148.66.142.242

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.66.142.135	attackbotsspam	Port Scan detected from 148.66.142.135 (SG/Singapore/-/Singapore (Pioneer)/-). 4 hits in the last 115 seconds	2020-08-29 04:54:49
148.66.142.135	attack	Aug 25 01:48:04 NPSTNNYC01T sshd[3831]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 Aug 25 01:48:06 NPSTNNYC01T sshd[3831]: Failed password for invalid user quadir from 148.66.142.135 port 44014 ssh2 Aug 25 01:52:57 NPSTNNYC01T sshd[4215]: Failed password for root from 148.66.142.135 port 53756 ssh2 ...	2020-08-25 14:11:09
148.66.142.174	attackspambots	Aug 11 15:42:57 b-vps wordpress(gpfans.cz)[30596]: Authentication attempt for unknown user buchtic from 148.66.142.174 ...	2020-08-11 22:56:38
148.66.142.174	attackbotsspam	Automatic report - Banned IP Access	2020-08-06 12:09:18
148.66.142.174	attackspam	148.66.142.174 - - [01/Aug/2020:05:21:25 +0100] "POST /wp-login.php HTTP/1.1" 200 1905 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:27 +0100] "POST /wp-login.php HTTP/1.1" 200 1954 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 148.66.142.174 - - [01/Aug/2020:05:21:29 +0100] "POST /wp-login.php HTTP/1.1" 200 1949 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-01 18:25:15
148.66.142.135	attackbotsspam	2020-06-28T04:09:08.549753shield sshd\[26759\]: Invalid user mysql_public from 148.66.142.135 port 39356 2020-06-28T04:09:08.555335shield sshd\[26759\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 2020-06-28T04:09:10.824865shield sshd\[26759\]: Failed password for invalid user mysql_public from 148.66.142.135 port 39356 ssh2 2020-06-28T04:12:25.394664shield sshd\[28342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 user=root 2020-06-28T04:12:27.036872shield sshd\[28342\]: Failed password for root from 148.66.142.135 port 34412 ssh2	2020-06-28 12:22:58
148.66.142.135	attack	May 16 13:02:47 vps46666688 sshd[21456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.66.142.135 May 16 13:02:50 vps46666688 sshd[21456]: Failed password for invalid user tullio from 148.66.142.135 port 48260 ssh2 ...	2020-05-17 02:56:08
148.66.142.135	attack	SSH Brute-Force Attack	2020-05-13 20:35:41
148.66.142.135	attackbotsspam	Unauthorized connection attempt detected from IP address 148.66.142.135 to port 2220 [J]	2020-02-05 02:51:00
148.66.142.135	attackspam	...	2020-02-01 23:58:07
148.66.142.135	attackspambots	...	2020-01-19 21:09:26
148.66.142.1	attackbots	SSH login attempts with user root at 2020-01-02.	2020-01-03 02:38:16
148.66.142.135	attackbotsspam	Automatic report - Banned IP Access	2019-12-25 21:45:38
148.66.142.135	attack	Dec 24 13:21:59 XXXXXX sshd[26433]: Invalid user shell from 148.66.142.135 port 45986	2019-12-24 22:40:44
148.66.142.161	attackbotsspam	xmlrpc attack	2019-12-02 03:10:20

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.142.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4631
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.66.142.242.			IN	A

;; AUTHORITY SECTION:
.			243	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 18:21:43 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 242.142.66.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.142.66.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.141.144.137	attackbots	Automatic report - Banned IP Access	2020-10-08 20:03:01
137.250.3.18	attackbotsspam	2020-10-08T01:31:25.694025matrix.arvenenaske.de sshd[214215]: Failed password for r.r from 137.250.3.18 port 51306 ssh2 2020-10-08T01:34:41.632111matrix.arvenenaske.de sshd[214237]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.250.3.18 user=r.r 2020-10-08T01:34:43.881406matrix.arvenenaske.de sshd[214237]: Failed password for r.r from 137.250.3.18 port 57982 ssh2 2020-10-08T01:38:09.852813matrix.arvenenaske.de sshd[214255]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=137.250.3.18 user=r.r 2020-10-08T01:38:11.655630matrix.arvenenaske.de sshd[214255]: Failed password for r.r from 137.250.3.18 port 36460 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=137.250.3.18	2020-10-08 19:44:33
163.172.197.175	attack	Time: Thu Oct 8 07:44:27 2020 -0400 IP: 163.172.197.175 (FR/France/smtp3.club) Failures: 20 (WordPressBruteForcePOST) Interval: 3600 seconds Blocked: Permanent Block	2020-10-08 20:08:55
141.212.123.188	attack	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: researchscan698.eecs.umich.edu.	2020-10-08 19:55:32
104.248.141.235	attack	CMS (WordPress or Joomla) login attempt.	2020-10-08 20:14:25
59.63.199.239	attackbots	20/10/7@16:40:20: FAIL: Alarm-Network address from=59.63.199.239 ...	2020-10-08 19:55:49
171.246.61.140	attack	Unauthorized connection attempt detected from IP address 171.246.61.140 to port 23 [T]	2020-10-08 20:02:38
185.14.192.136	attackspam	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-08 20:04:39
124.235.118.14	attack	TCP (SYN) 124.235.118.14:50612 -> port 6379, len 44	2020-10-08 20:00:21
87.251.74.39	attackbotsspam	400 BAD REQUEST	2020-10-08 19:51:39
188.246.224.126	attack	Found on Alienvault / proto=6 . srcport=43522 . dstport=1000 . (154)	2020-10-08 20:06:15
139.189.245.98	attackbotsspam	Telnet Server BruteForce Attack	2020-10-08 20:16:38
141.98.216.154	attackspambots	[2020-10-08 07:50:53] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:60103' - Wrong password [2020-10-08 07:50:53] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T07:50:53.708-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8008",SessionID="0x7f22f840cf98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216.154/60103",Challenge="5c7ee987",ReceivedChallenge="5c7ee987",ReceivedHash="2c8adfcd55124403d7d2412f0fa847ba" [2020-10-08 07:52:55] NOTICE[1182] chan_sip.c: Registration from '' failed for '141.98.216.154:59724' - Wrong password [2020-10-08 07:52:55] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-08T07:52:55.139-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8009",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/141.98.216 ...	2020-10-08 20:19:50
37.191.198.12	attackspam	SS5,Magento Bruteforce Login Attack POST /index.php/admin/	2020-10-08 20:18:27
112.85.42.120	attackbotsspam	Oct 8 13:43:14 sso sshd[8680]: Failed password for root from 112.85.42.120 port 40502 ssh2 Oct 8 13:43:24 sso sshd[8680]: Failed password for root from 112.85.42.120 port 40502 ssh2 ...	2020-10-08 20:05:08

Recently Reported IPs

148.66.152.49	148.66.138.122	148.66.157.243	148.66.155.123
148.66.159.80	148.66.152.62	148.66.84.46	148.67.185.116
148.72.118.143	148.72.101.47	148.72.103.83	148.72.119.229
148.69.88.44	148.72.170.135	148.72.155.221	148.72.177.16
148.72.117.75	148.72.193.58	148.72.194.54	148.72.196.103