City: unknown
Region: unknown
Country: Hong Kong
Internet Service Provider: CSL Limited
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.66.143.89 | attackbotsspam | Automatic report - XMLRPC Attack |
2020-08-29 14:31:27 |
| 148.66.142.135 | attackbotsspam | *Port Scan* detected from 148.66.142.135 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 115 seconds |
2020-08-29 04:54:49 |
| 148.66.143.89 | attackbots | 148.66.143.89 - - [27/Aug/2020:06:56:28 +0200] "GET /wp-login.php HTTP/1.1" 200 8537 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.143.89 - - [27/Aug/2020:06:56:29 +0200] "POST /wp-login.php HTTP/1.1" 200 8788 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.143.89 - - [27/Aug/2020:06:56:31 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" |
2020-08-27 19:44:36 |
| 148.66.142.135 | attack | Aug 25 01:48:04 NPSTNNYC01T sshd[3831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 Aug 25 01:48:06 NPSTNNYC01T sshd[3831]: Failed password for invalid user quadir from 148.66.142.135 port 44014 ssh2 Aug 25 01:52:57 NPSTNNYC01T sshd[4215]: Failed password for root from 148.66.142.135 port 53756 ssh2 ... |
2020-08-25 14:11:09 |
| 148.66.143.89 | attackspambots | php WP PHPmyadamin ABUSE blocked for 12h |
2020-08-15 19:22:49 |
| 148.66.142.174 | attackspambots | Aug 11 15:42:57 b-vps wordpress(gpfans.cz)[30596]: Authentication attempt for unknown user buchtic from 148.66.142.174 ... |
2020-08-11 22:56:38 |
| 148.66.142.174 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-06 12:09:18 |
| 148.66.142.174 | attackspam | 148.66.142.174 - - [01/Aug/2020:05:21:25 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:27 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-01 18:25:15 |
| 148.66.147.22 | attack | C2,WP GET /blogs/wp-includes/wlwmanifest.xml |
2020-07-21 04:46:20 |
| 148.66.142.135 | attackbotsspam | 2020-06-28T04:09:08.549753shield sshd\[26759\]: Invalid user mysql_public from 148.66.142.135 port 39356 2020-06-28T04:09:08.555335shield sshd\[26759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 2020-06-28T04:09:10.824865shield sshd\[26759\]: Failed password for invalid user mysql_public from 148.66.142.135 port 39356 ssh2 2020-06-28T04:12:25.394664shield sshd\[28342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 user=root 2020-06-28T04:12:27.036872shield sshd\[28342\]: Failed password for root from 148.66.142.135 port 34412 ssh2 |
2020-06-28 12:22:58 |
| 148.66.142.135 | attack | May 16 13:02:47 vps46666688 sshd[21456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 May 16 13:02:50 vps46666688 sshd[21456]: Failed password for invalid user tullio from 148.66.142.135 port 48260 ssh2 ... |
2020-05-17 02:56:08 |
| 148.66.142.135 | attack | SSH Brute-Force Attack |
2020-05-13 20:35:41 |
| 148.66.146.44 | attackspam | $f2bV_matches |
2020-04-17 17:29:58 |
| 148.66.147.28 | attack | 148.66.147.28 has been banned for [WebApp Attack] ... |
2020-04-16 15:54:36 |
| 148.66.145.158 | attackspam | $f2bV_matches |
2020-04-15 22:01:04 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
NetRange: 148.66.0.0 - 148.66.31.255
CIDR: 148.66.0.0/19
NetName: APNIC
NetHandle: NET-148-66-0-0-1
Parent: NET148 (NET-148-0-0-0-0)
NetType: Early Registrations, Transferred to APNIC
OriginAS:
Organization: Asia Pacific Network Information Centre (APNIC)
RegDate: 2017-05-22
Updated: 2017-05-22
Ref: https://rdap.arin.net/registry/ip/148.66.0.0
ResourceLink: https://apps.db.ripe.net/db-web-ui/query
ResourceLink: whois://whois.apnic.net
OrgName: Asia Pacific Network Information Centre
OrgId: APNIC
Address: PO Box 3646
City: South Brisbane
StateProv: QLD
PostalCode: 4101
Country: AU
RegDate:
Updated: 2012-01-24
Ref: https://rdap.arin.net/registry/entity/APNIC
ReferralServer: whois://whois.apnic.net
ResourceLink: http://wq.apnic.net/whois-search/static/search.html
OrgTechHandle: AWC12-ARIN
OrgTechName: APNIC Whois Contact
OrgTechPhone: +61 7 3858 3188
OrgTechEmail: search-apnic-not-arin@apnic.net
OrgTechRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
OrgAbuseHandle: AWC12-ARIN
OrgAbuseName: APNIC Whois Contact
OrgAbusePhone: +61 7 3858 3188
OrgAbuseEmail: search-apnic-not-arin@apnic.net
OrgAbuseRef: https://rdap.arin.net/registry/entity/AWC12-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
Found a referral to whois.apnic.net.
