148.66.145.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.66.145.158	attackspam	$f2bV_matches	2020-04-15 22:01:04
148.66.145.30	attack	Attempt to hack Wordpress Login, XMLRPC or other login	2020-04-05 10:08:25
148.66.145.133	attack	xmlrpc attack	2020-03-31 22:34:24
148.66.145.155	attack	xmlrpc attack	2020-03-23 08:18:59
148.66.145.42	attackspam	Wordpress_xmlrpc_attack	2020-03-22 22:45:09
148.66.145.152	attackbots	xmlrpc attack	2020-03-21 05:04:53
148.66.145.2	attackbots	Mar 16 23:36:07 mercury wordpress(www.learnargentinianspanish.com)[1450]: XML-RPC authentication failure for josh from 148.66.145.2 ...	2020-03-17 09:40:54
148.66.145.28	attackspam	Automatic report - XMLRPC Attack	2020-02-15 15:26:58
148.66.145.146	attackspambots	SCHUETZENMUSIKANTEN.DE 148.66.145.146 \[12/Nov/2019:07:28:50 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/60.0.3112.113 Safari/537.36" schuetzenmusikanten.de 148.66.145.146 \[12/Nov/2019:07:28:50 +0100\] "POST /xmlrpc.php HTTP/1.1" 200 4285 "-" "Mozilla/5.0 $Windows NT 10.0\; Win64\; x64$ AppleWebKit/537.36 $KHTML, like Gecko$ Chrome/60.0.3112.113 Safari/537.36"	2019-11-12 17:17:24
148.66.145.28	attackspambots	Automatic report - XMLRPC Attack	2019-10-29 20:23:24
148.66.145.165	attackspambots	148.66.145.165 has been banned for [WebApp Attack] ...	2019-10-26 18:28:54
148.66.145.25	attackbots	Automatic report - Banned IP Access	2019-10-20 23:50:09
148.66.145.134	attackspam	miraklein.com 148.66.145.134 \[02/Oct/2019:23:27:24 +0200\] "POST /xmlrpc.php HTTP/1.1" 301 439 "-" "WordPress" miraniessen.de 148.66.145.134 \[02/Oct/2019:23:27:25 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4214 "-" "WordPress"	2019-10-03 07:10:28
148.66.145.133	attackbots	xmlrpc attack	2019-10-03 01:04:36
148.66.145.133	attackbotsspam	fail2ban honeypot	2019-10-01 07:28:35

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.145.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50039
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.66.145.11.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 14:31:19 CST 2022
;; MSG SIZE  rcvd: 106

