City: unknown
Region: unknown
Country: Singapore
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 148.66.142.135 | attackbotsspam | *Port Scan* detected from 148.66.142.135 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 115 seconds |
2020-08-29 04:54:49 |
| 148.66.142.135 | attack | Aug 25 01:48:04 NPSTNNYC01T sshd[3831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 Aug 25 01:48:06 NPSTNNYC01T sshd[3831]: Failed password for invalid user quadir from 148.66.142.135 port 44014 ssh2 Aug 25 01:52:57 NPSTNNYC01T sshd[4215]: Failed password for root from 148.66.142.135 port 53756 ssh2 ... |
2020-08-25 14:11:09 |
| 148.66.142.174 | attackspambots | Aug 11 15:42:57 b-vps wordpress(gpfans.cz)[30596]: Authentication attempt for unknown user buchtic from 148.66.142.174 ... |
2020-08-11 22:56:38 |
| 148.66.142.174 | attackbotsspam | Automatic report - Banned IP Access |
2020-08-06 12:09:18 |
| 148.66.142.174 | attackspam | 148.66.142.174 - - [01/Aug/2020:05:21:25 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:27 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-08-01 18:25:15 |
| 148.66.142.135 | attackbotsspam | 2020-06-28T04:09:08.549753shield sshd\[26759\]: Invalid user mysql_public from 148.66.142.135 port 39356 2020-06-28T04:09:08.555335shield sshd\[26759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 2020-06-28T04:09:10.824865shield sshd\[26759\]: Failed password for invalid user mysql_public from 148.66.142.135 port 39356 ssh2 2020-06-28T04:12:25.394664shield sshd\[28342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 user=root 2020-06-28T04:12:27.036872shield sshd\[28342\]: Failed password for root from 148.66.142.135 port 34412 ssh2 |
2020-06-28 12:22:58 |
| 148.66.142.135 | attack | May 16 13:02:47 vps46666688 sshd[21456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 May 16 13:02:50 vps46666688 sshd[21456]: Failed password for invalid user tullio from 148.66.142.135 port 48260 ssh2 ... |
2020-05-17 02:56:08 |
| 148.66.142.135 | attack | SSH Brute-Force Attack |
2020-05-13 20:35:41 |
| 148.66.142.135 | attackbotsspam | Unauthorized connection attempt detected from IP address 148.66.142.135 to port 2220 [J] |
2020-02-05 02:51:00 |
| 148.66.142.135 | attackspam | ... |
2020-02-01 23:58:07 |
| 148.66.142.135 | attackspambots | ... |
2020-01-19 21:09:26 |
| 148.66.142.1 | attackbots | SSH login attempts with user root at 2020-01-02. |
2020-01-03 02:38:16 |
| 148.66.142.135 | attackbotsspam | Automatic report - Banned IP Access |
2019-12-25 21:45:38 |
| 148.66.142.135 | attack | Dec 24 13:21:59 XXXXXX sshd[26433]: Invalid user shell from 148.66.142.135 port 45986 |
2019-12-24 22:40:44 |
| 148.66.142.161 | attackbotsspam | xmlrpc attack |
2019-12-02 03:10:20 |
b
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.142.141
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 45953
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;148.66.142.141. IN A
;; AUTHORITY SECTION:
. 536 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400
;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:31:16 CST 2022
;; MSG SIZE rcvd: 107
Host 141.142.66.148.in-addr.arpa. not found: 3(NXDOMAIN)
Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 141.142.66.148.in-addr.arpa: NXDOMAIN
| IP | Type | Details | Datetime |
|---|---|---|---|
| 178.62.9.122 | attack | ENG,DEF GET /wp-login.php |
2020-09-04 06:47:12 |
