Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: GoDaddy.com

Hostname: unknown

Organization: GoDaddy.com, LLC

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspambots
Aug 29 11:11:15 web9 sshd\[28273\]: Invalid user ubuntu from 148.66.132.232
Aug 29 11:11:15 web9 sshd\[28273\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
Aug 29 11:11:18 web9 sshd\[28273\]: Failed password for invalid user ubuntu from 148.66.132.232 port 53262 ssh2
Aug 29 11:15:52 web9 sshd\[29219\]: Invalid user miko from 148.66.132.232
Aug 29 11:15:52 web9 sshd\[29219\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
2019-08-30 10:44:52
attackspam
Aug 21 18:31:42 XXX sshd[38596]: Invalid user odoo from 148.66.132.232 port 51568
2019-08-22 02:56:10
attack
Aug 13 20:29:41 dedicated sshd[8973]: Invalid user pvm from 148.66.132.232 port 43716
2019-08-14 02:39:48
attackspam
Aug 13 18:38:23 dedicated sshd[27836]: Invalid user oracle from 148.66.132.232 port 39940
2019-08-14 00:38:32
attack
Aug  6 09:11:21 localhost sshd\[33535\]: Invalid user users from 148.66.132.232 port 59556
Aug  6 09:11:21 localhost sshd\[33535\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
...
2019-08-06 16:43:00
attack
Automatic report - Banned IP Access
2019-08-05 13:15:54
attack
Jul 31 09:13:05 MK-Soft-VM3 sshd\[17172\]: Invalid user kms from 148.66.132.232 port 46958
Jul 31 09:13:05 MK-Soft-VM3 sshd\[17172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
Jul 31 09:13:07 MK-Soft-VM3 sshd\[17172\]: Failed password for invalid user kms from 148.66.132.232 port 46958 ssh2
...
2019-07-31 17:59:46
attackspambots
May 20 01:00:19 server sshd\[237655\]: Invalid user taiga from 148.66.132.232
May 20 01:00:19 server sshd\[237655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
May 20 01:00:21 server sshd\[237655\]: Failed password for invalid user taiga from 148.66.132.232 port 55536 ssh2
...
2019-07-12 03:39:25
attackbotsspam
Jun 26 09:30:49 unicornsoft sshd\[25520\]: Invalid user luca from 148.66.132.232
Jun 26 09:30:49 unicornsoft sshd\[25520\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.232
Jun 26 09:30:51 unicornsoft sshd\[25520\]: Failed password for invalid user luca from 148.66.132.232 port 44648 ssh2
2019-06-26 19:23:00
attackbotsspam
SSH bruteforce (Triggered fail2ban)
2019-06-25 05:19:35
Comments on same subnet:
IP Type Details Datetime
148.66.132.190 attack
Ssh brute force
2020-10-04 09:05:57
148.66.132.190 attackbotsspam
2020-10-03T03:22:43.911310n23.at sshd[2066088]: Failed password for invalid user git from 148.66.132.190 port 36800 ssh2
2020-10-03T03:37:20.303913n23.at sshd[2077902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
2020-10-03T03:37:22.404701n23.at sshd[2077902]: Failed password for root from 148.66.132.190 port 35436 ssh2
...
2020-10-04 01:42:25
148.66.132.190 attack
2020-10-03T03:22:43.911310n23.at sshd[2066088]: Failed password for invalid user git from 148.66.132.190 port 36800 ssh2
2020-10-03T03:37:20.303913n23.at sshd[2077902]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
2020-10-03T03:37:22.404701n23.at sshd[2077902]: Failed password for root from 148.66.132.190 port 35436 ssh2
...
2020-10-03 17:27:56
148.66.132.190 attackspambots
SSH brute
2020-09-29 03:25:49
148.66.132.190 attackbotsspam
Sep 28 07:57:34 nextcloud sshd\[8903\]: Invalid user guest from 148.66.132.190
Sep 28 07:57:34 nextcloud sshd\[8903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Sep 28 07:57:36 nextcloud sshd\[8903\]: Failed password for invalid user guest from 148.66.132.190 port 55886 ssh2
2020-09-28 19:37:03
148.66.132.190 attackspambots
Aug 24 14:55:44 ip-172-31-16-56 sshd\[1591\]: Invalid user web from 148.66.132.190\
Aug 24 14:55:46 ip-172-31-16-56 sshd\[1591\]: Failed password for invalid user web from 148.66.132.190 port 58242 ssh2\
