66.42.16.221 - IPInfo

基本信息:

城市(city): Orlando

省份(region): Florida

国家(country): United States

运营商(isp): Telastic

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23 [J]	2020-01-30 20:51:15
attackbots	Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23	2020-01-06 02:05:57
attackbotsspam	Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23	2019-12-30 03:40:49

类型

评论内容

时间

attackspam

Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23 [J]

2020-01-30 20:51:15

attackbots

Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23

2020-01-06 02:05:57

attackbotsspam

Unauthorized connection attempt detected from IP address 66.42.16.221 to port 23

2019-12-30 03:40:49

相同子网IP讨论:

IP	类型	评论内容	时间
66.42.16.239	attackspam	Unauthorized connection attempt detected from IP address 66.42.16.239 to port 2323	2020-01-05 23:26:14
66.42.16.239	attackspam	Unauthorized connection attempt detected from IP address 66.42.16.239 to port 23	2019-12-30 03:11:28

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.42.16.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25508
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.42.16.221.			IN	A

;; AUTHORITY SECTION:
.			241	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019122901 1800 900 604800 86400

;; Query time: 116 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 30 03:40:46 CST 2019
;; MSG SIZE  rcvd: 116

HOST信息:

Host 221.16.42.66.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 221.16.42.66.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
178.33.130.196	attackbotsspam	Jul 10 21:00:21 ArkNodeAT sshd\[29692\]: Invalid user emerson from 178.33.130.196 Jul 10 21:00:21 ArkNodeAT sshd\[29692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.33.130.196 Jul 10 21:00:23 ArkNodeAT sshd\[29692\]: Failed password for invalid user emerson from 178.33.130.196 port 45148 ssh2	2019-07-11 10:35:31
77.247.110.58	attackbots	5060/udp 5060/udp 5060/udp... [2019-05-18/07-11]361pkt,1pt.(udp)	2019-07-11 11:13:28
170.82.7.250	attack	Port scan and direct access per IP instead of hostname	2019-07-11 10:33:30
119.29.85.83	attack	Multiple failed RDP login attempts	2019-07-11 11:02:25
198.108.67.78	attack	Wed 10 15:24:15 2568/tcp	2019-07-11 11:08:01
185.53.88.16	attack	firewall-block, port(s): 5060/udp	2019-07-11 10:33:06
188.131.163.59	attack	2019-07-10T22:12:51.987785cavecanem sshd[17647]: Invalid user admin from 188.131.163.59 port 41618 2019-07-10T22:12:51.990277cavecanem sshd[17647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.163.59 2019-07-10T22:12:51.987785cavecanem sshd[17647]: Invalid user admin from 188.131.163.59 port 41618 2019-07-10T22:12:54.165846cavecanem sshd[17647]: Failed password for invalid user admin from 188.131.163.59 port 41618 ssh2 2019-07-10T22:15:00.474525cavecanem sshd[18296]: Invalid user fox from 188.131.163.59 port 33910 2019-07-10T22:15:00.477175cavecanem sshd[18296]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.163.59 2019-07-10T22:15:00.474525cavecanem sshd[18296]: Invalid user fox from 188.131.163.59 port 33910 2019-07-10T22:15:02.361093cavecanem sshd[18296]: Failed password for invalid user fox from 188.131.163.59 port 33910 ssh2 2019-07-10T22:16:36.981731cavecanem sshd[18768]: Invalid u ...	2019-07-11 10:54:10
186.185.73.250	attack	Unauthorized connection attempt from IP address 186.185.73.250 on Port 445(SMB)	2019-07-11 10:27:52
101.89.145.133	attack	Jul 10 21:48:06 * sshd[19571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.89.145.133 Jul 10 21:48:08 * sshd[19571]: Failed password for invalid user maria from 101.89.145.133 port 53140 ssh2	2019-07-11 11:07:17
202.138.226.145	attackspam	Unauthorized connection attempt from IP address 202.138.226.145 on Port 445(SMB)	2019-07-11 11:09:39
153.35.54.225	attackspambots	2019-07-10T22:32:53.105385hub.schaetter.us sshd\[4852\]: Invalid user admin from 153.35.54.225 2019-07-10T22:32:53.142318hub.schaetter.us sshd\[4852\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.35.54.225 2019-07-10T22:32:55.764523hub.schaetter.us sshd\[4852\]: Failed password for invalid user admin from 153.35.54.225 port 56739 ssh2 2019-07-10T22:32:58.214059hub.schaetter.us sshd\[4852\]: Failed password for invalid user admin from 153.35.54.225 port 56739 ssh2 2019-07-10T22:33:00.074212hub.schaetter.us sshd\[4852\]: Failed password for invalid user admin from 153.35.54.225 port 56739 ssh2 ...	2019-07-11 10:56:45
164.132.56.243	attackspambots	Jul 10 21:00:14 cvbmail sshd\[1218\]: Invalid user musikbot from 164.132.56.243 Jul 10 21:00:14 cvbmail sshd\[1218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.132.56.243 Jul 10 21:00:17 cvbmail sshd\[1218\]: Failed password for invalid user musikbot from 164.132.56.243 port 51184 ssh2	2019-07-11 10:51:34
66.240.205.34	attack	Automatic report - Web App Attack	2019-07-11 10:31:57
159.65.30.66	attack	Jul 10 21:39:41 www sshd\[11105\]: Invalid user User from 159.65.30.66 port 50332 ...	2019-07-11 11:11:03
37.120.135.221	attackspam	\[2019-07-10 22:26:59\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1282' - Wrong password \[2019-07-10 22:26:59\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-10T22:26:59.509-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="11405",SessionID="0x7f02f9572cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.120.135.221/64383",Challenge="436f49c5",ReceivedChallenge="436f49c5",ReceivedHash="81a02569dc6b4e29a4c2e8a0b25a0be7" \[2019-07-10 22:28:09\] NOTICE\[13443\] chan_sip.c: Registration from '\' failed for '37.120.135.221:1274' - Wrong password \[2019-07-10 22:28:09\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-10T22:28:09.833-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="11612",SessionID="0x7f02f9572cd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-11 10:40:21

最近上报的IP列表

14.21.198.59	45.232.153.255	45.113.71.49	72.43.117.204
109.169.204.252	73.211.23.147	77.239.63.86	69.9.125.95
34.220.23.47	110.152.214.148	13.52.242.164	168.196.122.37
72.192.33.182	5.234.248.0	197.255.59.24	84.228.163.1
5.152.76.124	203.59.95.189	125.84.28.151	166.241.46.37