132.157.66.149

Basic Info

City: unknown

Region: unknown

Country: Peru

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
132.157.66.141	attack	22/tcp 8291/tcp... [2020-10-02]4pkt,2pt.(tcp)	2020-10-04 08:57:52
132.157.66.141	attackspam	22/tcp 8291/tcp... [2020-10-02]4pkt,2pt.(tcp)	2020-10-03 17:18:09
132.157.66.89	attack	Unauthorized connection attempt from IP address 132.157.66.89 on Port 445(SMB)	2020-09-06 03:42:24
132.157.66.89	attack	Unauthorized connection attempt from IP address 132.157.66.89 on Port 445(SMB)	2020-09-05 19:21:59
132.157.66.17	attackbotsspam	2019-09-23 14:53:02 1iCNps-0001wU-1U SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:59691 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 14:53:22 1iCNqC-0001x2-Eo SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:60373 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 14:53:31 1iCNqM-0001xC-Oz SMTP connection from $\[132.157.66.17\]$ \[132.157.66.17\]:60676 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 04:19:40
132.157.66.192	attackspam	2019-03-11 17:23:17 H=$\[132.157.66.192\]$ \[132.157.66.192\]:6022 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 17:23:23 H=$\[132.157.66.192\]$ \[132.157.66.192\]:6337 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 17:23:30 H=$\[132.157.66.192\]$ \[132.157.66.192\]:6663 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 04:15:25
132.157.66.25	attackbotsspam	2019-06-22 21:01:01 1helFy-0004wE-Vo SMTP connection from $\[132.157.66.25\]$ \[132.157.66.25\]:39256 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-22 21:01:11 1helG8-0004wT-1q SMTP connection from $\[132.157.66.25\]$ \[132.157.66.25\]:39749 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-06-22 21:01:21 1helGH-0004wa-23 SMTP connection from $\[132.157.66.25\]$ \[132.157.66.25\]:40145 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 04:13:08
132.157.66.66	attackbotsspam	2019-07-06 04:17:19 1hjaGI-0000ta-8S SMTP connection from $\[132.157.66.66\]$ \[132.157.66.66\]:29139 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 04:17:39 1hjaGb-0000tt-UP SMTP connection from $\[132.157.66.66\]$ \[132.157.66.66\]:29886 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-07-06 04:17:58 1hjaGx-0000uF-Bn SMTP connection from $\[132.157.66.66\]$ \[132.157.66.66\]:31003 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 04:10:58
132.157.66.231	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 21-10-2019 21:05:22.	2019-10-22 05:32:08
132.157.66.139	attackbots	IP: 132.157.66.139 ASN: AS21575 ENTEL PERU S.A. Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/07/2019 1:13:39 AM UTC	2019-07-28 11:34:09
132.157.66.172	attackspam	IP: 132.157.66.172 ASN: AS21575 ENTEL PERU S.A. Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 28/07/2019 1:13:40 AM UTC	2019-07-28 11:32:37
132.157.66.186	attackbots	TCP Port: 25 _ invalid blocked dnsbl-sorbs abuseat-org _ _ _ _ (1020)	2019-07-24 09:44:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 132.157.66.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63653
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;132.157.66.149.			IN	A

