200.54.216.66 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Chile

Internet Service Provider: TEEMSR LACNIC

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-01-25 00:57:37
attackspam	Unauthorized connection attempt from IP address 200.54.216.66 on Port 445(SMB)	2019-10-03 01:37:14
attackbots	Attempt To attack host OS, exploiting network vulnerabilities, on 16-09-2019 22:13:54.	2019-09-17 10:17:34

Type

Details

Datetime

attack

Honeypot attack, port: 445, PTR: PTR record not found

2020-01-25 00:57:37

attackspam

Unauthorized connection attempt from IP address 200.54.216.66 on Port 445(SMB)

2019-10-03 01:37:14

attackbots

Attempt To attack host OS, exploiting network vulnerabilities, on 16-09-2019 22:13:54.

2019-09-17 10:17:34

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 200.54.216.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64802
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;200.54.216.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091601 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Sep 17 10:17:26 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 66.216.54.200.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 66.216.54.200.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.13.6.116	attackbotsspam	2019-10-30T08:28:49.614215homeassistant sshd[14423]: Invalid user exfsys from 106.13.6.116 port 50748 2019-10-30T08:28:49.621369homeassistant sshd[14423]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.6.116 ...	2019-10-30 17:10:55
62.210.8.242	attackbotsspam	\[2019-10-30 04:16:41\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '62.210.8.242:65369' - Wrong password \[2019-10-30 04:16:41\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T04:16:41.813-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="147",SessionID="0x7fdf2cc7a718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.8.242/65369",Challenge="1ab847d1",ReceivedChallenge="1ab847d1",ReceivedHash="21224677c28c03b33d537e089a949fd5" \[2019-10-30 04:23:26\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '62.210.8.242:56058' - Wrong password \[2019-10-30 04:23:26\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-30T04:23:26.186-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="148",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.210.8.242/560	2019-10-30 16:54:57
84.51.0.198	attackspam	Sending SPAM email	2019-10-30 17:07:52
115.186.185.54	attackspambots	firewall-block, port(s): 1433/tcp	2019-10-30 17:01:49
63.200.214.72	attackspam	85/tcp [2019-10-30]1pkt	2019-10-30 17:06:37
213.82.114.206	attackbotsspam	Oct 30 09:39:34 MK-Soft-Root1 sshd[14455]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.82.114.206 Oct 30 09:39:36 MK-Soft-Root1 sshd[14455]: Failed password for invalid user subzero from 213.82.114.206 port 41628 ssh2 ...	2019-10-30 16:56:26
158.69.192.35	attackspam	Oct 30 06:53:17 jane sshd[21193]: Failed password for root from 158.69.192.35 port 44882 ssh2 ...	2019-10-30 16:45:10
177.39.187.70	attackbotsspam	Sending SPAM email	2019-10-30 17:03:51
177.125.164.225	attackspambots	Oct 30 04:49:51 MK-Soft-VM7 sshd[2045]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.125.164.225 Oct 30 04:49:53 MK-Soft-VM7 sshd[2045]: Failed password for invalid user chuai from 177.125.164.225 port 42680 ssh2 ...	2019-10-30 17:15:17
103.218.241.106	attackbots	Oct 28 05:43:58 nxxxxxxx sshd[19104]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.241.106 user=r.r Oct 28 05:44:01 nxxxxxxx sshd[19104]: Failed password for r.r from 103.218.241.106 port 36404 ssh2 Oct 28 05:44:01 nxxxxxxx sshd[19104]: Received disconnect from 103.218.241.106: 11: Bye Bye [preauth] Oct 28 06:04:49 nxxxxxxx sshd[20603]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.241.106 user=mysql Oct 28 06:04:50 nxxxxxxx sshd[20603]: Failed password for mysql from 103.218.241.106 port 50776 ssh2 Oct 28 06:04:51 nxxxxxxx sshd[20603]: Received disconnect from 103.218.241.106: 11: Bye Bye [preauth] Oct 28 06:08:55 nxxxxxxx sshd[20843]: Invalid user ftpuser from 103.218.241.106 Oct 28 06:08:55 nxxxxxxx sshd[20843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.218.241.106 Oct 28 06:08:57 nxxxxxxx sshd[20843]: Failed passwo........ -------------------------------	2019-10-30 17:01:28
168.232.197.11	attack	Invalid user ts3srv from 168.232.197.11 port 54118	2019-10-30 17:13:03
200.34.88.37	attackbotsspam	Oct 30 04:45:59 MainVPS sshd[28857]: Invalid user leocadia123 from 200.34.88.37 port 54770 Oct 30 04:45:59 MainVPS sshd[28857]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.34.88.37 Oct 30 04:45:59 MainVPS sshd[28857]: Invalid user leocadia123 from 200.34.88.37 port 54770 Oct 30 04:46:02 MainVPS sshd[28857]: Failed password for invalid user leocadia123 from 200.34.88.37 port 54770 ssh2 Oct 30 04:50:02 MainVPS sshd[29174]: Invalid user szp7914 from 200.34.88.37 port 35580 ...	2019-10-30 17:05:18
159.192.219.201	attackspambots	445/tcp [2019-10-30]1pkt	2019-10-30 17:13:26
222.135.99.131	attack	23/tcp [2019-10-30]1pkt	2019-10-30 16:45:31
117.70.61.151	attack	firewall-block, port(s): 23/tcp	2019-10-30 17:00:42

Recently Reported IPs

151.62.248.138	86.110.107.58	50.80.255.93	221.239.86.19
117.2.128.207	219.131.212.157	168.234.50.2	168.205.255.34
91.191.207.115	167.134.137.64	31.14.193.32	42.5.215.77
94.29.124.46	97.81.22.30	45.76.33.45	113.87.17.176
178.44.229.212	118.27.7.83	51.79.7.237	49.222.7.76