| 186.22.74.193 | attackspam | Sep 3 18:48:08 mellenthin postfix/smtpd[19006]: NOQUEUE: reject: RCPT from unknown[186.22.74.193]: 554 5.7.1 Service unavailable; Client host [186.22.74.193] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/186.22.74.193; from= |
2020-09-04 07:08:32 |
| 167.99.77.94 | attackbots | Sep 3 20:30:24 markkoudstaal sshd[22834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 Sep 3 20:30:25 markkoudstaal sshd[22834]: Failed password for invalid user test from 167.99.77.94 port 43122 ssh2 Sep 3 20:33:27 markkoudstaal sshd[23662]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.99.77.94 ... |
2020-09-04 06:31:29 |
| 154.149.94.59 | attack | Sep 3 18:48:14 debian64 sshd[10457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=154.149.94.59 Sep 3 18:48:16 debian64 sshd[10457]: Failed password for invalid user ubnt from 154.149.94.59 port 57600 ssh2 ... |
2020-09-04 07:03:38 |
| 98.146.212.146 | attack | Sep 3 17:51:48 ws26vmsma01 sshd[134929]: Failed password for root from 98.146.212.146 port 45454 ssh2 ... |
2020-09-04 06:40:27 |
| 112.49.38.7 | attackspambots | $f2bV_matches |
2020-09-04 07:06:32 |
| 85.62.1.30 | attack | 20/9/3@15:33:24: FAIL: Alarm-Network address from=85.62.1.30 20/9/3@15:33:24: FAIL: Alarm-Network address from=85.62.1.30 ... |
2020-09-04 06:44:05 |
| 109.66.126.241 | attackbots | Lines containing failures of 109.66.126.241 Sep 2 10:11:23 omfg postfix/smtpd[17776]: connect from bzq-109-66-126-241.red.bezeqint.net[109.66.126.241] Sep x@x Sep 2 10:11:24 omfg postfix/smtpd[17776]: lost connection after DATA from bzq-109-66-126-241.red.bezeqint.net[109.66.126.241] Sep 2 10:11:24 omfg postfix/smtpd[17776]: disconnect from bzq-109-66-126-241.red.bezeqint.net[109.66.126.241] ehlo=1 mail=1 rcpt=0/1 data=0/1 commands=2/4 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.66.126.241 |
2020-09-04 06:31:49 |
| 37.49.229.237 | attack | [2020-09-03 18:47:54] NOTICE[1194][C-000000cc] chan_sip.c: Call from '' (37.49.229.237:5412) to extension '00447537174009' rejected because extension not found in context 'public'. [2020-09-03 18:47:54] SECURITY[1233] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-09-03T18:47:54.364-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="00447537174009",SessionID="0x7f2ddc38f978",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.229.237/5412",ACLName="no_extension_match" [2020-09-03 18:53:04] NOTICE[1194][C-000000d0] chan_sip.c: Call from '' (37.49.229.237:7260) to extension '00447537174009' rejected because extension not found in context 'public'. ... |
2020-09-04 07:04:05 |
| 62.193.151.59 | attackspambots | Sep 3 11:48:52 mailman postfix/smtpd[14239]: warning: unknown[62.193.151.59]: SASL PLAIN authentication failed: authentication failure |
2020-09-04 06:32:09 |
| 115.73.247.7 | attack | Automatic report - Port Scan Attack |
2020-09-04 07:09:36 |
| 220.238.226.51 | attack | Port Scan detected! ... |
2020-09-04 06:47:33 |
| 115.76.48.148 | attack | Sep 3 18:48:34 mellenthin postfix/smtpd[20954]: NOQUEUE: reject: RCPT from unknown[115.76.48.148]: 554 5.7.1 Service unavailable; Client host [115.76.48.148] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/115.76.48.148; from= |
2020-09-04 06:49:27 |
| 51.158.107.168 | attackbotsspam | SSH Invalid Login |
2020-09-04 06:36:09 |
| 185.220.102.253 | attackspambots | 5x Failed Password |
2020-09-04 06:47:54 |