190.66.21.166 - IPInfo

Basic Info

City: Bogotá

Region: Bogota D.C.

Country: Colombia

Internet Service Provider: unknown

Hostname: unknown

Organization: COLOMBIA TELECOMUNICACIONES S.A. ESP

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
190.66.21.93	attack	Unauthorized connection attempt from IP address 190.66.21.93 on Port 445(SMB)	2020-03-08 03:01:35
190.66.21.93	attackbotsspam	unauthorized connection attempt	2020-01-09 15:01:54

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 190.66.21.166
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 6462
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;190.66.21.166.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019042301 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Tue Apr 23 22:55:41 +08 2019
;; MSG SIZE  rcvd: 117

Host info

Host 166.21.66.190.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 166.21.66.190.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.82.65.90	attackspam	Nov 26 09:38:36 mc1 kernel: \[6043748.212737\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.90 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=63067 PROTO=TCP SPT=8080 DPT=9654 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 26 09:40:19 mc1 kernel: \[6043851.230351\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.90 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=34330 PROTO=TCP SPT=8080 DPT=4000 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 26 09:43:11 mc1 kernel: \[6044023.234511\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=80.82.65.90 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=41208 PROTO=TCP SPT=8080 DPT=33789 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-26 20:19:28
183.239.44.164	attack	2019-11-26T11:33:30.447420 sshd[15476]: Invalid user backup from 183.239.44.164 port 48580 2019-11-26T11:33:30.461412 sshd[15476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.239.44.164 2019-11-26T11:33:30.447420 sshd[15476]: Invalid user backup from 183.239.44.164 port 48580 2019-11-26T11:33:32.469871 sshd[15476]: Failed password for invalid user backup from 183.239.44.164 port 48580 ssh2 2019-11-26T11:52:06.277756 sshd[15684]: Invalid user school from 183.239.44.164 port 33426 ...	2019-11-26 20:54:59
185.142.236.34	attack	Portscan or hack attempt detected by psad/fwsnort	2019-11-26 20:57:27
178.128.52.97	attack	Nov 26 03:10:10 TORMINT sshd\[30984\]: Invalid user guest from 178.128.52.97 Nov 26 03:10:10 TORMINT sshd\[30984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.52.97 Nov 26 03:10:12 TORMINT sshd\[30984\]: Failed password for invalid user guest from 178.128.52.97 port 36738 ssh2 ...	2019-11-26 21:03:03
35.192.145.119	attack	Fail2Ban Ban Triggered HTTP SQL Injection Attempt	2019-11-26 20:48:16
202.103.37.40	attackbotsspam	Nov 26 12:56:44 minden010 sshd[2722]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.103.37.40 Nov 26 12:56:46 minden010 sshd[2722]: Failed password for invalid user spike from 202.103.37.40 port 46964 ssh2 Nov 26 13:05:47 minden010 sshd[10919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.103.37.40 ...	2019-11-26 20:49:06
196.218.246.141	attackbots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/196.218.246.141/ EG - 1H : (5) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : EG NAME ASN : ASN8452 IP : 196.218.246.141 CIDR : 196.218.240.0/21 PREFIX COUNT : 833 UNIQUE IP COUNT : 7610368 ATTACKS DETECTED ASN8452 : 1H - 1 3H - 1 6H - 1 12H - 1 24H - 1 DateTime : 2019-11-26 11:01:12 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-26 20:40:07
103.28.2.60	attackspam	Invalid user webmaster from 103.28.2.60 port 51552	2019-11-26 20:51:37
175.119.91.147	attack	" "	2019-11-26 20:42:52
212.92.112.111	attackbots	IDS	2019-11-26 20:48:48
177.155.36.205	attackspam	Automatic report - Port Scan Attack	2019-11-26 20:57:56
66.249.79.8	attackbotsspam	Automatic report - Banned IP Access	2019-11-26 20:29:52
188.213.212.70	attack	Nov 26 07:21:47 exim[2120]: [1\51] 1iZUEM-0000YC-0L H=primer.yarkaci.com (primer.hanhlee.com) [188.213.212.70] F= rejected after DATA: This message scored 101.3 spam points.	2019-11-26 20:26:57
140.143.57.203	attackspambots	Nov 26 13:02:29 www sshd\[241414\]: Invalid user rajangan from 140.143.57.203 Nov 26 13:02:29 www sshd\[241414\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.57.203 Nov 26 13:02:32 www sshd\[241414\]: Failed password for invalid user rajangan from 140.143.57.203 port 35874 ssh2 ...	2019-11-26 20:38:16
184.105.247.194	attackbots	Connection by 184.105.247.194 on port: 27017 got caught by honeypot at 11/26/2019 10:21:11 AM	2019-11-26 20:43:06

Recently Reported IPs

39.91.65.177	216.14.92.74	112.14.183.7	117.237.205.240
90.236.110.119	105.106.59.116	1.210.139.130	139.162.106.181
202.150.153.190	77.226.213.19	95.128.163.216	98.245.0.162
138.41.228.226	106.60.221.111	125.33.142.118	71.213.248.90
61.5.92.186	86.47.122.203	160.27.41.244	92.253.8.182