JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

142.202.240.66

Recent Activity

Abuse Confidence Score

39% Elevated

15 reports

11 reporters · latest 19 hours ago

ISP: 1GSERVERS, LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS14315
Hostname(s): kennithfreeman.com
Domain Name: 1gservers.com
Country: 🇺🇸 United States of America
City: Phoenix, Arizona

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Example preview

Account required for the enhanced features Log in Sign up

Abuse Reports

Export reports CSV

Total reports

15 from 11 distinct reporters

First reported

October 5th 2021

Most recent report

19 hours ago

Last 60 days

Top reporter locations 🇦🇺 Australia 2 🇨🇦 Canada 1 🇨🇿 Czechia 1

Most common categories Web App Attack 5 SSH 4 Brute-Force 4 Bad Web Bot 2 Hacking 2

Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 Mtippets	2026-11-08 21:15:00 UTC · (19 hours ago)	This IP was identified by Microsoft as attacker infrastructure associated with high-confidence password-spray activity and was observed with a compromised Microsoft 365 account.	Brute-Force
🇫🇷 [email protected]	2026-11-07 14:43:17 UTC · (2 days ago)	Nov 7 15:43:02 mail6 sshd-session[766584]: Failed password for invalid user root from 142.202.240.66 port 19864 ssh2 Nov 7 15:43:05 mail6 sshd-session[766584]: Failed password for invalid user root from 142.202.240.66 port 19864 ssh2 Nov 7 15:43:1 ... show more Nov 7 15:43:02 mail6 sshd-session[766584]: Failed password for invalid user root from 142.202.240.66 port 19864 ssh2 Nov 7 15:43:05 mail6 sshd-session[766584]: Failed password for invalid user root from 142.202.240.66 port 19864 ssh2 Nov 7 15:43:14 mail6 sshd-session[766735]: Invalid user alpine from 142.202.240.66 port 53758 Nov 7 15:43:14 mail6 sshd-session[766735]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.202.240.66 Nov 7 15:43:16 mail6 sshd-session[766735]: Failed password for invalid user alpine from 142.202.240.66 port 53758 ssh2 ... show less	Brute-Force SSH
🇨🇿 gszasz	2026-11-07 14:24:37 UTC · (2 days ago)	2026-11-07T15:24:31.224135+01:00 thor sshd-session[211056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.202.240.66 user=root 2026-11-07T15:24:33.019131+01:00 thor sshd-session[211056]: Failed password ... show more 2026-11-07T15:24:31.224135+01:00 thor sshd-session[211056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.202.240.66 user=root 2026-11-07T15:24:33.019131+01:00 thor sshd-session[211056]: Failed password for root from 142.202.240.66 port 44208 ssh2 2026-11-07T15:24:36.195380+01:00 thor sshd-session[211056]: Failed password for root from 142.202.240.66 port 44208 ssh2 ... show less	Brute-Force SSH
🇩🇪 Callum	2026-11-06 21:22:41 UTC · (2 days ago)	probing for exposed files and admin pages: 11 attempts within 1 minutes, seen by web server log	Web App Attack
🇦🇺 afleventoffice.com.au	2026-10-25 22:35:29 UTC · (2 weeks ago)	GET /wp-json/wc/v3/products?per_page=1 HTTP/1.1	Web App Attack
Anonymous	2026-10-23 21:19:33 UTC · (2 weeks ago)	Malicious activity detected	Hacking Web App Attack
🇺🇦 URAN Publishing Service	2026-10-21 04:50:22 UTC · (2 weeks ago)	[21/Oct/2026:07:50:21 +0300] -- 142.202.240.66 Ban reason: User-Agent curl/	Bad Web Bot Web App Attack
🇳🇱 Kolo	2026-10-12 23:17:08 UTC · (3 weeks ago)	WhoTouchedMySSH honeypot SSH bruteforce from 142.202.240.66 (Phoenix, US)	Brute-Force SSH
🇨🇦 dpinse	2026-10-04 09:22:27 UTC · (1 month ago)	Honeypot [honeypot-ca-sensor1]: Brute-force attack detected on 22/SSH • Credential used: admin:admin123 • Number of login attempts: 1 • Client: SSH-2.0-Go	SSH
🇵🇱 Budyn	2026-09-27 18:33:45 UTC · (1 month ago)	Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token: akf9s74n5eldbzbpzbzf5lt45 \| Client Tool: Boto3/1.34.46 md/Botocore#1.34.46 ua/2.0 os/linux#6.8.0-142-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl# ... show more Budyn SOC Canary Trap: AWS Key Compromised! \| Memo: AWS_Token_12 \| Action: AWS API Call \| Token: akf9s74n5eldbzbpzbzf5lt45 \| Client Tool: Boto3/1.34.46 md/Botocore#1.34.46 ua/2.0 os/linux#6.8.0-142-generic md/arch#x86_64 lang/python#3.12.3 md/pyimpl#CPython cfg/retry-mode#legacy Botocore/1.34.46 show less	Hacking Bad Web Bot Web App Attack
🇳🇱 Savvii	2021-10-11 09:21:13 UTC · (5 years ago)	20 attempts against mh-misbehave-ban on comet	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2021-10-09 23:49:22 UTC · (5 years ago)	20 attempts against mh-misbehave-ban on pluto	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2021-10-09 00:49:32 UTC · (5 years ago)	20 attempts against mh-misbehave-ban on wave	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2021-10-07 14:30:48 UTC · (5 years ago)	20 attempts against mh-misbehave-ban on pluto	Brute-Force Bad Web Bot Web App Attack
🇳🇱 Savvii	2021-10-05 23:12:38 UTC · (5 years ago)	20 attempts against mh-misbehave-ban on ice	Brute-Force Bad Web Bot Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇷🇺 212.55.100.172

🇧🇷 201.71.18.250

🇳🇱 192.253.248.223

🇦🇷 181.98.129.244

🇫🇷 172.226.208.40

🇰🇷 121.154.234.174

🇭🇰 119.28.84.193

🇬🇧 90.200.157.3

🇨🇦 69.156.97.181

🇨🇦 45.198.224.85

🇳🇱 45.156.128.92

🇨🇳 27.18.82.238

🇨🇳 27.10.16.75

🇺🇸 205.210.31.16

🇵🇱 172.64.200.195

🇨🇳 115.190.181.18

🇳🇱 77.239.124.75

🇺🇸 24.199.88.124

🇺🇸 24.144.54.44

🇫🇮 2.27.14.71