Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: GoDaddy.com

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackspam
May  2 06:47:36 meumeu sshd[12793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195 
May  2 06:47:39 meumeu sshd[12793]: Failed password for invalid user sympa from 148.66.133.195 port 52920 ssh2
May  2 06:52:21 meumeu sshd[13461]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195 
...
2020-05-02 13:01:35
attackbots
May  1 21:12:22 ip-172-31-62-245 sshd\[12492\]: Invalid user yago from 148.66.133.195\
May  1 21:12:24 ip-172-31-62-245 sshd\[12492\]: Failed password for invalid user yago from 148.66.133.195 port 45708 ssh2\
May  1 21:15:35 ip-172-31-62-245 sshd\[12521\]: Invalid user parth from 148.66.133.195\
May  1 21:15:37 ip-172-31-62-245 sshd\[12521\]: Failed password for invalid user parth from 148.66.133.195 port 38822 ssh2\
May  1 21:18:59 ip-172-31-62-245 sshd\[12539\]: Failed password for root from 148.66.133.195 port 60152 ssh2\
2020-05-02 07:36:54
attack
Apr 27 09:36:08 tuxlinux sshd[16863]: Invalid user kz from 148.66.133.195 port 38074
Apr 27 09:36:08 tuxlinux sshd[16863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195 
Apr 27 09:36:08 tuxlinux sshd[16863]: Invalid user kz from 148.66.133.195 port 38074
Apr 27 09:36:08 tuxlinux sshd[16863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195 
Apr 27 09:36:08 tuxlinux sshd[16863]: Invalid user kz from 148.66.133.195 port 38074
Apr 27 09:36:08 tuxlinux sshd[16863]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195 
Apr 27 09:36:09 tuxlinux sshd[16863]: Failed password for invalid user kz from 148.66.133.195 port 38074 ssh2
...
2020-04-27 16:32:41
attackspambots
2020-03-18 13:44:20 server sshd[59221]: Failed password for invalid user root from 148.66.133.195 port 52120 ssh2
2020-03-20 03:24:12
attackspam
Nov  3 08:59:50 venus sshd\[517\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195  user=root
Nov  3 08:59:52 venus sshd\[517\]: Failed password for root from 148.66.133.195 port 60420 ssh2
Nov  3 09:04:12 venus sshd\[537\]: Invalid user operator from 148.66.133.195 port 42948
...
2019-11-03 20:36:20
attack
Oct 27 07:59:59 ny01 sshd[31563]: Failed password for root from 148.66.133.195 port 39188 ssh2
Oct 27 08:04:58 ny01 sshd[32027]: Failed password for root from 148.66.133.195 port 49942 ssh2
2019-10-27 20:11:26
attackspam
Oct 27 07:00:11 ny01 sshd[24928]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195
Oct 27 07:00:14 ny01 sshd[24928]: Failed password for invalid user elarson from 148.66.133.195 port 40426 ssh2
Oct 27 07:04:49 ny01 sshd[25356]: Failed password for root from 148.66.133.195 port 51182 ssh2
2019-10-27 19:06:21
attackbots
Sep 21 00:56:54 tux-35-217 sshd\[21078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195  user=root
Sep 21 00:56:56 tux-35-217 sshd\[21078\]: Failed password for root from 148.66.133.195 port 57358 ssh2
Sep 21 01:01:34 tux-35-217 sshd\[21103\]: Invalid user student from 148.66.133.195 port 43044
Sep 21 01:01:34 tux-35-217 sshd\[21103\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.195
...
2019-09-21 07:34:03
attackbots
Invalid user client from 148.66.133.195 port 43208
2019-08-17 07:48:40
Comments on same subnet:
IP Type Details Datetime
148.66.133.228 attack
Feb  3 04:41:56 pi sshd[1413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.228 
Feb  3 04:41:59 pi sshd[1413]: Failed password for invalid user user from 148.66.133.228 port 59552 ssh2
2020-03-14 00:30:01
148.66.133.91 attackbots
IP blocked
2020-03-14 00:29:02
148.66.133.91 attackspambots
Feb 26 18:57:21 serwer sshd\[29450\]: Invalid user VM from 148.66.133.91 port 50970
Feb 26 18:57:21 serwer sshd\[29450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
Feb 26 18:57:23 serwer sshd\[29450\]: Failed password for invalid user VM from 148.66.133.91 port 50970 ssh2
...
