45.83.66.91 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: Alpha Strike Labs GmbH

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized FTP access attempt	2020-03-26 03:37:15

Comments on same subnet:

IP	Type	Details	Datetime
45.83.66.85	proxy	VPN fraud	2023-05-25 12:40:34
45.83.66.88	attack	" "	2020-08-10 06:53:28
45.83.66.234	attackbots	Unauthorized connection attempt detected from IP address 45.83.66.234 to port 110	2020-07-25 22:19:16
45.83.66.150	attackspambots	Unauthorized connection attempt detected from IP address 45.83.66.150 to port 443	2020-07-23 06:44:11
45.83.66.242	attackbots	Unauthorized connection attempt detected from IP address 45.83.66.242 to port 102	2020-07-09 07:57:57
45.83.66.248	attack	Unauthorized connection attempt detected from IP address 45.83.66.248 to port 102	2020-07-09 07:57:32
45.83.66.71	attackspambots	Unauthorized connection attempt detected from IP address 45.83.66.71 to port 102	2020-07-09 06:53:39
45.83.66.171	attackspam	Unauthorized connection attempt detected from IP address 45.83.66.171 to port 102	2020-07-09 06:53:16
45.83.66.161	attackspam	Unauthorized connection attempt detected from IP address 45.83.66.161 to port 102	2020-07-09 05:07:07
45.83.66.36	attackbots	Unauthorized connection attempt detected from IP address 45.83.66.36 to port 53	2020-07-07 04:59:16
45.83.66.79	attack	Unauthorized connection attempt detected from IP address 45.83.66.79 to port 22	2020-07-07 04:58:54
45.83.66.116	attack	Unauthorized connection attempt detected from IP address 45.83.66.116 to port 110	2020-05-31 04:29:30
45.83.66.185	attackbotsspam	Unauthorized connection attempt detected from IP address 45.83.66.185 to port 110	2020-05-31 02:41:14
45.83.66.17	attackbotsspam	Scanning	2020-05-11 21:31:22
45.83.66.150	attackbots	Hits on port : 2012	2020-04-14 17:06:02

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 45.83.66.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;45.83.66.91.			IN	A

;; AUTHORITY SECTION:
.			450	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020032502 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Mar 26 03:37:12 CST 2020
;; MSG SIZE  rcvd: 115

