148.66.157.2 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
148.66.157.84	attackspambots	Automatic report - XMLRPC Attack	2020-07-08 00:40:37
148.66.157.84	attackbotsspam	LGS,WP GET /newsite/wp-includes/wlwmanifest.xml	2020-06-01 17:51:24
148.66.157.84	attackspambots	Automatic report - XMLRPC Attack	2020-01-11 20:19:08
148.66.157.84	attackspambots	Automatic report - XMLRPC Attack	2019-11-16 02:37:47
148.66.157.84	attackspam	Automatic report - XMLRPC Attack	2019-11-09 21:19:13
148.66.157.162	attack	Automatic report - Banned IP Access	2019-08-04 07:56:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 148.66.157.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34347
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;148.66.157.2.			IN	A

;; AUTHORITY SECTION:
.			292	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 12:44:06 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 2.157.66.148.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.157.66.148.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.83.132.45	attack	[2020-08-05 06:49:00] NOTICE[1248] chan_sip.c: Registration from '"1253"' failed for '212.83.132.45:9343' - Wrong password [2020-08-05 06:49:00] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T06:49:00.946-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1253",SessionID="0x7f27204a5448",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.132.45/9343",Challenge="65670887",ReceivedChallenge="65670887",ReceivedHash="b107c4f082e535103082a78dfe55e326" [2020-08-05 06:49:27] NOTICE[1248] chan_sip.c: Registration from '"1259"' failed for '212.83.132.45:9652' - Wrong password [2020-08-05 06:49:27] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T06:49:27.325-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1259",SessionID="0x7f27200a09d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212. ...	2020-08-05 19:07:39
39.107.74.87	attackspam	Unwanted checking 80 or 443 port ...	2020-08-05 19:17:53
212.70.149.35	attack	2020-08-05 12:35:21 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data 2020-08-05 12:35:22 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data 2020-08-05 12:39:50 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=heping@no-server.de\) 2020-08-05 12:39:54 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=cs01@no-server.de\) 2020-08-05 12:40:06 dovecot_login authenticator failed for \(User\) \[212.70.149.35\]: 535 Incorrect authentication data \(set_id=heping@no-server.de\) ...	2020-08-05 18:51:14
49.207.185.52	attackbotsspam	Aug 5 09:37:44 ws26vmsma01 sshd[122174]: Failed password for root from 49.207.185.52 port 33446 ssh2 ...	2020-08-05 19:01:54
145.239.80.175	attackspambots	postfix	2020-08-05 18:42:17
45.129.33.5	attackspam	TCP (SYN) 45.129.33.5:51314 -> port 4880, len 44	2020-08-05 18:46:03
87.251.70.71	attackspam	Unauthorized connection attempt detected from IP address 87.251.70.71 to port 11000 [T]	2020-08-05 19:19:53
118.89.170.55	attackbotsspam	malicious Brute-Force reported by https://www.patrick-binder.de ...	2020-08-05 19:13:13
162.243.128.224	attackbots	Port scan: Attack repeated for 24 hours	2020-08-05 19:20:43
51.89.136.104	attack	frenzy	2020-08-05 19:19:01
45.134.179.102	attack	Aug 5 11:48:50 [host] kernel: [2288035.695080] [U Aug 5 11:55:40 [host] kernel: [2288445.309235] [U Aug 5 11:56:01 [host] kernel: [2288466.611495] [U Aug 5 11:58:38 [host] kernel: [2288623.480255] [U Aug 5 12:01:28 [host] kernel: [2288792.795225] [U Aug 5 12:02:25 [host] kernel: [2288850.302585] [U	2020-08-05 19:05:42
118.89.153.32	attack	Aug 4 08:02:06 *a sshd[14497]: Failed password for r.r from 118.89.153.32 port 54984 ssh2 Aug 4 08:04:50 a sshd[14647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.153.32 user=r.r Aug 4 08:04:51 **a sshd[14647]: Failed password for r.r from 118.89.153.32 port 55778 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=118.89.153.32	2020-08-05 18:43:54
165.22.228.147	attackspambots	retro-gamer.club 165.22.228.147 [31/Jul/2020:12:04:17 +0200] "POST /wp-login.php HTTP/1.1" 200 6062 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" retro-gamer.club 165.22.228.147 [31/Jul/2020:12:04:19 +0200] "POST /wp-login.php HTTP/1.1" 200 6032 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-05 18:38:36
218.92.0.148	attack	Aug 5 12:53:03 santamaria sshd\[11028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root Aug 5 12:53:05 santamaria sshd\[11028\]: Failed password for root from 218.92.0.148 port 34620 ssh2 Aug 5 12:53:11 santamaria sshd\[11030\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.148 user=root ...	2020-08-05 18:54:16
164.132.48.179	attack	www.fahrlehrerfortbildung-hessen.de 164.132.48.179 [01/Aug/2020:18:53:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6114 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.fahrlehrerfortbildung-hessen.de 164.132.48.179 [01/Aug/2020:18:53:52 +0200] "POST /wp-login.php HTTP/1.1" 200 6109 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.fahrlehrerfortbildung-hessen.de 164.132.48.179 [01/Aug/2020:18:53:52 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4107 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-05 18:46:25

Recently Reported IPs

148.66.157.181	148.66.158.178	148.66.158.189	148.66.158.42
148.66.158.155	148.66.158.95	148.66.157.249	148.66.159.191
148.66.196.120	148.66.230.217	148.66.159.231	148.66.54.130
148.66.196.157	148.66.54.66	148.66.65.110	148.66.75.8
148.66.71.100	148.69.168.34	148.69.168.36	148.69.168.37