2020-02-27 02:06:32
148.66.133.91 attackspambots
2020-02-26T03:15:57.129017struts4.enskede.local sshd\[3187\]: Invalid user VM from 148.66.133.91 port 50680
2020-02-26T03:15:57.317201struts4.enskede.local sshd\[3187\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
2020-02-26T03:16:00.078805struts4.enskede.local sshd\[3187\]: Failed password for invalid user VM from 148.66.133.91 port 50680 ssh2
2020-02-26T03:20:35.492814struts4.enskede.local sshd\[3190\]: Invalid user localhost from 148.66.133.91 port 37786
2020-02-26T03:20:35.500628struts4.enskede.local sshd\[3190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
...
2020-02-26 10:44:04
148.66.133.91 attackspambots
Invalid user scpuser from 148.66.133.91 port 55928
2020-02-14 01:26:41
148.66.133.91 attack
Feb 12 23:55:22 lanister sshd[23841]: Invalid user scpuser from 148.66.133.91
Feb 12 23:55:22 lanister sshd[23841]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
Feb 12 23:55:22 lanister sshd[23841]: Invalid user scpuser from 148.66.133.91
Feb 12 23:55:24 lanister sshd[23841]: Failed password for invalid user scpuser from 148.66.133.91 port 34288 ssh2
...
2020-02-13 13:06:25
148.66.133.91 attackbotsspam
Feb 13 01:30:40 vmd26974 sshd[15615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
Feb 13 01:30:43 vmd26974 sshd[15615]: Failed password for invalid user scpuser from 148.66.133.91 port 49920 ssh2
...
2020-02-13 08:38:53
148.66.133.228 attackbots
Feb  5 23:14:57 srv01 sshd[24597]: Invalid user user from 148.66.133.228 port 33324
Feb  5 23:14:57 srv01 sshd[24597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.228
Feb  5 23:14:57 srv01 sshd[24597]: Invalid user user from 148.66.133.228 port 33324
Feb  5 23:14:59 srv01 sshd[24597]: Failed password for invalid user user from 148.66.133.228 port 33324 ssh2
Feb  5 23:24:50 srv01 sshd[25312]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.228  user=root
Feb  5 23:24:52 srv01 sshd[25312]: Failed password for root from 148.66.133.228 port 49850 ssh2
...
2020-02-06 07:52:30
148.66.133.228 attack
Feb  3 11:55:48 v22018076622670303 sshd\[694\]: Invalid user user from 148.66.133.228 port 33346
Feb  3 11:55:48 v22018076622670303 sshd\[694\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.228
Feb  3 11:55:50 v22018076622670303 sshd\[694\]: Failed password for invalid user user from 148.66.133.228 port 33346 ssh2
...
2020-02-03 19:01:28
148.66.133.91 attack
2020-02-02T04:10:32.802371vostok sshd\[25069\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91  user=root | Triggered by Fail2Ban at Vostok web server
2020-02-02 20:10:13
148.66.133.135 attack
Invalid user zxin10 from 148.66.133.135 port 52716
2020-01-22 14:08:27
148.66.133.91 attackbotsspam
Jan 20 14:36:40 itv-usvr-02 sshd[7965]: Invalid user user from 148.66.133.91 port 57016
Jan 20 14:36:40 itv-usvr-02 sshd[7965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
Jan 20 14:36:40 itv-usvr-02 sshd[7965]: Invalid user user from 148.66.133.91 port 57016
Jan 20 14:36:42 itv-usvr-02 sshd[7965]: Failed password for invalid user user from 148.66.133.91 port 57016 ssh2
Jan 20 14:40:00 itv-usvr-02 sshd[8069]: Invalid user ethos from 148.66.133.91 port 46170
2020-01-20 15:49:37
148.66.133.91 attackspam
Jan 19 22:57:21 ourumov-web sshd\[14548\]: Invalid user user from 148.66.133.91 port 48828
Jan 19 22:57:21 ourumov-web sshd\[14548\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.133.91
Jan 19 22:57:24 ourumov-web sshd\[14548\]: Failed password for invalid user user from 148.66.133.91 port 48828 ssh2
...
