Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: GoDaddy.com

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attackbots
148.66.134.112 - - \[05/Oct/2019:21:40:59 +0200\] "POST /wp-login.php HTTP/1.1" 200 2111 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
148.66.134.112 - - \[05/Oct/2019:21:41:01 +0200\] "POST /wp-login.php HTTP/1.1" 200 2092 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
...
2019-10-06 04:36:11
Comments on same subnet:
IP Type Details Datetime
148.66.134.3 spamattack
"GET","\\/xmlrpc.php"
2023-08-08 19:41:22
148.66.134.85 attackspambots
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85
May  1 22:05:46 srv-ubuntu-dev3 sshd[30273]: Failed password for invalid user dkc from 148.66.134.85 port 52150 ssh2
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85
May  1 22:10:02 srv-ubuntu-dev3 sshd[31012]: Failed password for invalid user ts3server from 148.66.134.85 port 36192 ssh2
May  1 22:14:37 srv-ubuntu-dev3 sshd[31743]: Invalid user john from 148.66.134.85
...
2020-05-02 05:43:54
148.66.134.85 attack
Apr 17 11:33:34 lukav-desktop sshd\[10646\]: Invalid user git from 148.66.134.85
Apr 17 11:33:34 lukav-desktop sshd\[10646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
Apr 17 11:33:37 lukav-desktop sshd\[10646\]: Failed password for invalid user git from 148.66.134.85 port 49992 ssh2
Apr 17 11:36:45 lukav-desktop sshd\[10775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr 17 11:36:47 lukav-desktop sshd\[10775\]: Failed password for root from 148.66.134.85 port 37496 ssh2
2020-04-17 18:14:52
148.66.134.85 attackbots
SSH Bruteforce attack
2020-04-16 21:25:30
148.66.134.226 attackspam
Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:48 mail.srvfarm.net postfix/s
2020-04-16 12:41:36
148.66.134.85 attackbots
2020-04-16T02:28:55.311991centos sshd[20868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
2020-04-16T02:28:55.304439centos sshd[20868]: Invalid user service from 148.66.134.85 port 46530
2020-04-16T02:28:56.951684centos sshd[20868]: Failed password for invalid user service from 148.66.134.85 port 46530 ssh2
...
2020-04-16 08:29:54
148.66.134.85 attack
Apr 15 23:16:42 debian sshd[12615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 
Apr 15 23:16:44 debian sshd[12615]: Failed password for invalid user store from 148.66.134.85 port 39988 ssh2
Apr 15 23:20:22 debian sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
2020-04-16 04:17:23
148.66.134.85 attackbotsspam
Apr 11 11:44:59 vserver sshd\[25337\]: Failed password for root from 148.66.134.85 port 57466 ssh2Apr 11 11:50:02 vserver sshd\[25380\]: Invalid user buhler from 148.66.134.85Apr 11 11:50:04 vserver sshd\[25380\]: Failed password for invalid user buhler from 148.66.134.85 port 49284 ssh2Apr 11 11:54:19 vserver sshd\[25420\]: Invalid user install from 148.66.134.85
...
2020-04-11 18:29:30
148.66.134.85 attack
Apr  8 15:15:45 haigwepa sshd[31979]: Failed password for ftp from 148.66.134.85 port 36512 ssh2
...
2020-04-08 23:01:42
148.66.134.85 attack
SSH Invalid Login
2020-04-08 09:48:09
148.66.134.85 attackbots
Apr  5 23:48:41 lanister sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  5 23:48:44 lanister sshd[18031]: Failed password for root from 148.66.134.85 port 54410 ssh2
Apr  5 23:53:04 lanister sshd[18114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  5 23:53:06 lanister sshd[18114]: Failed password for root from 148.66.134.85 port 39302 ssh2
2020-04-06 16:19:32
148.66.134.85 attackspambots
(sshd) Failed SSH login from 148.66.134.85 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  4 01:42:20 amsweb01 sshd[26780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  4 01:42:22 amsweb01 sshd[26780]: Failed password for root from 148.66.134.85 port 34576 ssh2
Apr  4 01:56:31 amsweb01 sshd[28270]: Invalid user user from 148.66.134.85 port 56942
Apr  4 01:56:34 amsweb01 sshd[28270]: Failed password for invalid user user from 148.66.134.85 port 56942 ssh2
Apr  4 02:00:42 amsweb01 sshd[28672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
2020-04-04 08:29:41
148.66.134.85 attackspambots
$f2bV_matches
2020-03-30 01:45:24
148.66.134.148 attackspambots
SSH login attempts.
2020-03-28 01:28:50
148.66.134.85 attack
Repeated brute force against a port
2020-03-26 20:24:26
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.134.112
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39933
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.134.112.			IN	A

;; AUTHORITY SECTION:
.			311	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100501 1800 900 604800 86400

