166.102.21.30 - IPInfo

Basic Info

City: Kittanning

Region: Pennsylvania

Country: United States

Internet Service Provider: Windstream Communications LLC

Hostname: unknown

Organization: Windstream Communications LLC

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Mar 16 06:25:57 vpn sshd[791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.102.21.30 Mar 16 06:25:59 vpn sshd[791]: Failed password for invalid user fabian from 166.102.21.30 port 55872 ssh2 Mar 16 06:32:36 vpn sshd[808]: Failed password for root from 166.102.21.30 port 46339 ssh2	2019-07-19 10:21:36

Type

Details

Datetime

attack

Mar 16 06:25:57 vpn sshd[791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.102.21.30
Mar 16 06:25:59 vpn sshd[791]: Failed password for invalid user fabian from 166.102.21.30 port 55872 ssh2
Mar 16 06:32:36 vpn sshd[808]: Failed password for root from 166.102.21.30 port 46339 ssh2

2019-07-19 10:21:36

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.102.21.30
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22166
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;166.102.21.30.			IN	A

;; AUTHORITY SECTION:
.			2125	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019033102 1800 900 604800 86400

;; Query time: 0 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Mon Apr 01 17:23:14 +08 2019
;; MSG SIZE  rcvd: 117

Host info

30.21.102.166.in-addr.arpa domain name pointer h30.21.102.166.static.ip.windstream.net.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
30.21.102.166.in-addr.arpa	name = h30.21.102.166.static.ip.windstream.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
51.38.126.92	attack	Oct 31 06:22:37 vps647732 sshd[12868]: Failed password for root from 51.38.126.92 port 56288 ssh2 ...	2019-10-31 16:28:10
122.228.89.95	attackspam	$f2bV_matches	2019-10-31 16:16:16
106.12.92.88	attack	Oct 30 20:03:31 hanapaa sshd\[13813\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.88 user=root Oct 30 20:03:33 hanapaa sshd\[13813\]: Failed password for root from 106.12.92.88 port 53782 ssh2 Oct 30 20:10:39 hanapaa sshd\[14467\]: Invalid user vlad from 106.12.92.88 Oct 30 20:10:39 hanapaa sshd\[14467\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.92.88 Oct 30 20:10:42 hanapaa sshd\[14467\]: Failed password for invalid user vlad from 106.12.92.88 port 35506 ssh2	2019-10-31 16:17:02
195.31.160.73	attackbotsspam	Oct 31 06:32:42 legacy sshd[3228]: Failed password for root from 195.31.160.73 port 48056 ssh2 Oct 31 06:36:32 legacy sshd[3336]: Failed password for root from 195.31.160.73 port 33064 ssh2 Oct 31 06:40:22 legacy sshd[3436]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.31.160.73 ...	2019-10-31 16:20:25
194.55.187.42	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2019-10-31 15:57:15
2a01:7c8:aac4:378::1	attackbotsspam	xmlrpc attack	2019-10-31 16:13:47
109.238.11.173	attack	Oct 30 04:10:12 xxxxxxx0 sshd[22546]: Invalid user servicedesk from 109.238.11.173 port 42136 Oct 30 04:10:13 xxxxxxx0 sshd[22546]: Failed password for invalid user servicedesk from 109.238.11.173 port 42136 ssh2 Oct 30 04:23:14 xxxxxxx0 sshd[7377]: Failed password for r.r from 109.238.11.173 port 42844 ssh2 Oct 30 04:26:24 xxxxxxx0 sshd[10952]: Invalid user temp from 109.238.11.173 port 53094 Oct 30 04:26:26 xxxxxxx0 sshd[10952]: Failed password for invalid user temp from 109.238.11.173 port 53094 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=109.238.11.173	2019-10-31 15:53:29
182.148.114.139	attack	2019-10-31T05:46:03.869057shield sshd\[30899\]: Invalid user hwserver from 182.148.114.139 port 52777 2019-10-31T05:46:03.873332shield sshd\[30899\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.148.114.139 2019-10-31T05:46:06.239296shield sshd\[30899\]: Failed password for invalid user hwserver from 182.148.114.139 port 52777 ssh2 2019-10-31T05:51:19.850635shield sshd\[32172\]: Invalid user 123Europe from 182.148.114.139 port 42839 2019-10-31T05:51:19.855063shield sshd\[32172\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.148.114.139	2019-10-31 16:12:26
187.178.238.119	attack	1433/tcp 445/tcp... [2019-09-12/10-31]5pkt,2pt.(tcp)	2019-10-31 16:28:33
183.192.242.171	attackbots	Telnet Server BruteForce Attack	2019-10-31 16:02:15
192.3.207.82	attackspambots	\[2019-10-31 04:00:57\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '192.3.207.82:50273' - Wrong password \[2019-10-31 04:00:57\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T04:00:57.430-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5211",SessionID="0x7fdf2ca2e638",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.82/50273",Challenge="33d40208",ReceivedChallenge="33d40208",ReceivedHash="953d47ffb7936b7d489229963bd5bf74" \[2019-10-31 04:10:51\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '192.3.207.82:62088' - Wrong password \[2019-10-31 04:10:51\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-31T04:10:51.472-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5300",SessionID="0x7fdf2c364088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/192.3.207.82	2019-10-31 16:20:55
62.175.204.88	attack	Automatic report - Port Scan Attack	2019-10-31 16:15:29
45.225.169.81	attack	Automatic report - Banned IP Access	2019-10-31 15:52:32
111.53.195.114	attack	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2019-10-31 15:51:36
83.103.98.211	attack	2019-10-31T07:50:41.386733abusebot.cloudsearch.cf sshd\[29914\]: Invalid user aileen from 83.103.98.211 port 50115	2019-10-31 16:00:33

Recently Reported IPs

182.253.220.109	165.255.133.98	125.132.73.43	103.76.241.38
80.191.70.126	58.218.213.60	14.177.143.252	64.106.64.111
213.32.52.1	137.74.47.22	68.183.89.161	106.74.36.141
82.102.17.151	113.141.67.162	74.63.214.119	192.34.59.45
14.247.196.210	45.67.14.168	200.149.7.202	170.80.100.225