2020-01-20 06:02:02
148.66.133.55 attackbots
WordPress login Brute force / Web App Attack on client site.
2019-12-27 04:36:36
148.66.133.15 attackbotsspam
Automatic report - XMLRPC Attack
2019-12-16 04:26:31
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.133.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40811
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.133.195.			IN	A

;; AUTHORITY SECTION:
.			1812	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 07:48:36 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 195.133.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 195.133.66.148.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
180.76.176.174 attackbots
Mar 20 01:59:59 firewall sshd[16503]: Invalid user x-bot from 180.76.176.174
Mar 20 02:00:01 firewall sshd[16503]: Failed password for invalid user x-bot from 180.76.176.174 port 48598 ssh2
Mar 20 02:00:41 firewall sshd[16525]: Invalid user x-bot from 180.76.176.174
...
2020-03-20 16:16:15
120.71.146.217 attack
Invalid user digitaldsvm from 120.71.146.217 port 43206
2020-03-20 16:38:47
206.189.124.254 attackspambots
Mar 20 08:09:18 IngegnereFirenze sshd[18035]: User root from 206.189.124.254 not allowed because not listed in AllowUsers
...
2020-03-20 16:36:55
203.245.41.96 attack
Invalid user xvwei from 203.245.41.96 port 55594
2020-03-20 15:39:52
123.148.245.100 attack
Bad_requests
2020-03-20 16:30:46
120.70.100.2 attack
Invalid user admin from 120.70.100.2 port 53270
2020-03-20 16:07:46
119.40.37.126 attackspam
Mar 20 02:02:51 firewall sshd[16646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.40.37.126
Mar 20 02:02:51 firewall sshd[16646]: Invalid user billy from 119.40.37.126
Mar 20 02:02:53 firewall sshd[16646]: Failed password for invalid user billy from 119.40.37.126 port 39855 ssh2
...
2020-03-20 15:57:05
37.187.101.66 attack
Mar 20 07:51:21 odroid64 sshd\[25371\]: User root from 37.187.101.66 not allowed because not listed in AllowUsers
Mar 20 07:51:21 odroid64 sshd\[25371\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.101.66  user=root
...
2020-03-20 16:14:18
27.152.156.3 attackspam
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.152.156.3  user=root
Failed password for root from 27.152.156.3 port 46884 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.152.156.3  user=root
Failed password for root from 27.152.156.3 port 42478 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.152.156.3  user=root
2020-03-20 15:46:59
129.204.120.169 attackbotsspam
Mar 20 07:16:04 cloud sshd[29841]: Failed password for root from 129.204.120.169 port 40212 ssh2
2020-03-20 16:34:59
177.92.16.186 attackspambots
Invalid user ut3 from 177.92.16.186 port 34187
2020-03-20 16:32:39
2a02:4780:8:a::1b attack
xmlrpc attack
2020-03-20 16:36:21
178.128.183.90 attack
$f2bV_matches
2020-03-20 16:17:27
114.67.176.63 attackspam
Mar 20 05:59:44 ns381471 sshd[21820]: Failed password for root from 114.67.176.63 port 52162 ssh2
2020-03-20 16:20:28
181.163.125.156 attackbots
181.163.125.156 - - [20/Mar/2020:03:56:35 +0000] "POST /wp-login.php HTTP/1.1" 200 6627 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
181.163.125.156 - - [20/Mar/2020:03:56:39 +0000] "POST /wp-login.php HTTP/1.1" 200 6491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-03-20 16:09:45

Recently Reported IPs

139.198.121.89 118.68.5.8 98.174.90.55 220.142.39.5
120.29.85.125 90.181.52.216 46.106.205.165 125.161.136.146
106.222.128.161 89.38.145.146 162.144.93.159 82.57.118.4
54.218.27.168 87.191.158.38 165.246.71.37 114.27.154.141
47.254.131.53 103.217.111.242 201.211.139.211 181.221.181.45