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '148.66.0.0 - 148.66.31.255'
% Abuse contact for '148.66.0.0 - 148.66.31.255' is 'abuse@netsec.com'
inetnum: 148.66.0.0 - 148.66.31.255
netname: NETSEC-HK
descr: Netsec Limited
country: HK
org: ORG-NASS1-AP
admin-c: NN541-AP
tech-c: NN541-AP
status: ALLOCATED PORTABLE
abuse-c: AH1002-AP
mnt-by: APNIC-HM
mnt-lower: MAINT-NETSEC-HK
mnt-routes: MAINT-NETSEC-HK
mnt-irt: IRT-HK-NETSEC
last-modified: 2025-03-14T06:45:22Z
source: APNIC
irt: IRT-HK-NETSEC
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
e-mail: noc@netsec.com
abuse-mailbox: abuse@netsec.com
admin-c: NN411-AP
tech-c: NN411-AP
auth: # Filtered
remarks: noc@netsec.com was validated on 2026-05-27
remarks: abuse@netsec.com is invalid
mnt-by: MAINT-HK-NETSEC
last-modified: 2026-10-14T13:11:26Z
source: APNIC
organisation: ORG-NASS1-AP
org-name: Netsec Limited
org-type: LIR
country: HK
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
phone: +852-27511100
fax-no: +852-27511199
e-mail: noc@netsec.com
mnt-ref: APNIC-HM
mnt-by: APNIC-HM
last-modified: 2023-09-05T02:15:31Z
source: APNIC
role: ABUSE HKNETSEC
country: ZZ
address: RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha Wan, Kowloon, Hong Kong
phone: +000000000
e-mail: noc@netsec.com
admin-c: NN411-AP
tech-c: NN411-AP
nic-hdl: AH1002-AP
remarks: Generated from irt object IRT-HK-NETSEC
remarks: noc@netsec.com was validated on 2026-05-27
remarks: abuse@netsec.com is invalid
abuse-mailbox: abuse@netsec.com
mnt-by: APNIC-ABUSE
last-modified: 2026-10-14T13:13:36Z
source: APNIC
role: NETSEC NOC
address: Suite 1007, 10/F, The Bay Hub, 17 Kai Cheung Rd, Kowloon Bay
country: HK
phone: +85227511100
e-mail: noc@netsec.com
admin-c: NN541-AP
tech-c: NN541-AP
nic-hdl: NN541-AP
mnt-by: MAINT-NETSEC-HK
last-modified: 2025-03-14T05:55:40Z
source: APNIC
% Information related to '148.66.14.0/24AS45753'
route: 148.66.14.0/24
origin: AS45753
descr: Netsec Limited
RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
mnt-by: MAINT-NETSEC-HK
last-modified: 2021-11-29T08:46:14Z
source: APNIC
% Information related to '148.66.14.0/24AS963'
route: 148.66.14.0/24
origin: AS963
descr: Netsec Limited
RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
mnt-by: MAINT-NETSEC-HK
last-modified: 2026-06-22T03:20:13Z
source: APNIC
% Information related to '148.66.14.0/24AS9744'
route: 148.66.14.0/24
origin: AS9744
descr: Netsec Limited
RM 2607-08, 26/F, Billion Plaza, 8 Cheung Yue St, Cheung Sha
mnt-by: MAINT-NETSEC-HK
last-modified: 2021-11-29T08:25:39Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.14.58
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1664
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.66.14.58. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026111002 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 11 08:30:28 CST 2026
