35:49.528829abusebot-2.cloudsearch.cf sshd[20051]: Invalid user pb from 119.192.55.100 port 49071 2020-04-03T15:35:49.536288abusebot-2.cloudsearch.cf sshd[20051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.192.55.100 2020-04-03T15:35:49.528829abusebot-2.cloudsearch.cf sshd[20051]: Invalid user pb from 119.192.55.100 port 49071 2020-04-03T15:35:51.471308abusebot-2.cloudsearch.cf sshd[20051]: Failed password for invalid user pb from 119.192.55.100 port 49071 ssh2 2020-04-03T15:40:44.564018abusebot-2.cloudsearch.cf sshd[20473]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.192.55.100 user=root 2020-04-03T15:40:46.663023abusebot-2.cloudsearch.cf sshd[20473]: Failed password for root from 119.192.55.100 port 55332 ssh2 2020-04-03T15:45:35.067099abusebot-2.cloudsearch.cf sshd[20939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.192.55.10 ... |
2020-04-04 02:05:47 |
| 192.144.155.110 | attack | Invalid user pz from 192.144.155.110 port 47256 |
2020-04-04 02:35:40 |
| 209.240.232.114 | attackbots | Apr 3 16:09:24 markkoudstaal sshd[23410]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.240.232.114 Apr 3 16:09:26 markkoudstaal sshd[23410]: Failed password for invalid user xi from 209.240.232.114 port 42829 ssh2 Apr 3 16:14:34 markkoudstaal sshd[24132]: Failed password for root from 209.240.232.114 port 49435 ssh2 |
2020-04-04 02:30:12 |
| 190.113.91.52 | attackspam | Apr 3 20:16:24 lukav-desktop sshd\[11086\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.113.91.52 user=root Apr 3 20:16:26 lukav-desktop sshd\[11086\]: Failed password for root from 190.113.91.52 port 57420 ssh2 Apr 3 20:23:52 lukav-desktop sshd\[11329\]: Invalid user rd from 190.113.91.52 Apr 3 20:23:52 lukav-desktop sshd\[11329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.113.91.52 Apr 3 20:23:54 lukav-desktop sshd\[11329\]: Failed password for invalid user rd from 190.113.91.52 port 35909 ssh2 |
2020-04-04 01:50:14 |
| 167.99.131.243 | attackspam | Invalid user fg from 167.99.131.243 port 47036 |
2020-04-04 01:55:55 |