;; AUTHORITY SECTION:
.			534	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 90 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 16:35:52 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 149.66.157.132.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.66.157.132.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
83.211.174.38	attack	2019-10-27T03:16:40.6583411495-001 sshd\[21812\]: Failed password for invalid user horia from 83.211.174.38 port 58286 ssh2 2019-10-27T04:17:41.2302281495-001 sshd\[18405\]: Invalid user luci from 83.211.174.38 port 54558 2019-10-27T04:17:41.2384021495-001 sshd\[18405\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-174-38.sn2.clouditalia.com 2019-10-27T04:17:43.7429251495-001 sshd\[18405\]: Failed password for invalid user luci from 83.211.174.38 port 54558 ssh2 2019-10-27T04:21:22.3856801495-001 sshd\[18548\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-174-38.sn2.clouditalia.com user=root 2019-10-27T04:21:23.8950431495-001 sshd\[18548\]: Failed password for root from 83.211.174.38 port 34896 ssh2 ...	2019-10-27 17:18:19
115.76.35.8	attackspam	23/tcp [2019-10-27]1pkt	2019-10-27 17:12:39
94.38.102.143	attackbotsspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/94.38.102.143/ IT - 1H : (41) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IT NAME ASN : ASN8612 IP : 94.38.102.143 CIDR : 94.36.0.0/14 PREFIX COUNT : 32 UNIQUE IP COUNT : 1536000 ATTACKS DETECTED ASN8612 : 1H - 1 3H - 4 6H - 5 12H - 7 24H - 7 DateTime : 2019-10-27 04:49:31 INFO : HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN - data recovery	2019-10-27 17:14:53
45.55.47.149	attackspambots	failed root login	2019-10-27 17:20:45
182.61.42.224	attack	Oct 27 05:48:22 meumeu sshd[18823]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.42.224 Oct 27 05:48:24 meumeu sshd[18823]: Failed password for invalid user service from 182.61.42.224 port 49786 ssh2 Oct 27 05:54:36 meumeu sshd[19643]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.42.224 ...	2019-10-27 17:12:22
184.30.210.217	attackbotsspam	10/27/2019-10:02:51.255553 184.30.210.217 Protocol: 6 SURICATA TLS invalid record/traffic	2019-10-27 17:25:27
139.59.84.55	attack	Invalid user teacher1 from 139.59.84.55 port 40828	2019-10-27 16:58:27
92.253.23.7	attackspambots	Oct 26 18:01:33 php1 sshd\[4687\]: Invalid user bowling from 92.253.23.7 Oct 26 18:01:33 php1 sshd\[4687\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.253.23.7 Oct 26 18:01:35 php1 sshd\[4687\]: Failed password for invalid user bowling from 92.253.23.7 port 55166 ssh2 Oct 26 18:05:47 php1 sshd\[5155\]: Invalid user abbis from 92.253.23.7 Oct 26 18:05:47 php1 sshd\[5155\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.253.23.7	2019-10-27 17:34:17
69.162.68.54	attack	Oct 27 07:25:40 MK-Soft-Root2 sshd[27069]: Failed password for root from 69.162.68.54 port 42202 ssh2 ...	2019-10-27 16:58:07
47.106.168.200	attack	" "	2019-10-27 17:30:38
203.212.25.245	attackbotsspam	Fail2Ban Ban Triggered	2019-10-27 17:25:05
144.217.42.212	attackbots	Triggered by Fail2Ban at Vostok web server	2019-10-27 17:03:15
218.207.123.110	attackbotsspam	DATE:2019-10-27 08:59:35, IP:218.207.123.110, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc-bis)	2019-10-27 17:11:26
51.75.134.211	attackspambots	$f2bV_matches	2019-10-27 17:29:50
178.128.21.38	attack	Oct 27 08:20:53 nextcloud sshd\[12110\]: Invalid user test from 178.128.21.38 Oct 27 08:20:53 nextcloud sshd\[12110\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.21.38 Oct 27 08:20:55 nextcloud sshd\[12110\]: Failed password for invalid user test from 178.128.21.38 port 47364 ssh2 ...	2019-10-27 17:19:49

Recently Reported IPs

41.86.5.237	101.86.57.129	5.233.134.170	110.174.123.230
120.86.239.49	117.188.166.28	185.9.84.50	189.211.232.65
193.202.86.115	200.26.231.101	146.70.52.58	116.54.94.134
45.229.54.238	178.168.10.186	34.150.187.160	106.198.12.182
64.227.76.157	156.211.147.163	189.171.38.118	153.34.138.112