166.252.2.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
166.252.236.146	attack	Oct 8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127 Oct 8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146 Oct 8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2 Oct 8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036 Oct 8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146	2020-10-10 05:02:08
166.252.236.146	attack	Oct 8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127 Oct 8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146 Oct 8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2 Oct 8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036 Oct 8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146	2020-10-09 21:02:52
166.252.236.146	attackspam	Oct 8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127 Oct 8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146 Oct 8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2 Oct 8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036 Oct 8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146	2020-10-09 12:49:04

Type

Details

Datetime

166.252.236.146

attack

Oct  8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127
Oct  8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146
Oct  8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2
Oct  8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036
Oct  8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146

2020-10-10 05:02:08

166.252.236.146

attack

Oct  8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127
Oct  8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146
Oct  8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2
Oct  8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036
Oct  8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146

2020-10-09 21:02:52

166.252.236.146

attackspam

Oct  8 22:48:19 ns382633 sshd\[18815\]: Invalid user admin from 166.252.236.146 port 6127
Oct  8 22:48:19 ns382633 sshd\[18815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146
Oct  8 22:48:21 ns382633 sshd\[18815\]: Failed password for invalid user admin from 166.252.236.146 port 6127 ssh2
Oct  8 22:48:24 ns382633 sshd\[18818\]: Invalid user admin from 166.252.236.146 port 50036
Oct  8 22:48:25 ns382633 sshd\[18818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=166.252.236.146

2020-10-09 12:49:04

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 166.252.2.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29169
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;166.252.2.13.			IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024120900 1800 900 604800 86400

;; Query time: 13 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Dec 09 15:49:31 CST 2024
;; MSG SIZE  rcvd: 105

Host info

13.2.252.166.in-addr.arpa domain name pointer 13.sub-166-252-2.myvzw.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
13.2.252.166.in-addr.arpa	name = 13.sub-166-252-2.myvzw.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.32.160.145	attackspambots	2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \: Unrouteable address 2019-09-10 16:26:40 H=\(\[193.32.160.145\]\) \[193.32.160.145\] F=\ rejected RCPT \:	2019-09-10 22:51:15
195.231.5.56	attackspam	May 24 00:07:39 mercury smtpd[1000]: 36e5b3c1ea491817 smtp event=failed-command address=195.231.5.56 host=host56-5-231-195.serverdedicati.aruba.it command="AUTH LOGIN" result="503 5.5.1 Invalid command: Command not supported" ...	2019-09-10 21:33:16
159.89.94.198	attack	Sep 10 16:32:37 hosting sshd[23982]: Invalid user testing from 159.89.94.198 port 45660 ...	2019-09-10 22:33:57
103.48.192.48	attackspambots	Sep 10 17:33:12 server sshd\[2342\]: Invalid user 123456 from 103.48.192.48 port 52526 Sep 10 17:33:12 server sshd\[2342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.192.48 Sep 10 17:33:14 server sshd\[2342\]: Failed password for invalid user 123456 from 103.48.192.48 port 52526 ssh2 Sep 10 17:39:25 server sshd\[643\]: Invalid user 1234 from 103.48.192.48 port 27365 Sep 10 17:39:25 server sshd\[643\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.48.192.48	2019-09-10 22:48:19
198.23.146.150	attack	Sep 10 13:44:48 MK-Soft-VM7 sshd\[1837\]: Invalid user gitblit from 198.23.146.150 port 55382 Sep 10 13:44:48 MK-Soft-VM7 sshd\[1837\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.23.146.150 Sep 10 13:44:49 MK-Soft-VM7 sshd\[1837\]: Failed password for invalid user gitblit from 198.23.146.150 port 55382 ssh2 ...	2019-09-10 22:07:52
218.98.26.171	attackspam	leo_www	2019-09-10 22:42:13
222.186.42.117	attackbotsspam	Sep 10 03:58:41 sachi sshd\[28172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117 user=root Sep 10 03:58:43 sachi sshd\[28172\]: Failed password for root from 222.186.42.117 port 32910 ssh2 Sep 10 03:58:45 sachi sshd\[28172\]: Failed password for root from 222.186.42.117 port 32910 ssh2 Sep 10 03:58:48 sachi sshd\[28172\]: Failed password for root from 222.186.42.117 port 32910 ssh2 Sep 10 03:58:50 sachi sshd\[28199\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.42.117 user=root	2019-09-10 22:07:07
103.51.153.235	attackspam	Sep 10 04:23:52 hpm sshd\[27717\]: Invalid user user3 from 103.51.153.235 Sep 10 04:23:52 hpm sshd\[27717\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.51.153.235 Sep 10 04:23:55 hpm sshd\[27717\]: Failed password for invalid user user3 from 103.51.153.235 port 54316 ssh2 Sep 10 04:30:18 hpm sshd\[28247\]: Invalid user teamspeak from 103.51.153.235 Sep 10 04:30:18 hpm sshd\[28247\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.51.153.235	2019-09-10 22:35:35
189.59.69.3	attackbotsspam	Jul 30 00:51:36 mercury auth[770]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=administrator@lukegirvin.com rhost=189.59.69.3 ...	2019-09-10 21:59:22
185.53.229.10	attackbotsspam	Sep 10 04:29:58 hcbb sshd\[29264\]: Invalid user user from 185.53.229.10 Sep 10 04:29:58 hcbb sshd\[29264\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10 Sep 10 04:30:01 hcbb sshd\[29264\]: Failed password for invalid user user from 185.53.229.10 port 18884 ssh2 Sep 10 04:36:22 hcbb sshd\[29846\]: Invalid user jenkins from 185.53.229.10 Sep 10 04:36:22 hcbb sshd\[29846\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.53.229.10	2019-09-10 22:49:29
80.237.68.228	attackspambots	Sep 10 14:28:59 hosting sshd[13935]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.237.68.228 user=admin Sep 10 14:29:02 hosting sshd[13935]: Failed password for admin from 80.237.68.228 port 52482 ssh2 ...	2019-09-10 22:52:59
106.13.46.114	attackbotsspam	Sep 10 15:51:59 core sshd[29952]: Invalid user teamspeakpass from 106.13.46.114 port 55594 Sep 10 15:52:02 core sshd[29952]: Failed password for invalid user teamspeakpass from 106.13.46.114 port 55594 ssh2 ...	2019-09-10 21:56:32
91.214.82.55	attack	Unauthorized connection attempt from IP address 91.214.82.55 on Port 445(SMB)	2019-09-10 22:37:51
185.209.0.81	attackspambots	RDP Brute Force	2019-09-10 22:21:00
113.97.29.55	attackspambots	Unauthorized connection attempt from IP address 113.97.29.55 on Port 445(SMB)	2019-09-10 22:57:36

Recently Reported IPs

127.135.210.64	29.7.99.253	200.172.70.145	129.213.228.132
166.244.159.248	57.73.60.58	114.138.222.89	62.21.127.18
160.241.105.28	32.169.120.189	6.113.137.35	171.195.69.212
107.206.101.17	32.202.142.151	29.75.216.123	107.147.19.151
158.107.187.243	160.38.18.249	226.30.81.176	115.50.107.42