212.149.239.66

Basic Info

City: unknown

Region: unknown

Country: Finland

Internet Service Provider: Dna Oy

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Unauthorized connection attempt detected from IP address 212.149.239.66 to port 2220 [J]	2020-01-13 16:36:38

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.149.239.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50615
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.149.239.66.			IN	A

;; AUTHORITY SECTION:
.			267	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011300 1800 900 604800 86400

;; Query time: 203 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 16:36:34 CST 2020
;; MSG SIZE  rcvd: 118

Host info

66.239.149.212.in-addr.arpa domain name pointer 212-149-239-66.bb.dnainternet.fi.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
66.239.149.212.in-addr.arpa	name = 212-149-239-66.bb.dnainternet.fi.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
31.31.196.173	attack	Bogus request for payment received. Gets & sends credit card to ofsendpw.pw in Russia and redirects to 1drv.ms (genuine Microsoft site).	2020-04-15 15:29:48
64.227.19.200	attack	RDP Bruteforce	2020-04-15 15:23:06
217.15.185.122	attackspam	$f2bV_matches	2020-04-15 15:41:01
122.51.158.15	attack	Invalid user server from 122.51.158.15 port 38826	2020-04-15 15:19:10
148.72.206.225	attackspambots	ssh brute force	2020-04-15 15:10:41
176.227.155.119	attackbotsspam	spam	2020-04-15 15:45:45
41.215.77.54	attackspambots	spam	2020-04-15 15:49:07
94.228.182.244	attack	Apr 15 06:51:29 OPSO sshd\[20725\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.228.182.244 user=root Apr 15 06:51:30 OPSO sshd\[20725\]: Failed password for root from 94.228.182.244 port 36246 ssh2 Apr 15 06:55:04 OPSO sshd\[21436\]: Invalid user zte from 94.228.182.244 port 40188 Apr 15 06:55:04 OPSO sshd\[21436\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.228.182.244 Apr 15 06:55:05 OPSO sshd\[21436\]: Failed password for invalid user zte from 94.228.182.244 port 40188 ssh2	2020-04-15 15:14:05
52.70.28.66	attackbots	Apr 15 05:55:15 vps647732 sshd[31757]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.70.28.66 Apr 15 05:55:17 vps647732 sshd[31757]: Failed password for invalid user cumulus from 52.70.28.66 port 57198 ssh2 ...	2020-04-15 15:19:55
45.55.158.8	attackbots	Invalid user download from 45.55.158.8 port 38462	2020-04-15 15:32:28
68.183.75.36	attackbotsspam	68.183.75.36 - - [15/Apr/2020:06:26:03 +0200] "GET /wp-login.php HTTP/1.1" 200 6551 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.75.36 - - [15/Apr/2020:06:26:05 +0200] "POST /wp-login.php HTTP/1.1" 200 7450 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 68.183.75.36 - - [15/Apr/2020:06:26:06 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-15 15:31:06
141.98.80.30	attackbotsspam	Apr 15 09:12:29 mail.srvfarm.net postfix/smtpd[2077768]: warning: unknown[141.98.80.30]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Apr 15 09:12:29 mail.srvfarm.net postfix/smtpd[2077768]: lost connection after AUTH from unknown[141.98.80.30] Apr 15 09:12:34 mail.srvfarm.net postfix/smtpd[2065982]: lost connection after CONNECT from unknown[141.98.80.30] Apr 15 09:12:38 mail.srvfarm.net postfix/smtpd[2064212]: lost connection after AUTH from unknown[141.98.80.30] Apr 15 09:12:43 mail.srvfarm.net postfix/smtpd[2079033]: lost connection after CONNECT from unknown[141.98.80.30]	2020-04-15 15:33:11
101.51.200.214	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 15-04-2020 04:55:08.	2020-04-15 15:29:13
103.145.12.41	attack	[2020-04-15 03:19:00] NOTICE[1170] chan_sip.c: Registration from '"111" ' failed for '103.145.12.41:5815' - Wrong password [2020-04-15 03:19:00] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-15T03:19:00.960-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="111",SessionID="0x7f6c081949a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.41/5815",Challenge="346eef28",ReceivedChallenge="346eef28",ReceivedHash="7976882fa50b61216432c21ea2c5bcbc" [2020-04-15 03:19:01] NOTICE[1170] chan_sip.c: Registration from '"111" ' failed for '103.145.12.41:5815' - Wrong password [2020-04-15 03:19:01] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-15T03:19:01.063-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="111",SessionID="0x7f6c080b4a38",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145. ...	2020-04-15 15:40:33
187.111.192.186	attack	spam	2020-04-15 15:44:05

Recently Reported IPs

142.93.205.21	188.166.234.227	180.94.71.142	110.39.53.22
92.53.127.105	14.174.37.39	223.17.147.201	198.177.39.135
88.247.251.72	51.15.111.29	189.208.62.12	177.184.221.49
110.138.150.13	84.3.56.112	15.28.20.21	180.244.97.188
61.5.65.143	14.254.177.108	113.254.11.106	187.192.137.133