This IP address has been reported a total of
38
times from
29 distinct
sources.
148.230.70.139 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
SSH brute force — 3 tentatives, user: worldlab
2026-06-18T15:43:04.385024+02:00 vps-de5e3fcc sshd-se ...
show moreSSH brute force — 3 tentatives, user: worldlab
2026-06-18T15:43:04.385024+02:00 vps-de5e3fcc sshd-session[451773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.230.70.139
2026-06-18T15:43:06.567047+02:00 vps-de5e3fcc sshd-session[451773]: Failed password for invalid user worldlab from 148.230.70.139 port 57564 ssh2
2026-06-18T16:11:15.836039+02:00 vps-de5e3fcc sshd-session[451916]: Invalid user worldlab from 148.230.70.139 port 42778
show less
148.230.70.139 (DE/Germany/sportx.ae), 5 distributed sshd attacks on account [root] in the last 3600 ...
show more148.230.70.139 (DE/Germany/sportx.ae), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_DISTATTACK; Logs: Jun 18 06:49:44 15066 sshd[8456]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=148.230.70.139 user=root
Jun 18 06:49:46 15066 sshd[8456]: Failed password for root from 148.230.70.139 port 51146 ssh2
Jun 18 06:44:40 15066 sshd[5732]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.84.240 user=root
Jun 18 06:28:42 15066 sshd[29281]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.23.84.240 user=root
Jun 18 06:28:45 15066 sshd[29281]: Failed password for root from 181.23.84.240 port 39417 ssh2
IP Addresses Blocked:
show less
Rule : MySQL
Rule: MySQL
Event: MySQL
Access denied for user 'oneprofile'@'148.230.70.139' (using ...
show moreRule : MySQL
Rule: MySQL
Event: MySQL
Access denied for user 'oneprofile'@'148.230.70.139' (using password: YES)
show less
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 148.230.70.139 (DE/Germany/sportx.ae ...
show moreLF_MODSEC: (mod_security) mod_security (id:949110) triggered by 148.230.70.139 (DE/Germany/sportx.ae): 2 in the last 3600 secs
show less
[MonJun1512:03:10.8410032026][security2:error][pid4004241:tid4004373][client148.230.70.139:0]ModSecu ...
show more[MonJun1512:03:10.8410032026][security2:error][pid4004241:tid4004373][client148.230.70.139:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"mjgold.ch\"][uri\"/functions/.env\"][unique_id\"ai_N3kyGx7UKdA1Nq0uKpwAAARU\"]
show less