City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: GoDaddy.com
Hostname: unknown
Organization: unknown
Usage Type: Data Center/Web Hosting/Transit
| Type | Details | Datetime |
|---|---|---|
| attackspambots | Jul 17 20:36:24 ubuntu-2gb-nbg1-dc3-1 sshd[31550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.35 Jul 17 20:36:26 ubuntu-2gb-nbg1-dc3-1 sshd[31550]: Failed password for invalid user gu from 148.66.135.35 port 60896 ssh2 ... |
2019-07-18 03:11:42 |
| attack | 2019-06-30T05:47:18.703079test01.cajus.name sshd\[8480\]: Invalid user artin from 148.66.135.35 port 34814 2019-06-30T05:47:18.723066test01.cajus.name sshd\[8480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.35 2019-06-30T05:47:20.483997test01.cajus.name sshd\[8480\]: Failed password for invalid user artin from 148.66.135.35 port 34814 ssh2 |
2019-06-30 12:06:29 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.66.135.148 | attack | 148.66.135.148 - - [20/Jul/2020:04:56:10 +0100] "POST /wp-login.php HTTP/1.1" 200 1906 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [20/Jul/2020:04:56:13 +0100] "POST /wp-login.php HTTP/1.1" 200 1927 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [20/Jul/2020:04:56:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-20 13:13:33 |
| 148.66.135.148 | attack | 148.66.135.148 - - [16/Jul/2020:05:51:07 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [16/Jul/2020:05:51:09 +0200] "POST /wp-login.php HTTP/1.1" 200 2031 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [16/Jul/2020:05:51:09 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [16/Jul/2020:05:51:10 +0200] "POST /wp-login.php HTTP/1.1" 200 2007 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [16/Jul/2020:05:51:11 +0200] "GET /wp-login.php HTTP/1.1" 200 1901 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.148 - - [16/Jul/2020:05:51:12 +0200] "POST /wp-login.php HTTP/1.1" 200 2008 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/201001 ... |
2020-07-16 17:06:39 |
| 148.66.135.69 | attackbots | 148.66.135.69 - - [18/Jun/2020:22:07:08 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.69 - - [18/Jun/2020:22:07:12 +0100] "POST /wp-login.php HTTP/1.1" 200 1885 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.69 - - [18/Jun/2020:22:07:13 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-06-19 05:47:35 |
| 148.66.135.227 | attack | Attacks websites by trying to access known vulnerables of plugins, brute-force of backends or probing of administrative tools |
2020-06-15 05:27:10 |
| 148.66.135.69 | attack | MYH,DEF GET /2020/wp-login.php |
2020-06-12 17:50:07 |
| 148.66.135.152 | attackbotsspam | "XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES: |
2020-05-21 20:26:59 |
| 148.66.135.152 | attack | Automatically reported by fail2ban report script (mx1) |
2020-05-13 18:07:37 |
| 148.66.135.178 | attack | Invalid user ibarra from 148.66.135.178 port 48710 |
2020-05-11 07:11:23 |
| 148.66.135.69 | attackbots | 148.66.135.69 - - [10/May/2020:06:56:38 +0300] "POST /wp-login.php HTTP/1.1" 200 3437 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-05-10 12:29:45 |
| 148.66.135.152 | attack | 148.66.135.152 - - \[28/Apr/2020:16:31:57 +0200\] "POST /wp-login.php HTTP/1.0" 200 7302 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 148.66.135.152 - - \[28/Apr/2020:16:32:00 +0200\] "POST /wp-login.php HTTP/1.0" 200 7302 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 148.66.135.152 - - \[28/Apr/2020:16:32:01 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" |
2020-04-28 22:46:35 |
| 148.66.135.178 | attackbots | Apr 14 22:34:19 marvibiene sshd[37340]: Invalid user osboxes from 148.66.135.178 port 44276 Apr 14 22:34:19 marvibiene sshd[37340]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.178 Apr 14 22:34:19 marvibiene sshd[37340]: Invalid user osboxes from 148.66.135.178 port 44276 Apr 14 22:34:21 marvibiene sshd[37340]: Failed password for invalid user osboxes from 148.66.135.178 port 44276 ssh2 ... |
2020-04-15 08:19:37 |
| 148.66.135.178 | attackspambots | Apr 13 21:05:33 eventyay sshd[6690]: Failed password for root from 148.66.135.178 port 34444 ssh2 Apr 13 21:09:49 eventyay sshd[6976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.135.178 Apr 13 21:09:51 eventyay sshd[6976]: Failed password for invalid user clamav from 148.66.135.178 port 43920 ssh2 ... |
2020-04-14 03:19:30 |
| 148.66.135.152 | attack | WordPress wp-login brute force :: 148.66.135.152 0.096 BYPASS [11/Apr/2020:05:54:54 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2287 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-04-11 15:11:25 |
| 148.66.135.152 | attackspam | 148.66.135.152 - - [10/Apr/2020:16:18:46 +0200] "POST /wp-login.php HTTP/1.0" 200 2504 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.135.152 - - [10/Apr/2020:16:18:47 +0200] "POST /wp-login.php HTTP/1.0" 200 2508 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-04-10 23:11:56 |