;; MSG SIZE rcvd: 105b'Host 58.14.66.148.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 58.14.66.148.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 222.186.30.167 | attackbots | Mar 1 16:01:22 firewall sshd[9213]: Failed password for root from 222.186.30.167 port 37508 ssh2 Mar 1 16:01:25 firewall sshd[9213]: Failed password for root from 222.186.30.167 port 37508 ssh2 Mar 1 16:01:27 firewall sshd[9213]: Failed password for root from 222.186.30.167 port 37508 ssh2 ... |
2020-03-02 03:03:04 |
| 178.204.11.223 | attackspam | Attempt to attack host OS, exploiting network vulnerabilities, on 01-03-2020 13:20:10. |
2020-03-02 03:33:35 |
| 218.92.0.145 | attackbots | Mar 1 16:13:28 firewall sshd[9448]: Failed password for root from 218.92.0.145 port 2199 ssh2 Mar 1 16:13:42 firewall sshd[9448]: error: maximum authentication attempts exceeded for root from 218.92.0.145 port 2199 ssh2 [preauth] Mar 1 16:13:42 firewall sshd[9448]: Disconnecting: Too many authentication failures [preauth] ... |
2020-03-02 03:15:40 |
| 5.171.204.193 | attackspam | Email rejected due to spam filtering |
2020-03-02 03:24:20 |
| 221.151.112.217 | attack | Mar 1 19:09:18 mail postfix/smtpd[19034]: warning: unknown[221.151.112.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 1 19:09:26 mail postfix/smtpd[19037]: warning: unknown[221.151.112.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 1 19:09:37 mail postfix/smtpd[19040]: warning: unknown[221.151.112.217]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 |
2020-03-02 03:28:15 |
| 45.95.33.154 | attackbots | Postfix RBL failed |
2020-03-02 03:18:02 |
| 82.64.223.112 | attack | Feb 5 09:28:59 raspberrypi sshd[15754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.64.223.112 |
2020-03-02 03:26:51 |
| 103.10.169.213 | attackbots | Mar 1 18:49:30 game-panel sshd[23401]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.169.213 Mar 1 18:49:32 game-panel sshd[23401]: Failed password for invalid user Michelle from 103.10.169.213 port 38606 ssh2 Mar 1 18:58:38 game-panel sshd[23679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.10.169.213 |
2020-03-02 03:23:46 |
| 91.223.136.247 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-03-02 03:26:36 |
| 217.99.6.111 | attack | Automatic report - Port Scan Attack |
2020-03-02 03:11:21 |
| 121.173.38.95 | attack | SMTP brute force ... |
2020-03-02 03:04:16 |
| 140.143.130.52 | attackspambots | Mar 1 18:45:56 server sshd\[23964\]: Invalid user speech-dispatcher from 140.143.130.52 Mar 1 18:45:56 server sshd\[23964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.130.52 Mar 1 18:45:58 server sshd\[23964\]: Failed password for invalid user speech-dispatcher from 140.143.130.52 port 33494 ssh2 Mar 1 18:48:37 server sshd\[24199\]: Invalid user speech-dispatcher from 140.143.130.52 Mar 1 18:48:38 server sshd\[24199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.130.52 ... |
2020-03-02 03:33:55 |
| 177.154.97.156 | attackspam | Unauthorized connection attempt detected from IP address 177.154.97.156 to port 8080 [J] |
2020-03-02 03:37:05 |
| 185.121.2.7 | attackbotsspam | Email rejected due to spam filtering |
2020-03-02 03:18:53 |
| 115.23.117.222 | attackspambots | Unauthorized connection attempt detected from IP address 115.23.117.222 to port 23 [J] |
2020-03-02 03:38:20 |