148.66.134.52 - IPInfo

Basic Info

City: Singapore

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.66.134.3	spamattack	"GET","\\/xmlrpc.php"	2023-08-08 19:41:22
148.66.134.85	attackspambots	May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85 May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 May 1 22:05:44 srv-ubuntu-dev3 sshd[30273]: Invalid user dkc from 148.66.134.85 May 1 22:05:46 srv-ubuntu-dev3 sshd[30273]: Failed password for invalid user dkc from 148.66.134.85 port 52150 ssh2 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 May 1 22:10:00 srv-ubuntu-dev3 sshd[31012]: Invalid user ts3server from 148.66.134.85 May 1 22:10:02 srv-ubuntu-dev3 sshd[31012]: Failed password for invalid user ts3server from 148.66.134.85 port 36192 ssh2 May 1 22:14:37 srv-ubuntu-dev3 sshd[31743]: Invalid user john from 148.66.134.85 ...	2020-05-02 05:43:54
148.66.134.85	attack	Apr 17 11:33:34 lukav-desktop sshd\[10646\]: Invalid user git from 148.66.134.85 Apr 17 11:33:34 lukav-desktop sshd\[10646\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 Apr 17 11:33:37 lukav-desktop sshd\[10646\]: Failed password for invalid user git from 148.66.134.85 port 49992 ssh2 Apr 17 11:36:45 lukav-desktop sshd\[10775\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 17 11:36:47 lukav-desktop sshd\[10775\]: Failed password for root from 148.66.134.85 port 37496 ssh2	2020-04-17 18:14:52
148.66.134.85	attackbots	SSH Bruteforce attack	2020-04-16 21:25:30
148.66.134.226	attackspam	Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo= Apr 16 05:37:35 mail.srvfarm.net postfix/smtpd[2662907]: lost connection after RCPT from unknown[148.66.134.226] Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: NOQUEUE: reject: RCPT from unknown[148.66.134.226]: 554 5.7.1 Service unavailable; Client host [148.66.134.226] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.66.134.226 / https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=SMTP helo= Apr 16 05:37:38 mail.srvfarm.net postfix/smtpd[2662488]: lost connection after RCPT from unknown[148.66.134.226] Apr 16 05:37:48 mail.srvfarm.net postfix/s	2020-04-16 12:41:36
148.66.134.85	attackbots	2020-04-16T02:28:55.311991centos sshd[20868]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 2020-04-16T02:28:55.304439centos sshd[20868]: Invalid user service from 148.66.134.85 port 46530 2020-04-16T02:28:56.951684centos sshd[20868]: Failed password for invalid user service from 148.66.134.85 port 46530 ssh2 ...	2020-04-16 08:29:54
148.66.134.85	attack	Apr 15 23:16:42 debian sshd[12615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 Apr 15 23:16:44 debian sshd[12615]: Failed password for invalid user store from 148.66.134.85 port 39988 ssh2 Apr 15 23:20:22 debian sshd[12620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85	2020-04-16 04:17:23
148.66.134.85	attackbotsspam	Apr 11 11:44:59 vserver sshd\[25337\]: Failed password for root from 148.66.134.85 port 57466 ssh2Apr 11 11:50:02 vserver sshd\[25380\]: Invalid user buhler from 148.66.134.85Apr 11 11:50:04 vserver sshd\[25380\]: Failed password for invalid user buhler from 148.66.134.85 port 49284 ssh2Apr 11 11:54:19 vserver sshd\[25420\]: Invalid user install from 148.66.134.85 ...	2020-04-11 18:29:30
148.66.134.85	attack	Apr 8 15:15:45 haigwepa sshd[31979]: Failed password for ftp from 148.66.134.85 port 36512 ssh2 ...	2020-04-08 23:01:42
148.66.134.85	attack	SSH Invalid Login	2020-04-08 09:48:09
148.66.134.85	attackbots	Apr 5 23:48:41 lanister sshd[18031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 5 23:48:44 lanister sshd[18031]: Failed password for root from 148.66.134.85 port 54410 ssh2 Apr 5 23:53:04 lanister sshd[18114]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 5 23:53:06 lanister sshd[18114]: Failed password for root from 148.66.134.85 port 39302 ssh2	2020-04-06 16:19:32
148.66.134.85	attackspambots	(sshd) Failed SSH login from 148.66.134.85 (SG/Singapore/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 4 01:42:20 amsweb01 sshd[26780]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root Apr 4 01:42:22 amsweb01 sshd[26780]: Failed password for root from 148.66.134.85 port 34576 ssh2 Apr 4 01:56:31 amsweb01 sshd[28270]: Invalid user user from 148.66.134.85 port 56942 Apr 4 01:56:34 amsweb01 sshd[28270]: Failed password for invalid user user from 148.66.134.85 port 56942 ssh2 Apr 4 02:00:42 amsweb01 sshd[28672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.134.85 user=root	2020-04-04 08:29:41
148.66.134.85	attackspambots	$f2bV_matches	2020-03-30 01:45:24
148.66.134.148	attackspambots	SSH login attempts.	2020-03-28 01:28:50
148.66.134.85	attack	Repeated brute force against a port	2020-03-26 20:24:26