Host info

11.145.66.148.in-addr.arpa domain name pointer sg3plcpnl0100.prod.sin3.secureserver.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.145.66.148.in-addr.arpa	name = sg3plcpnl0100.prod.sin3.secureserver.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.175	attack	Aug 5 20:56:06 v22019058497090703 sshd[2281]: Failed password for root from 218.92.0.175 port 27821 ssh2 Aug 5 20:56:09 v22019058497090703 sshd[2281]: Failed password for root from 218.92.0.175 port 27821 ssh2 ...	2020-08-06 03:04:39
179.217.213.227	attack	leo_www	2020-08-06 02:53:56
182.150.44.41	attack	Aug 5 19:37:18 Ubuntu-1404-trusty-64-minimal sshd\[32558\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.44.41 user=root Aug 5 19:37:20 Ubuntu-1404-trusty-64-minimal sshd\[32558\]: Failed password for root from 182.150.44.41 port 54466 ssh2 Aug 5 19:57:16 Ubuntu-1404-trusty-64-minimal sshd\[10509\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.44.41 user=root Aug 5 19:57:18 Ubuntu-1404-trusty-64-minimal sshd\[10509\]: Failed password for root from 182.150.44.41 port 36698 ssh2 Aug 5 20:02:19 Ubuntu-1404-trusty-64-minimal sshd\[16261\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.150.44.41 user=root	2020-08-06 02:52:41
54.153.223.6	attackbotsspam	54.153.223.6 - - [05/Aug/2020:16:23:01 +0200] "GET /wp-login.php HTTP/1.1" 200 6310 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.153.223.6 - - [05/Aug/2020:16:23:03 +0200] "POST /wp-login.php HTTP/1.1" 200 6561 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 54.153.223.6 - - [05/Aug/2020:16:23:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-06 03:03:59
184.105.247.220	attack	TCP (SYN) 184.105.247.220:39571 -> port 23, len 44	2020-08-06 03:21:18
95.71.188.17	attackspam	1596629567 - 08/05/2020 14:12:47 Host: 95.71.188.17/95.71.188.17 Port: 445 TCP Blocked	2020-08-06 03:00:18
95.65.124.252	attackbots	proto=tcp . spt=43428 . dpt=25 . Found on Blocklist de (64)	2020-08-06 03:11:31
218.92.0.171	attackbots	2020-08-05T21:16:04.319633ns386461 sshd\[7829\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171 user=root 2020-08-05T21:16:06.794570ns386461 sshd\[7829\]: Failed password for root from 218.92.0.171 port 57893 ssh2 2020-08-05T21:16:10.569393ns386461 sshd\[7829\]: Failed password for root from 218.92.0.171 port 57893 ssh2 2020-08-05T21:16:13.564655ns386461 sshd\[7829\]: Failed password for root from 218.92.0.171 port 57893 ssh2 2020-08-05T21:16:16.642489ns386461 sshd\[7829\]: Failed password for root from 218.92.0.171 port 57893 ssh2 ...	2020-08-06 03:19:24
5.188.210.46	attackspam	[portscan] Port scan	2020-08-06 03:04:11
104.131.55.92	attackspam	Aug 5 14:59:39 NPSTNNYC01T sshd[12561]: Failed password for root from 104.131.55.92 port 54850 ssh2 Aug 5 15:03:28 NPSTNNYC01T sshd[12909]: Failed password for root from 104.131.55.92 port 59794 ssh2 ...	2020-08-06 03:12:44
78.138.147.186	attack	1596629555 - 08/05/2020 14:12:35 Host: 78.138.147.186/78.138.147.186 Port: 445 TCP Blocked	2020-08-06 03:06:43
180.76.158.224	attack	Aug 5 20:45:04 mout sshd[12998]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.158.224 user=root Aug 5 20:45:06 mout sshd[12998]: Failed password for root from 180.76.158.224 port 33664 ssh2	2020-08-06 03:01:44
187.72.53.89	attackbots	Aug 5 04:59:14 pixelmemory sshd[2412479]: Failed password for root from 187.72.53.89 port 54132 ssh2 Aug 5 05:05:37 pixelmemory sshd[2431387]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.53.89 user=root Aug 5 05:05:40 pixelmemory sshd[2431387]: Failed password for root from 187.72.53.89 port 37170 ssh2 Aug 5 05:11:55 pixelmemory sshd[2449840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.72.53.89 user=root Aug 5 05:11:57 pixelmemory sshd[2449840]: Failed password for root from 187.72.53.89 port 48444 ssh2 ...	2020-08-06 03:27:33
185.97.156.25	attack	Fail2Ban - SSH Bruteforce Attempt	2020-08-06 03:15:22
222.186.30.112	attackspam	Aug 5 21:27:30 piServer sshd[24738]: Failed password for root from 222.186.30.112 port 30840 ssh2 Aug 5 21:27:34 piServer sshd[24738]: Failed password for root from 222.186.30.112 port 30840 ssh2 Aug 5 21:27:37 piServer sshd[24738]: Failed password for root from 222.186.30.112 port 30840 ssh2 ...	2020-08-06 03:28:52

Recently Reported IPs

148.66.145.40	148.66.143.69	148.66.146.24	148.66.145.38
148.66.154.121	148.66.146.32	148.66.155.252	148.66.154.81
148.66.156.211	148.66.153.204	148.66.159.175	148.66.154.231
148.66.154.151	148.66.158.89	148.66.212.61	148.66.230.228
148.66.156.180	148.66.158.83	148.66.230.189	148.66.230.63