148.66.134.226

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: GoDaddy.com

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo= Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: lost connection after RCPT from unknown[148.66.134.226] Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo= Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: lost connection after RCPT from unknown[148.66.134.226] Apr 16 05:37:48 mail.srvfarm.net postfix/s	2020-04-16 12:41:36

Type

Details

Datetime

attackspam

Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:48 mail.srvfarm.net postfix/s

2020-04-16 12:41:36

Comments on same subnet:

IP	Type	Details	Datetime
148.66.134.3	spamattack	"GET","\\/xmlrpc.php"	2023-08-08 19:41:22
148.66.134.85	attackspambots	May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85 May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85 May 1 22:05:46 srv-ubuntu-dev3 sshd[30273]: Failed password for invalid user dkc from 148.66.134.85 port 52150 ssh2 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85 May 1 22:10:02 srv-ubuntu-dev3 sshd[31012]: Failed password for invalid user ts3server from 148.66.134.85 port 36192 ssh2 May 1 22:14:37 srv-ubuntu-dev3 sshd[31743]: Invalid user john from 148.66.134.85 ...	2020-05-02 05:43:54
148.66.134.85	attack	Apr 17 11:33:34 lukav-desktop sshd\[10646\]: Invalid user git from 148.66.134.85 Apr 17 11:33:34 lukav-desktop sshd\[10646\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 Apr 17 11:33:37 lukav-desktop sshd\[10646\]: Failed password for invalid user git from 148.66.134.85 port 49992 ssh2 Apr 17 11:36:45 lukav-desktop sshd\[10775\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 17 11:36:47 lukav-desktop sshd\[10775\]: Failed password for root from 148.66.134.85 port 37496 ssh2	2020-04-17 18:14:52
148.66.134.85	attackbots	SSH Bruteforce attack	2020-04-16 21:25:30
148.66.134.85	attackbots	2020-04-16T02:28:55.311991centos sshd[20868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 2020-04-16T02:28:55.304439centos sshd[20868]: Invalid user service from 148.66.134.85 port 46530 2020-04-16T02:28:56.951684centos sshd[20868]: Failed password for invalid user service from 148.66.134.85 port 46530 ssh2 ...	2020-04-16 08:29:54
148.66.134.85	attack	Apr 15 23:16:42 debian sshd[12615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 Apr 15 23:16:44 debian sshd[12615]: Failed password for invalid user store from 148.66.134.85 port 39988 ssh2 Apr 15 23:20:22 debian sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85	2020-04-16 04:17:23
148.66.134.85	attackbotsspam	Apr 11 11:44:59 vserver sshd\[25337\]: Failed password for root from 148.66.134.85 port 57466 ssh2Apr 11 11:50:02 vserver sshd\[25380\]: Invalid user buhler from 148.66.134.85Apr 11 11:50:04 vserver sshd\[25380\]: Failed password for invalid user buhler from 148.66.134.85 port 49284 ssh2Apr 11 11:54:19 vserver sshd\[25420\]: Invalid user install from 148.66.134.85 ...	2020-04-11 18:29:30
148.66.134.85	attack	Apr 8 15:15:45 haigwepa sshd[31979]: Failed password for ftp from 148.66.134.85 port 36512 ssh2 ...	2020-04-08 23:01:42
148.66.134.85	attack	SSH Invalid Login	2020-04-08 09:48:09
148.66.134.85	attackbots	Apr 5 23:48:41 lanister sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 5 23:48:44 lanister sshd[18031]: Failed password for root from 148.66.134.85 port 54410 ssh2 Apr 5 23:53:04 lanister sshd[18114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 5 23:53:06 lanister sshd[18114]: Failed password for root from 148.66.134.85 port 39302 ssh2	2020-04-06 16:19:32
148.66.134.85	attackspambots	(sshd) Failed SSH login from 148.66.134.85 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 01:42:20 amsweb01 sshd[26780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 4 01:42:22 amsweb01 sshd[26780]: Failed password for root from 148.66.134.85 port 34576 ssh2 Apr 4 01:56:31 amsweb01 sshd[28270]: Invalid user user from 148.66.134.85 port 56942 Apr 4 01:56:34 amsweb01 sshd[28270]: Failed password for invalid user user from 148.66.134.85 port 56942 ssh2 Apr 4 02:00:42 amsweb01 sshd[28672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root	2020-04-04 08:29:41
148.66.134.85	attackspambots	$f2bV_matches	2020-03-30 01:45:24
148.66.134.148	attackspambots	SSH login attempts.	2020-03-28 01:28:50
148.66.134.85	attack	Repeated brute force against a port	2020-03-26 20:24:26
148.66.134.85	attackspambots	Mar 18 10:06:42 vps46666688 sshd[22830]: Failed password for root from 148.66.134.85 port 60958 ssh2 Mar 18 10:11:34 vps46666688 sshd[22987]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 ...	2020-03-18 21:46:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.134.226
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36888
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.134.226.			IN	A