;; Query time: 502 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Oct 06 04:36:08 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 112.134.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 112.134.66.148.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
220.130.190.13 attackspambots
Jul 15 03:58:53 itv-usvr-01 sshd[12739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.190.13  user=lxd
Jul 15 03:58:55 itv-usvr-01 sshd[12739]: Failed password for lxd from 220.130.190.13 port 61957 ssh2
Jul 15 04:04:22 itv-usvr-01 sshd[12953]: Invalid user jackie from 220.130.190.13
Jul 15 04:04:22 itv-usvr-01 sshd[12953]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.130.190.13
Jul 15 04:04:22 itv-usvr-01 sshd[12953]: Invalid user jackie from 220.130.190.13
Jul 15 04:04:24 itv-usvr-01 sshd[12953]: Failed password for invalid user jackie from 220.130.190.13 port 61440 ssh2
2019-07-15 14:24:56
207.154.230.34 attackspam
Jul 15 08:25:43 meumeu sshd[23900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.230.34 
Jul 15 08:25:45 meumeu sshd[23900]: Failed password for invalid user guest from 207.154.230.34 port 60966 ssh2
Jul 15 08:30:22 meumeu sshd[24771]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=207.154.230.34 
...
2019-07-15 14:33:09
114.70.194.82 attackspam
Jul 15 08:40:57 meumeu sshd[26939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.82 
Jul 15 08:40:59 meumeu sshd[26939]: Failed password for invalid user csserver from 114.70.194.82 port 35774 ssh2
Jul 15 08:46:42 meumeu sshd[28010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.70.194.82 
...
2019-07-15 14:59:25
188.0.2.8 attack
Brute force attempt
2019-07-15 14:37:38
180.250.124.227 attackspam
Jul 15 06:29:46 MK-Soft-VM3 sshd\[30027\]: Invalid user developer from 180.250.124.227 port 45284
Jul 15 06:29:46 MK-Soft-VM3 sshd\[30027\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.124.227
Jul 15 06:29:48 MK-Soft-VM3 sshd\[30027\]: Failed password for invalid user developer from 180.250.124.227 port 45284 ssh2
...
2019-07-15 14:44:50
153.36.232.49 attackbots
Jul 15 08:14:50 amit sshd\[31079\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.49  user=root
Jul 15 08:14:51 amit sshd\[31079\]: Failed password for root from 153.36.232.49 port 30488 ssh2
Jul 15 08:15:00 amit sshd\[31081\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.232.49  user=root
...
2019-07-15 14:18:32
181.110.240.194 attackspambots
2019-07-15T06:41:27.989560abusebot-2.cloudsearch.cf sshd\[27364\]: Invalid user fish from 181.110.240.194 port 33372
2019-07-15 15:08:05
89.152.112.18 attack
/wp-login.php
2019-07-15 15:08:32
95.216.116.118 attackbots
2019-07-15T06:59:18.468136abusebot-7.cloudsearch.cf sshd\[3391\]: Invalid user knight from 95.216.116.118 port 31576
2019-07-15 15:05:04
150.161.8.120 attackspam
Jul 15 08:29:45 dev sshd\[1931\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.161.8.120  user=root
Jul 15 08:29:46 dev sshd\[1931\]: Failed password for root from 150.161.8.120 port 39856 ssh2
...
2019-07-15 14:46:29
113.172.25.64 attackspambots
2019-07-14T18:04:20.993903mizuno.rwx.ovh sshd[32747]: Connection from 113.172.25.64 port 50963 on 78.46.61.178 port 22
2019-07-14T18:04:23.824237mizuno.rwx.ovh sshd[32747]: Invalid user admin from 113.172.25.64 port 50963
2019-07-14T18:04:23.831300mizuno.rwx.ovh sshd[32747]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.25.64
2019-07-14T18:04:20.993903mizuno.rwx.ovh sshd[32747]: Connection from 113.172.25.64 port 50963 on 78.46.61.178 port 22
2019-07-14T18:04:23.824237mizuno.rwx.ovh sshd[32747]: Invalid user admin from 113.172.25.64 port 50963
2019-07-14T18:04:25.678425mizuno.rwx.ovh sshd[32747]: Failed password for invalid user admin from 113.172.25.64 port 50963 ssh2
...
2019-07-15 14:24:09
37.59.116.163 attackbots
Jul 15 08:43:23 meumeu sshd[27451]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.116.163 
Jul 15 08:43:25 meumeu sshd[27451]: Failed password for invalid user plano from 37.59.116.163 port 55488 ssh2
Jul 15 08:47:54 meumeu sshd[28257]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.59.116.163 
...
2019-07-15 14:57:52
51.75.24.200 attackbotsspam
Jul 15 06:29:59 animalibera sshd[7252]: Invalid user ansible from 51.75.24.200 port 37358
...
2019-07-15 14:37:00
123.152.151.219 attackbots
Automatic report - Port Scan Attack
2019-07-15 14:28:40
153.36.236.234 attackspam
Jul 15 07:24:10 * sshd[18952]: Failed password for root from 153.36.236.234 port 49580 ssh2
2019-07-15 14:13:11

Recently Reported IPs

65.38.54.174 180.47.76.192 109.66.93.120 150.136.247.230
102.176.180.71 51.68.70.142 189.243.201.209 144.91.64.207
172.58.99.178 116.86.58.113 61.53.13.125 190.90.196.115
62.210.172.211 49.48.197.208 245.54.154.150 142.93.176.29
191.136.179.33 188.119.7.136 112.203.250.123 123.203.31.155