Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: GoDaddy.com

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:
Type Details Datetime
attack
Nov  9 17:04:43 mxgate1 postfix/postscreen[23077]: CONNECT from [148.66.134.49]:58406 to [176.31.12.44]:25
Nov  9 17:04:43 mxgate1 postfix/dnsblog[23081]: addr 148.66.134.49 listed by domain zen.spamhaus.org as 127.0.0.4
Nov  9 17:04:43 mxgate1 postfix/dnsblog[23081]: addr 148.66.134.49 listed by domain zen.spamhaus.org as 127.0.0.3
Nov  9 17:04:43 mxgate1 postfix/dnsblog[23080]: addr 148.66.134.49 listed by domain bl.spamcop.net as 127.0.0.2
Nov  9 17:04:43 mxgate1 postfix/dnsblog[23082]: addr 148.66.134.49 listed by domain cbl.abuseat.org as 127.0.0.2
Nov  9 17:04:43 mxgate1 postfix/dnsblog[23079]: addr 148.66.134.49 listed by domain b.barracudacentral.org as 127.0.0.2
Nov  9 17:04:48 mxgate1 postfix/dnsblog[23078]: addr 148.66.134.49 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Nov  9 17:04:49 mxgate1 postfix/postscreen[23077]: DNSBL rank 6 for [148.66.134.49]:58406
Nov  9 17:04:50 mxgate1 postfix/postscreen[23077]: NOQUEUE: reject: RCPT from [148.66.134.49]:584........
-------------------------------
2019-11-10 07:18:13
Comments on same subnet:
IP Type Details Datetime
148.66.134.3 spamattack
"GET","\\/xmlrpc.php"
2023-08-08 19:41:22
148.66.134.85 attackspambots
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
May  1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85
May  1 22:05:46 srv-ubuntu-dev3 sshd[30273]: Failed password for invalid user dkc from 148.66.134.85 port 52150 ssh2
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
May  1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85
May  1 22:10:02 srv-ubuntu-dev3 sshd[31012]: Failed password for invalid user ts3server from 148.66.134.85 port 36192 ssh2
May  1 22:14:37 srv-ubuntu-dev3 sshd[31743]: Invalid user john from 148.66.134.85
...
2020-05-02 05:43:54
148.66.134.85 attack
Apr 17 11:33:34 lukav-desktop sshd\[10646\]: Invalid user git from 148.66.134.85
Apr 17 11:33:34 lukav-desktop sshd\[10646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
Apr 17 11:33:37 lukav-desktop sshd\[10646\]: Failed password for invalid user git from 148.66.134.85 port 49992 ssh2
Apr 17 11:36:45 lukav-desktop sshd\[10775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr 17 11:36:47 lukav-desktop sshd\[10775\]: Failed password for root from 148.66.134.85 port 37496 ssh2
2020-04-17 18:14:52
148.66.134.85 attackbots
SSH Bruteforce attack
2020-04-16 21:25:30
148.66.134.226 attackspam
Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo=
Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: lost connection after RCPT from unknown[148.66.134.226]
Apr 16 05:37:48 mail.srvfarm.net postfix/s
2020-04-16 12:41:36
148.66.134.85 attackbots
2020-04-16T02:28:55.311991centos sshd[20868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
2020-04-16T02:28:55.304439centos sshd[20868]: Invalid user service from 148.66.134.85 port 46530
2020-04-16T02:28:56.951684centos sshd[20868]: Failed password for invalid user service from 148.66.134.85 port 46530 ssh2
...
2020-04-16 08:29:54
148.66.134.85 attack
Apr 15 23:16:42 debian sshd[12615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 
Apr 15 23:16:44 debian sshd[12615]: Failed password for invalid user store from 148.66.134.85 port 39988 ssh2
Apr 15 23:20:22 debian sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85
2020-04-16 04:17:23
148.66.134.85 attackbotsspam
Apr 11 11:44:59 vserver sshd\[25337\]: Failed password for root from 148.66.134.85 port 57466 ssh2Apr 11 11:50:02 vserver sshd\[25380\]: Invalid user buhler from 148.66.134.85Apr 11 11:50:04 vserver sshd\[25380\]: Failed password for invalid user buhler from 148.66.134.85 port 49284 ssh2Apr 11 11:54:19 vserver sshd\[25420\]: Invalid user install from 148.66.134.85
...
2020-04-11 18:29:30
148.66.134.85 attack
Apr  8 15:15:45 haigwepa sshd[31979]: Failed password for ftp from 148.66.134.85 port 36512 ssh2
...
2020-04-08 23:01:42
148.66.134.85 attack
SSH Invalid Login
2020-04-08 09:48:09
148.66.134.85 attackbots
Apr  5 23:48:41 lanister sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  5 23:48:44 lanister sshd[18031]: Failed password for root from 148.66.134.85 port 54410 ssh2
Apr  5 23:53:04 lanister sshd[18114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  5 23:53:06 lanister sshd[18114]: Failed password for root from 148.66.134.85 port 39302 ssh2
2020-04-06 16:19:32
148.66.134.85 attackspambots
(sshd) Failed SSH login from 148.66.134.85 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  4 01:42:20 amsweb01 sshd[26780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
Apr  4 01:42:22 amsweb01 sshd[26780]: Failed password for root from 148.66.134.85 port 34576 ssh2
Apr  4 01:56:31 amsweb01 sshd[28270]: Invalid user user from 148.66.134.85 port 56942
Apr  4 01:56:34 amsweb01 sshd[28270]: Failed password for invalid user user from 148.66.134.85 port 56942 ssh2
Apr  4 02:00:42 amsweb01 sshd[28672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85  user=root
2020-04-04 08:29:41
148.66.134.85 attackspambots
$f2bV_matches
2020-03-30 01:45:24
148.66.134.148 attackspambots
SSH login attempts.
2020-03-28 01:28:50
148.66.134.85 attack
Repeated brute force against a port
2020-03-26 20:24:26
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.134.49
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6098
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.134.49.			IN	A