Aug 24 15:00:41 ip-172-31-16-56 sshd\[1617\]: Invalid user db2inst1 from 148.66.132.190\
Aug 24 15:00:43 ip-172-31-16-56 sshd\[1617\]: Failed password for invalid user db2inst1 from 148.66.132.190 port 38126 ssh2\
Aug 24 15:05:31 ip-172-31-16-56 sshd\[1667\]: Invalid user postgres from 148.66.132.190\
2020-08-25 00:43:51
148.66.132.190 attackbotsspam
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: Invalid user brisa from 148.66.132.190
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Aug 17 04:15:49 itv-usvr-01 sshd[24156]: Invalid user brisa from 148.66.132.190
Aug 17 04:15:51 itv-usvr-01 sshd[24156]: Failed password for invalid user brisa from 148.66.132.190 port 39092 ssh2
2020-08-17 05:32:23
148.66.132.190 attack
Aug 12 23:53:24 cosmoit sshd[26793]: Failed password for root from 148.66.132.190 port 59358 ssh2
2020-08-13 06:02:42
148.66.132.190 attack
Aug  3 00:06:49 itv-usvr-01 sshd[6849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:06:51 itv-usvr-01 sshd[6849]: Failed password for root from 148.66.132.190 port 34194 ssh2
Aug  3 00:11:32 itv-usvr-01 sshd[7198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:11:34 itv-usvr-01 sshd[7198]: Failed password for root from 148.66.132.190 port 47582 ssh2
Aug  3 00:16:02 itv-usvr-01 sshd[7400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190  user=root
Aug  3 00:16:04 itv-usvr-01 sshd[7400]: Failed password for root from 148.66.132.190 port 60950 ssh2
2020-08-03 02:05:23
148.66.132.190 attack
Invalid user jogoon from 148.66.132.190 port 38050
2020-08-01 14:04:33
148.66.132.190 attackspambots
Jul 30 08:05:54 piServer sshd[21143]: Failed password for backup from 148.66.132.190 port 35484 ssh2
Jul 30 08:09:27 piServer sshd[21521]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190 
Jul 30 08:09:29 piServer sshd[21521]: Failed password for invalid user xiehs from 148.66.132.190 port 56024 ssh2
...
2020-07-30 16:40:13
148.66.132.190 attack
Jul 18 00:02:02 [host] sshd[25700]: Invalid user e
Jul 18 00:02:02 [host] sshd[25700]: pam_unix(sshd:
Jul 18 00:02:05 [host] sshd[25700]: Failed passwor
2020-07-18 08:22:35
148.66.132.190 attackspam
Jun 26 04:57:54 dignus sshd[8727]: Failed password for invalid user ejabberd from 148.66.132.190 port 37842 ssh2
Jun 26 05:01:36 dignus sshd[9084]: Invalid user deploy from 148.66.132.190 port 38318
Jun 26 05:01:36 dignus sshd[9084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.132.190
Jun 26 05:01:37 dignus sshd[9084]: Failed password for invalid user deploy from 148.66.132.190 port 38318 ssh2
Jun 26 05:05:27 dignus sshd[9474]: Invalid user roberto from 148.66.132.190 port 38806
...
2020-06-26 22:54:01
148.66.132.190 attackbots
Jun 12 08:05:27 Tower sshd[14390]: Connection from 148.66.132.190 port 37990 on 192.168.10.220 port 22 rdomain ""
Jun 12 08:05:29 Tower sshd[14390]: Invalid user monitor from 148.66.132.190 port 37990
Jun 12 08:05:29 Tower sshd[14390]: error: Could not get shadow information for NOUSER
Jun 12 08:05:29 Tower sshd[14390]: Failed password for invalid user monitor from 148.66.132.190 port 37990 ssh2
Jun 12 08:05:29 Tower sshd[14390]: Received disconnect from 148.66.132.190 port 37990:11: Bye Bye [preauth]
Jun 12 08:05:29 Tower sshd[14390]: Disconnected from invalid user monitor 148.66.132.190 port 37990 [preauth]
2020-06-12 23:58:08
148.66.132.190 attackspam
Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)
2020-06-08 04:18:39
Whois info:
b
Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.132.232
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18623
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.132.232.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040600 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Sat Apr 06 21:19:52 +08 2019
;; MSG SIZE  rcvd: 118