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.134.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38731
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.134.52.			IN	A

;; AUTHORITY SECTION:
.			275	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020101501 1800 900 604800 86400

;; Query time: 62 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Oct 15 18:22:29 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 52.134.66.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 52.134.66.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
144.76.6.230	attack	20 attempts against mh-misbehave-ban on pluto	2020-06-21 00:57:09
91.121.49.238	attackbots	prod11 ...	2020-06-21 00:23:07
43.250.187.22	attack	Unauthorized connection attempt from IP address 43.250.187.22 on Port 445(SMB)	2020-06-21 01:01:36
95.56.232.146	attackspam	Unauthorized connection attempt from IP address 95.56.232.146 on Port 445(SMB)	2020-06-21 00:53:52
183.83.144.183	attackbots	Unauthorized connection attempt from IP address 183.83.144.183 on Port 445(SMB)	2020-06-21 00:40:38
123.185.121.203	attack	Unauthorized connection attempt from IP address 123.185.121.203 on Port 445(SMB)	2020-06-21 01:02:28
222.144.110.179	attackspambots	Unauthorised access (Jun 20) SRC=222.144.110.179 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=18779 TCP DPT=8080 WINDOW=37394 SYN Unauthorised access (Jun 18) SRC=222.144.110.179 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=10388 TCP DPT=8080 WINDOW=37394 SYN Unauthorised access (Jun 16) SRC=222.144.110.179 LEN=40 TOS=0x10 PREC=0x40 TTL=47 ID=19971 TCP DPT=8080 WINDOW=37394 SYN	2020-06-21 00:30:19
218.92.0.253	attackbots	Jun 20 18:18:52 OPSO sshd\[30755\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.253 user=root Jun 20 18:18:54 OPSO sshd\[30755\]: Failed password for root from 218.92.0.253 port 31081 ssh2 Jun 20 18:18:57 OPSO sshd\[30755\]: Failed password for root from 218.92.0.253 port 31081 ssh2 Jun 20 18:19:01 OPSO sshd\[30755\]: Failed password for root from 218.92.0.253 port 31081 ssh2 Jun 20 18:19:04 OPSO sshd\[30755\]: Failed password for root from 218.92.0.253 port 31081 ssh2	2020-06-21 00:23:22
218.92.0.185	attackbots	Jun 20 13:41:26 vps46666688 sshd[28372]: Failed password for root from 218.92.0.185 port 11588 ssh2 Jun 20 13:41:39 vps46666688 sshd[28372]: error: maximum authentication attempts exceeded for root from 218.92.0.185 port 11588 ssh2 [preauth] ...	2020-06-21 00:48:20
181.48.46.195	attack	Jun 20 14:05:43 mail sshd[12850]: Failed password for root from 181.48.46.195 port 39754 ssh2 ...	2020-06-21 00:59:00
117.2.240.66	attack	Unauthorized connection attempt from IP address 117.2.240.66 on Port 445(SMB)	2020-06-21 00:48:51
92.118.160.41	attackspam	TCP (SYN) 92.118.160.41:54718 -> port 135, len 44	2020-06-21 00:39:28
41.170.84.122	attackspambots	Jun 20 02:11:52 php1 sshd\[28737\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.170.84.122 user=root Jun 20 02:11:53 php1 sshd\[28737\]: Failed password for root from 41.170.84.122 port 60626 ssh2 Jun 20 02:16:16 php1 sshd\[29101\]: Invalid user roy from 41.170.84.122 Jun 20 02:16:16 php1 sshd\[29101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.170.84.122 Jun 20 02:16:18 php1 sshd\[29101\]: Failed password for invalid user roy from 41.170.84.122 port 32838 ssh2	2020-06-21 00:24:09
95.9.110.162	attackbotsspam	Unauthorized connection attempt from IP address 95.9.110.162 on Port 445(SMB)	2020-06-21 00:41:59
95.152.13.188	attack	20/6/20@08:15:48: FAIL: Alarm-Network address from=95.152.13.188 20/6/20@08:15:49: FAIL: Alarm-Network address from=95.152.13.188 ...	2020-06-21 00:49:33

Recently Reported IPs

78.19.211.152	181.175.155.84	186.66.83.241	83.26.160.93
151.135.62.247	212.112.111.254	119.93.166.47	201.28.135.246
45.239.138.240	99.174.238.65	172.68.9.130	121.144.201.76
121.144.21.76	121.144.112.76	121.144.0.2	121.144.105.2
140.213.15.84	190.2.211.154	109.0.126.11	14.253.79.244