;; AUTHORITY SECTION:
.			583	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110901 1800 900 604800 86400

;; Query time: 147 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Nov 10 07:18:10 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 49.134.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 49.134.66.148.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
212.64.88.97 attackspam
Nov 27 07:12:04 microserver sshd[34536]: Invalid user ru from 212.64.88.97 port 39840
Nov 27 07:12:04 microserver sshd[34536]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97
Nov 27 07:12:07 microserver sshd[34536]: Failed password for invalid user ru from 212.64.88.97 port 39840 ssh2
Nov 27 07:18:49 microserver sshd[35319]: Invalid user admin from 212.64.88.97 port 45048
Nov 27 07:18:49 microserver sshd[35319]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97
Nov 27 07:32:03 microserver sshd[37246]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.88.97  user=root
Nov 27 07:32:04 microserver sshd[37246]: Failed password for root from 212.64.88.97 port 55436 ssh2
Nov 27 07:38:52 microserver sshd[38022]: Invalid user blondy from 212.64.88.97 port 60646
Nov 27 07:38:52 microserver sshd[38022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty
2019-11-27 13:44:42
95.129.237.98 attack
Unauthorised access (Nov 27) SRC=95.129.237.98 LEN=52 TTL=115 ID=26499 DF TCP DPT=445 WINDOW=8192 SYN
2019-11-27 14:04:24
211.20.181.186 attackbots
Nov 26 19:33:32 tdfoods sshd\[22902\]: Invalid user user2 from 211.20.181.186
Nov 26 19:33:32 tdfoods sshd\[22902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.20.181.186
Nov 26 19:33:33 tdfoods sshd\[22902\]: Failed password for invalid user user2 from 211.20.181.186 port 9988 ssh2
Nov 26 19:40:46 tdfoods sshd\[23625\]: Invalid user ayter from 211.20.181.186
Nov 26 19:40:46 tdfoods sshd\[23625\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.20.181.186
2019-11-27 13:59:38
211.195.117.212 attackspam
Nov 27 05:57:02 icinga sshd[2594]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.195.117.212
Nov 27 05:57:04 icinga sshd[2594]: Failed password for invalid user ubuntu from 211.195.117.212 port 21085 ssh2
...
2019-11-27 13:56:07
121.46.4.222 attack
$f2bV_matches
2019-11-27 13:25:57
206.189.146.13 attackspam
$f2bV_matches
2019-11-27 13:24:09
179.33.137.117 attackbots
Nov 27 05:57:25 sso sshd[31043]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.33.137.117
Nov 27 05:57:27 sso sshd[31043]: Failed password for invalid user tester from 179.33.137.117 port 46048 ssh2
...
2019-11-27 13:30:20
51.68.192.106 attackbots
Invalid user admin from 51.68.192.106 port 56858
2019-11-27 14:00:45
222.186.180.6 attackspambots
Nov 27 00:52:04 linuxvps sshd\[31980\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
Nov 27 00:52:06 linuxvps sshd\[31980\]: Failed password for root from 222.186.180.6 port 34096 ssh2
Nov 27 00:52:21 linuxvps sshd\[32141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
Nov 27 00:52:24 linuxvps sshd\[32141\]: Failed password for root from 222.186.180.6 port 48416 ssh2
Nov 27 00:52:44 linuxvps sshd\[32355\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6  user=root
