117.66.149.55 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.66.149.229	attackspam	Dec 8 09:52:42 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:52:52 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:00 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:12 esmtp postfix/smtpd[12184]: lost connection after AUTH from unknown[117.66.149.229] Dec 8 09:53:20 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.66.149.229	2019-12-09 03:08:50

Type

Details

Datetime

117.66.149.229

attackspam

Dec  8 09:52:42 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:52:52 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:00 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:12 esmtp postfix/smtpd[12184]: lost connection after AUTH from unknown[117.66.149.229]
Dec  8 09:53:20 esmtp postfix/smtpd[12149]: lost connection after AUTH from unknown[117.66.149.229]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=117.66.149.229

2019-12-09 03:08:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.66.149.55
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22023
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;117.66.149.55.			IN	A

;; AUTHORITY SECTION:
.			345	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 85 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 22:07:41 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 55.149.66.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 55.149.66.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.73.248.35	attackspam	Jul 12 02:22:45 localhost sshd\[5718\]: Invalid user connor from 177.73.248.35 port 48472 Jul 12 02:22:45 localhost sshd\[5718\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.248.35 Jul 12 02:22:46 localhost sshd\[5718\]: Failed password for invalid user connor from 177.73.248.35 port 48472 ssh2 Jul 12 02:28:55 localhost sshd\[5811\]: Invalid user git from 177.73.248.35 port 48878 Jul 12 02:28:55 localhost sshd\[5811\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.73.248.35 ...	2019-07-12 10:48:54
185.220.100.252	attack	Jul 12 02:03:37 lnxweb62 sshd[29903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.252 Jul 12 02:03:37 lnxweb62 sshd[29903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.220.100.252 Jul 12 02:03:38 lnxweb62 sshd[29903]: Failed password for invalid user admin from 185.220.100.252 port 1960 ssh2	2019-07-12 10:25:18
114.37.235.171	attackbots	Unauthorized connection attempt from IP address 114.37.235.171 on Port 445(SMB)	2019-07-12 10:35:34
77.247.110.227	attack	\[2019-07-11 22:32:14\] NOTICE\[13443\] chan_sip.c: Registration from '"203" \' failed for '77.247.110.227:7821' - Wrong password \[2019-07-11 22:32:14\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-11T22:32:14.509-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="203",SessionID="0x7f02f843a538",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.227/7821",Challenge="75a6f9d1",ReceivedChallenge="75a6f9d1",ReceivedHash="165d00ce8c0f8e3c9a1bde7389eea214" \[2019-07-11 22:32:14\] NOTICE\[13443\] chan_sip.c: Registration from '"203" \' failed for '77.247.110.227:7821' - Wrong password \[2019-07-11 22:32:14\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-11T22:32:14.609-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="203",SessionID="0x7f02f9191e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U	2019-07-12 10:36:09
193.188.22.12	attackbotsspam	Triggered by Fail2Ban at Ares web server	2019-07-12 10:20:00
51.15.178.236	attack	tried to access port 50000, blocked by firewall.	2019-07-12 10:41:40
111.93.56.203	attackbots	Jul 12 02:39:34 mail sshd\[17105\]: Invalid user frontrow from 111.93.56.203 port 58160 Jul 12 02:39:34 mail sshd\[17105\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.56.203 Jul 12 02:39:37 mail sshd\[17105\]: Failed password for invalid user frontrow from 111.93.56.203 port 58160 ssh2 Jul 12 02:45:42 mail sshd\[17292\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.56.203 user=root Jul 12 02:45:44 mail sshd\[17292\]: Failed password for root from 111.93.56.203 port 58938 ssh2 ...	2019-07-12 10:46:43
111.122.181.250	attack	Jul 12 04:47:22 giegler sshd[22352]: Invalid user user6 from 111.122.181.250 port 2203	2019-07-12 10:57:22
185.174.165.13	attackspam	Unauthorized connection attempt from IP address 185.174.165.13 on Port 445(SMB)	2019-07-12 10:33:27
78.26.151.244	attack	Unauthorized connection attempt from IP address 78.26.151.244 on Port 445(SMB)	2019-07-12 10:38:56
142.93.25.117	attack	1562894584 - 07/12/2019 08:23:04 Host: 142.93.25.117/142.93.25.117 Port: 23 TCP Blocked ...	2019-07-12 10:48:01
61.16.130.22	attackbots	Unauthorized connection attempt from IP address 61.16.130.22 on Port 445(SMB)	2019-07-12 10:30:03
206.189.148.96	attackbots	Jul 12 04:33:25 host sshd\[60924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.148.96 user=root Jul 12 04:33:27 host sshd\[60924\]: Failed password for root from 206.189.148.96 port 35228 ssh2 ...	2019-07-12 10:43:19
194.67.221.22	attackbots	Unauthorized connection attempt from IP address 194.67.221.22 on Port 445(SMB)	2019-07-12 10:30:21
45.166.23.89	attackspambots	Honeypot attack, port: 23, PTR: 45-166-23-89.dyn.netondajaguaruana.com.br.	2019-07-12 10:58:33

Recently Reported IPs

117.66.149.82	117.66.149.97	117.66.166.152	117.66.166.118
117.66.166.150	117.66.166.145	117.66.155.243	117.66.166.189
117.66.166.117	117.66.166.195	117.66.166.202	114.229.68.221
117.66.154.87	117.66.166.210	117.66.166.46	117.66.166.69
117.66.167.10	117.66.166.172	117.66.167.114	117.66.166.6