| 148.66.135.69 | attack | Automatic report - XMLRPC Attack |
2020-04-10 06:36:13 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.135.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2856
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;148.66.135.35. IN A
;; AUTHORITY SECTION:
. 2355 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019052903 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu May 30 10:29:51 CST 2019
;; MSG SIZE rcvd: 117
Host 35.135.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 67.207.67.2
Address: 67.207.67.2#53
** server can't find 35.135.66.148.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 58.57.4.238 | attack | email spam |
2019-09-06 13:57:37 |
| 192.144.142.72 | attackspambots | Lines containing failures of 192.144.142.72 Sep 6 06:55:04 shared09 sshd[12742]: Invalid user cloud from 192.144.142.72 port 47805 Sep 6 06:55:04 shared09 sshd[12742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.142.72 Sep 6 06:55:06 shared09 sshd[12742]: Failed password for invalid user cloud from 192.144.142.72 port 47805 ssh2 Sep 6 06:55:07 shared09 sshd[12742]: Received disconnect from 192.144.142.72 port 47805:11: Bye Bye [preauth] Sep 6 06:55:07 shared09 sshd[12742]: Disconnected from invalid user cloud 192.144.142.72 port 47805 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=192.144.142.72 |
2019-09-06 13:26:09 |
| 103.110.12.239 | attack | $f2bV_matches |
2019-09-06 14:14:18 |
| 92.62.139.103 | attackbots | WordPress login Brute force / Web App Attack on client site. |
2019-09-06 13:40:57 |
| 141.98.9.195 | attackbotsspam | Sep 6 07:41:26 relay postfix/smtpd\[11434\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:42:51 relay postfix/smtpd\[16983\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:44:30 relay postfix/smtpd\[11415\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:44:47 relay postfix/smtpd\[11434\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 6 07:46:12 relay postfix/smtpd\[19205\]: warning: unknown\[141.98.9.195\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... |
2019-09-06 13:47:47 |
| 113.17.111.19 | attackspambots | Sep 5 19:51:44 eddieflores sshd\[4171\]: Invalid user vmuser from 113.17.111.19 Sep 5 19:51:44 eddieflores sshd\[4171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19 Sep 5 19:51:47 eddieflores sshd\[4171\]: Failed password for invalid user vmuser from 113.17.111.19 port 3236 ssh2 Sep 5 19:57:15 eddieflores sshd\[4649\]: Invalid user butter from 113.17.111.19 Sep 5 19:57:15 eddieflores sshd\[4649\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.17.111.19 |
2019-09-06 14:03:20 |
| 209.141.56.234 | attack | [portscan] tcp/22 [SSH] *(RWIN=65535)(09060835) |
2019-09-06 13:47:25 |
| 112.64.32.118 | attack | Sep 6 05:36:42 game-panel sshd[26810]: Failed password for root from 112.64.32.118 port 44736 ssh2 Sep 6 05:40:08 game-panel sshd[27042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 Sep 6 05:40:09 game-panel sshd[27042]: Failed password for invalid user ftptest from 112.64.32.118 port 42362 ssh2 |
2019-09-06 13:57:59 |
| 170.130.187.34 | attackbotsspam | Unauthorised access (Sep 6) SRC=170.130.187.34 LEN=44 TTL=243 ID=54321 TCP DPT=3389 WINDOW=65535 SYN |
2019-09-06 13:27:44 |
| 67.191.194.94 | attackspambots | $f2bV_matches |
2019-09-06 14:16:47 |
| 75.101.48.113 | attackspam | Sep 5 17:52:09 eddieflores sshd\[25609\]: Invalid user steamcmd from 75.101.48.113 Sep 5 17:52:09 eddieflores sshd\[25609\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-101-48-113.dsl.static.fusionbroadband.com Sep 5 17:52:11 eddieflores sshd\[25609\]: Failed password for invalid user steamcmd from 75.101.48.113 port 43196 ssh2 Sep 5 17:57:39 eddieflores sshd\[26056\]: Invalid user esbuser from 75.101.48.113 Sep 5 17:57:39 eddieflores sshd\[26056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=75-101-48-113.dsl.static.fusionbroadband.com |
2019-09-06 13:43:58 |
| 157.245.100.237 | attack | Sep 6 02:04:54 TORMINT sshd\[32031\]: Invalid user support from 157.245.100.237 Sep 6 02:04:54 TORMINT sshd\[32031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.100.237 Sep 6 02:04:55 TORMINT sshd\[32031\]: Failed password for invalid user support from 157.245.100.237 port 42446 ssh2 ... |
2019-09-06 14:13:27 |
| 218.67.28.113 | attackspambots | SSH invalid-user multiple login try |
2019-09-06 13:55:11 |
| 93.114.96.91 | attackbotsspam | Automatic report - Port Scan Attack |
2019-09-06 14:14:46 |
| 218.98.26.178 | attackspambots | Sep 6 07:38:44 minden010 sshd[15556]: Failed password for root from 218.98.26.178 port 53240 ssh2 Sep 6 07:38:54 minden010 sshd[15598]: Failed password for root from 218.98.26.178 port 20073 ssh2 Sep 6 07:38:56 minden010 sshd[15598]: Failed password for root from 218.98.26.178 port 20073 ssh2 ... |
2019-09-06 13:39:46 |