2019-11-27 13:53:25
92.118.38.55 attackbots
Nov 27 04:55:52 heicom postfix/smtpd\[10051\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure
Nov 27 04:56:21 heicom postfix/smtpd\[9749\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure
Nov 27 04:56:49 heicom postfix/smtpd\[10051\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure
Nov 27 04:57:18 heicom postfix/smtpd\[9749\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure
Nov 27 04:57:46 heicom postfix/smtpd\[9749\]: warning: unknown\[92.118.38.55\]: SASL LOGIN authentication failed: authentication failure
...
2019-11-27 13:24:26
149.91.122.6 attackspam
2019-11-27 05:56:34 auth_login authenticator failed for (ylmf-pc) [149.91.122.6]: 535 Incorrect authentication data (set_id=a.kosyachenko@podarizavtra.ru)
2019-11-27 05:56:43 auth_login authenticator failed for (ylmf-pc) [149.91.122.6]: 535 Incorrect authentication data (set_id=a.kosyachenko@podarizavtra.ru)
...
2019-11-27 14:07:08
218.92.0.176 attackbots
Nov 25 04:26:33 db01 sshd[18870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.176  user=r.r
Nov 25 04:26:35 db01 sshd[18870]: Failed password for r.r from 218.92.0.176 port 15720 ssh2
Nov 25 04:26:38 db01 sshd[18870]: Failed password for r.r from 218.92.0.176 port 15720 ssh2
Nov 25 04:26:42 db01 sshd[18870]: Failed password for r.r from 218.92.0.176 port 15720 ssh2
Nov 25 04:26:45 db01 sshd[18870]: Failed password for r.r from 218.92.0.176 port 15720 ssh2
Nov 25 04:26:48 db01 sshd[18870]: Failed password for r.r from 218.92.0.176 port 15720 ssh2
Nov 25 04:26:48 db01 sshd[18870]: PAM 4 more authentication failures; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.176  user=r.r
Nov 25 04:26:52 db01 sshd[18882]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.176  user=r.r
Nov 25 04:26:54 db01 sshd[18882]: Failed password for r.r from 218.92.0.176 port 37497 ssh2


........
-----------------------------------
2019-11-27 13:25:42
106.12.85.76 attack
Nov 27 06:09:02 Ubuntu-1404-trusty-64-minimal sshd\[22583\]: Invalid user sengenberger from 106.12.85.76
Nov 27 06:09:02 Ubuntu-1404-trusty-64-minimal sshd\[22583\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.76
Nov 27 06:09:04 Ubuntu-1404-trusty-64-minimal sshd\[22583\]: Failed password for invalid user sengenberger from 106.12.85.76 port 41072 ssh2
Nov 27 06:52:28 Ubuntu-1404-trusty-64-minimal sshd\[32367\]: Invalid user server from 106.12.85.76
Nov 27 06:52:28 Ubuntu-1404-trusty-64-minimal sshd\[32367\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.85.76
2019-11-27 13:55:44
112.85.42.195 attack
Nov 27 05:57:38 MK-Soft-Root1 sshd[25139]: Failed password for root from 112.85.42.195 port 33752 ssh2
Nov 27 05:57:41 MK-Soft-Root1 sshd[25139]: Failed password for root from 112.85.42.195 port 33752 ssh2
...
2019-11-27 13:28:44
98.239.33.88 attackspambots
Brute force attack against VPN service
2019-11-27 13:23:14

Recently Reported IPs

189.146.142.107 103.207.170.150 188.102.222.134 116.196.118.116
47.100.2.136 210.8.81.82 5.54.175.72 117.50.84.85
101.190.78.155 120.17.98.157 34.213.31.159 106.13.185.148
14.139.62.139 192.145.239.47 182.253.94.37 5.178.207.70
180.128.1.30 80.26.35.18 79.137.28.187 81.252.136.89