198.199.66.93 - IPInfo

Basic Info

City: North Bergen

Region: New Jersey

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
198.199.66.52	attackbots	CMS (WordPress or Joomla) login attempt.	2020-08-14 15:17:40
198.199.66.52	attackspam	www.handydirektreparatur.de 198.199.66.52 [11/Aug/2020:14:14:04 +0200] "POST /wp-login.php HTTP/1.1" 200 6027 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" www.handydirektreparatur.de 198.199.66.52 [11/Aug/2020:14:14:05 +0200] "POST /xmlrpc.php HTTP/1.1" 200 4081 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-11 20:55:08
198.199.66.52	attackbots	Aug 1 06:09:04 b-vps wordpress(gpfans.cz)[4417]: Authentication attempt for unknown user buchtic from 198.199.66.52 ...	2020-08-01 16:33:19
198.199.66.52	attackbots	Automatic report - Banned IP Access	2020-07-29 12:01:26
198.199.66.52	attackspambots	198.199.66.52 - - [18/Jun/2020:05:35:18 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - [18/Jun/2020:05:56:37 +0200] "POST /xmlrpc.php HTTP/1.1" 403 146 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-06-18 12:02:36
198.199.66.165	attackbotsspam	Jun 17 22:08:30 ns1 sshd[18409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.66.165 Jun 17 22:08:33 ns1 sshd[18409]: Failed password for invalid user steam from 198.199.66.165 port 35400 ssh2	2020-06-18 04:32:48
198.199.66.10	attack	(sshd) Failed SSH login from 198.199.66.10 (US/United States/-): 5 in the last 3600 secs	2020-06-17 21:51:55
198.199.66.52	attack	Automatic report - Banned IP Access	2020-06-17 18:38:14
198.199.66.52	attackspambots	198.199.66.52 - - \[31/May/2020:10:00:51 +0200\] "POST /wp-login.php HTTP/1.0" 200 5932 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - \[31/May/2020:10:00:53 +0200\] "POST /wp-login.php HTTP/1.0" 200 5745 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - \[31/May/2020:10:00:58 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-31 16:42:05
198.199.66.52	attackbotsspam	198.199.66.52 - - [20/May/2020:09:49:56 +0200] "GET /wp-login.php HTTP/1.1" 200 6614 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - [20/May/2020:09:49:58 +0200] "POST /wp-login.php HTTP/1.1" 200 6865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - [20/May/2020:09:49:59 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-05-20 15:57:30
198.199.66.52	attackbotsspam	198.199.66.52 - - \[29/Apr/2020:05:59:21 +0200\] "POST /wp-login.php HTTP/1.0" 200 6384 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - \[29/Apr/2020:05:59:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 6251 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 198.199.66.52 - - \[29/Apr/2020:05:59:34 +0200\] "POST /wp-login.php HTTP/1.0" 200 6247 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-04-29 12:26:35
198.199.66.10	attackbotsspam	Mar 4 13:40:25 ms-srv sshd[44321]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=198.199.66.10 Mar 4 13:40:28 ms-srv sshd[44321]: Failed password for invalid user ftpuser from 198.199.66.10 port 54872 ssh2	2020-03-10 06:57:47
198.199.66.52	attack	Automatic report - XMLRPC Attack	2020-03-08 20:31:20
198.199.66.69	attackspambots	DATE:2019-07-12_22:12:24, IP:198.199.66.69, PORT:telnet Telnet brute force auth on honeypot server (honey-neo-dc)	2019-07-13 06:05:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 198.199.66.93
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43720
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;198.199.66.93.			IN	A

;; AUTHORITY SECTION:
.			357	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022012400 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 24 17:07:09 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 93.66.199.198.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 93.66.199.198.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
143.110.156.193	attackspam	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: 40-scan-andrew.foma-gmail.com.	2020-10-04 16:07:57
113.94.85.201	attackbotsspam	Port probing on unauthorized port 23	2020-10-04 16:06:42
177.19.187.79	attackbotsspam	(imapd) Failed IMAP login from 177.19.187.79 (BR/Brazil/corporativo.static.gvt.net.br): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Oct 4 10:36:15 ir1 dovecot[1917636]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=177.19.187.79, lip=5.63.12.44, TLS: Connection closed, session=	2020-10-04 16:09:20
45.148.122.198	attackbotsspam	TCP (SYN) 45.148.122.198:42905 -> port 22, len 44	2020-10-04 15:39:15
197.98.201.78	attack	445/tcp 445/tcp [2020-10-03]2pkt	2020-10-04 16:15:59
81.215.202.162	attack	23/tcp [2020-10-03]1pkt	2020-10-04 15:52:07
183.105.172.94	attackspambots	8080/udp [2020-10-03]1pkt	2020-10-04 15:42:24
191.234.186.93	attackspambots	Oct 4 09:38:39 haigwepa sshd[16348]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=191.234.186.93 Oct 4 09:38:41 haigwepa sshd[16348]: Failed password for invalid user tech from 191.234.186.93 port 43930 ssh2 ...	2020-10-04 15:39:41
189.198.138.114	attackbots	Port scan on 1 port(s): 445	2020-10-04 16:06:09
27.203.159.220	attack	8080/udp [2020-10-03]1pkt	2020-10-04 15:42:05
106.13.201.44	attackbots	TCP (SYN) 106.13.201.44:57229 -> port 12048, len 44	2020-10-04 16:13:04
106.52.145.203	attack	Unauthorised access (Oct 3) SRC=106.52.145.203 LEN=40 TTL=47 ID=26127 TCP DPT=8080 WINDOW=20611 SYN Unauthorised access (Oct 3) SRC=106.52.145.203 LEN=40 TTL=47 ID=4686 TCP DPT=8080 WINDOW=6898 SYN Unauthorised access (Oct 3) SRC=106.52.145.203 LEN=40 TTL=47 ID=19483 TCP DPT=8080 WINDOW=6898 SYN Unauthorised access (Oct 3) SRC=106.52.145.203 LEN=40 TTL=47 ID=20388 TCP DPT=8080 WINDOW=20611 SYN Unauthorised access (Oct 1) SRC=106.52.145.203 LEN=40 TTL=47 ID=41515 TCP DPT=8080 WINDOW=20611 SYN	2020-10-04 16:17:28
172.105.40.217	attackbots	SCAN: Host Sweep CloudCIX Reconnaissance Scan Detected, PTR: li1992-217.members.linode.com.	2020-10-04 16:02:42
219.156.15.221	attackbotsspam	23/tcp [2020-10-03]1pkt	2020-10-04 15:48:18
125.160.80.24	attack	445/tcp 445/tcp [2020-10-03]2pkt	2020-10-04 15:59:36

Recently Reported IPs

93.254.248.9	29.28.236.139	157.200.33.115	85.16.7.237
254.208.36.201	62.67.132.82	57.14.55.223	159.153.95.19
133.74.113.210	89.165.215.125	173.193.85.202	12.185.224.119
141.20.195.251	45.127.129.9	122.166.99.54	217.183.244.4
221.74.232.118	108.149.146.176	115.213.163.9	198.241.181.78