;; AUTHORITY SECTION:
.			128	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020041501 1800 900 604800 86400

;; Query time: 307 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Apr 16 12:41:30 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 226.134.66.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 226.134.66.148.in-addr.arpa.: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.53.188.154	attackbots	Unauthorized connection attempt from IP address 46.53.188.154 on Port 445(SMB)	2020-09-17 06:17:24
60.243.132.190	attackspam	Auto Detect Rule! proto TCP (SYN), 60.243.132.190:34872->gjan.info:23, len 40	2020-09-17 05:47:29
89.165.2.239	attackspambots	Sep 16 18:56:44 pve1 sshd[7038]: Failed password for root from 89.165.2.239 port 55090 ssh2 ...	2020-09-17 05:46:58
117.0.114.253	attack	Honeypot attack, port: 445, PTR: localhost.	2020-09-17 05:52:37
2.82.170.124	attackspam	Invalid user admin from 2.82.170.124 port 34554	2020-09-17 06:08:41
202.137.155.203	attack	Dovecot Invalid User Login Attempt.	2020-09-17 05:50:09
103.147.10.222	attackbotsspam	CMS (WordPress or Joomla) login attempt.	2020-09-17 06:09:18
72.142.80.226	attackspam	Unauthorized connection attempt from IP address 72.142.80.226 on Port 445(SMB)	2020-09-17 06:02:57
59.126.198.147	attackspam	port scan and connect, tcp 23 (telnet)	2020-09-17 06:06:45
192.241.238.214	attackbotsspam	Sep 16 11:45:37 askasleikir openvpn[526]: 192.241.238.214:54174 WARNING: Bad encapsulated packet length from peer (17736), which must be > 0 and <= 1627 -- please ensure that --tun-mtu or --link-mtu is equal on both peers -- this condition could also indicate a possible active attack on the TCP link -- [Attempting restart...]	2020-09-17 06:10:40
144.217.243.216	attackspambots	2020-09-16T13:00:28.742584mail.thespaminator.com sshd[23698]: Invalid user sign from 144.217.243.216 port 37144 2020-09-16T13:00:31.418473mail.thespaminator.com sshd[23698]: Failed password for invalid user sign from 144.217.243.216 port 37144 ssh2 ...	2020-09-17 05:51:53
200.107.241.52	attackspam	445/tcp [2020-09-16]1pkt	2020-09-17 05:45:16
171.25.193.77	attackspambots	Failed password for invalid user from 171.25.193.77 port 32839 ssh2	2020-09-17 05:54:16
209.141.41.230	attack	Fail2Ban Ban Triggered	2020-09-17 06:03:20
167.248.133.76	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 9981 proto: tcp cat: Misc Attackbytes: 60	2020-09-17 06:21:02

Recently Reported IPs

113.210.150.107	255.174.248.93	54.146.126.249	214.42.108.245
10.25.32.115	93.139.180.250	228.224.40.33	77.13.101.25
104.110.135.222	54.48.48.94	184.236.211.93	112.105.54.51
49.135.193.5	98.217.219.250	156.134.222.86	242.243.154.143
209.177.41.70	0.131.128.84	155.166.85.138	23.167.190.237