Host info
Host 232.132.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 232.132.66.148.in-addr.arpa: NXDOMAIN

Related IP info:
Related comments:
IP Type Details Datetime
115.59.205.201 attackbots
Unauthorized connection attempt detected from IP address 115.59.205.201 to port 2323 [J]
2020-01-20 08:32:50
113.61.206.142 attack
Unauthorized connection attempt detected from IP address 113.61.206.142 to port 4567 [J]
2020-01-20 08:56:16
119.102.76.232 attackspam
Unauthorized connection attempt detected from IP address 119.102.76.232 to port 23 [J]
2020-01-20 08:53:21
115.231.234.13 attackspambots
Unauthorized connection attempt detected from IP address 115.231.234.13 to port 6380 [J]
2020-01-20 08:55:00
113.91.208.164 attackspam
Unauthorized connection attempt detected from IP address 113.91.208.164 to port 445 [T]
2020-01-20 08:55:43
119.119.225.85 attackbots
Unauthorized connection attempt detected from IP address 119.119.225.85 to port 80 [J]
2020-01-20 08:30:34
5.101.64.77 attack
ET SCAN MS Terminal Server Traffic on Non-standard Port - port: 443 proto: TCP cat: Attempted Information Leak
2020-01-20 09:02:58
159.203.201.70 attackspambots
Unauthorized connection attempt detected from IP address 159.203.201.70 to port 135 [T]
2020-01-20 08:49:58
111.38.216.123 attackspam
Unauthorized connection attempt detected from IP address 111.38.216.123 to port 3389 [T]
2020-01-20 08:34:42
223.71.167.165 attackspam
Unauthorized connection attempt detected from IP address 223.71.167.165 to port 5357 [T]
2020-01-20 08:47:30
120.253.197.129 attackbots
Unauthorized connection attempt detected from IP address 120.253.197.129 to port 23 [J]
2020-01-20 08:30:20
47.103.105.249 attackspam
Unauthorized connection attempt detected from IP address 47.103.105.249 to port 22 [T]
2020-01-20 08:40:32
49.88.172.15 attackbots
Unauthorized connection attempt detected from IP address 49.88.172.15 to port 23 [J]
2020-01-20 08:38:29
134.175.139.140 attackbotsspam
Unauthorized connection attempt detected from IP address 134.175.139.140 to port 22 [T]
2020-01-20 08:50:30
117.90.2.112 attackspambots
Unauthorized connection attempt detected from IP address 117.90.2.112 to port 3389 [T]
2020-01-20 08:54:24

Recently Reported IPs

51.83.72.46 143.255.246.189 43.251.37.21 134.209.156.123
173.212.251.56 117.89.172.145 106.13.104.94 192.185.4.50
106.13.51.110 63.240.240.74 37.46.255.156 40.92.69.109
112.35.0.41 176.181.168.172 178.164.251.57 91.92.211.180
14.195.233.211 172.119.5.177 146.120.101.12 81.15.212.7