Host info

Host 91.66.83.45.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 91.66.83.45.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.31.144	attack	Oct 5 02:30:13 localhost sshd\[29553\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.144 user=root Oct 5 02:30:16 localhost sshd\[29553\]: Failed password for root from 222.186.31.144 port 59226 ssh2 Oct 5 02:30:18 localhost sshd\[29553\]: Failed password for root from 222.186.31.144 port 59226 ssh2	2019-10-05 08:30:54
51.89.41.85	attack	\[2019-10-04 23:57:11\] NOTICE\[1948\] chan_sip.c: Registration from '"2800" \' failed for '51.89.41.85:5304' - Wrong password \[2019-10-04 23:57:11\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T23:57:11.836-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2800",SessionID="0x7f1e1d1e74e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.89.41.85/5304",Challenge="25ba3d24",ReceivedChallenge="25ba3d24",ReceivedHash="7aa39e05c6780902228b95f8ac11a9a1" \[2019-10-04 23:57:11\] NOTICE\[1948\] chan_sip.c: Registration from '"2800" \' failed for '51.89.41.85:5304' - Wrong password \[2019-10-04 23:57:11\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T23:57:11.986-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2800",SessionID="0x7f1e1c684748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/51.8	2019-10-05 12:01:21
1.85.120.143	attackspam	Automatic report - FTP Brute Force	2019-10-05 08:29:01
139.59.59.187	attackspambots	Oct 4 02:00:05 XXX sshd[38587]: Invalid user chase from 139.59.59.187 port 59640	2019-10-05 08:31:15
188.128.43.28	attack	Oct 5 04:20:23 venus sshd\[26110\]: Invalid user P4ssw0rt1! from 188.128.43.28 port 41618 Oct 5 04:20:23 venus sshd\[26110\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.128.43.28 Oct 5 04:20:24 venus sshd\[26110\]: Failed password for invalid user P4ssw0rt1! from 188.128.43.28 port 41618 ssh2 ...	2019-10-05 12:25:53
222.186.175.147	attackspambots	Oct 5 07:10:51 www sshd\[21452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.147 user=root Oct 5 07:10:53 www sshd\[21452\]: Failed password for root from 222.186.175.147 port 50006 ssh2 Oct 5 07:10:58 www sshd\[21452\]: Failed password for root from 222.186.175.147 port 50006 ssh2 ...	2019-10-05 12:12:47
95.110.173.147	attack	Oct 4 17:53:26 auw2 sshd\[7038\]: Invalid user !@qwaszx from 95.110.173.147 Oct 4 17:53:26 auw2 sshd\[7038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.173.147 Oct 4 17:53:29 auw2 sshd\[7038\]: Failed password for invalid user !@qwaszx from 95.110.173.147 port 51600 ssh2 Oct 4 17:57:12 auw2 sshd\[7402\]: Invalid user D3bi4n2017 from 95.110.173.147 Oct 4 17:57:12 auw2 sshd\[7402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.110.173.147	2019-10-05 12:03:44
119.75.24.68	attackspambots	2019-10-04T21:29:14.560654abusebot.cloudsearch.cf sshd\[31584\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.75.24.68 user=root	2019-10-05 08:25:02
140.143.241.251	attackbots	Oct 5 06:52:00 www sshd\[2814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.241.251 user=root Oct 5 06:52:02 www sshd\[2814\]: Failed password for root from 140.143.241.251 port 55864 ssh2 Oct 5 06:56:34 www sshd\[2887\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.241.251 user=root ...	2019-10-05 12:26:45
106.13.120.46	attackbots	Oct 5 05:06:26 microserver sshd[17292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.46 user=root Oct 5 05:06:28 microserver sshd[17292]: Failed password for root from 106.13.120.46 port 38618 ssh2 Oct 5 05:10:29 microserver sshd[17909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.46 user=root Oct 5 05:10:31 microserver sshd[17909]: Failed password for root from 106.13.120.46 port 43604 ssh2 Oct 5 05:14:34 microserver sshd[18151]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.46 user=root Oct 5 05:26:36 microserver sshd[20087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.120.46 user=root Oct 5 05:26:38 microserver sshd[20087]: Failed password for root from 106.13.120.46 port 35292 ssh2 Oct 5 05:30:43 microserver sshd[20710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid	2019-10-05 12:21:18
114.29.237.139	attackspam	Telnet Server BruteForce Attack	2019-10-05 12:08:54
122.155.223.120	attackspam	2019-10-04T23:46:26.0916671495-001 sshd\[50391\]: Invalid user 1QAZXSW23EDC from 122.155.223.120 port 39318 2019-10-04T23:46:26.1000421495-001 sshd\[50391\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.120 2019-10-04T23:46:28.2609431495-001 sshd\[50391\]: Failed password for invalid user 1QAZXSW23EDC from 122.155.223.120 port 39318 ssh2 2019-10-04T23:47:35.1915311495-001 sshd\[50480\]: Invalid user 1QAZXSW23EDC from 122.155.223.120 port 45738 2019-10-04T23:47:35.1994651495-001 sshd\[50480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.155.223.120 2019-10-04T23:47:37.1647661495-001 sshd\[50480\]: Failed password for invalid user 1QAZXSW23EDC from 122.155.223.120 port 45738 ssh2 ...	2019-10-05 12:15:46
40.73.73.130	attackspambots	Oct 5 05:41:26 microserver sshd[22161]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.73.130 user=root Oct 5 05:41:27 microserver sshd[22161]: Failed password for root from 40.73.73.130 port 56826 ssh2 Oct 5 05:45:40 microserver sshd[22806]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.73.130 user=root Oct 5 05:45:42 microserver sshd[22806]: Failed password for root from 40.73.73.130 port 50832 ssh2 Oct 5 05:49:54 microserver sshd[23050]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.73.130 user=root Oct 5 06:04:06 microserver sshd[25133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.73.73.130 user=root Oct 5 06:04:08 microserver sshd[25133]: Failed password for root from 40.73.73.130 port 60122 ssh2 Oct 5 06:08:57 microserver sshd[25887]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=	2019-10-05 12:24:50
222.186.52.89	attack	Oct 5 06:59:38 server2 sshd\[26994\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers Oct 5 06:59:39 server2 sshd\[26998\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers Oct 5 06:59:40 server2 sshd\[26996\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers Oct 5 07:04:05 server2 sshd\[27382\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers Oct 5 07:04:06 server2 sshd\[27384\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers Oct 5 07:04:07 server2 sshd\[27386\]: User root from 222.186.52.89 not allowed because not listed in AllowUsers	2019-10-05 12:08:04
91.121.136.44	attack	Oct 5 03:56:58 www_kotimaassa_fi sshd[29589]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 Oct 5 03:57:00 www_kotimaassa_fi sshd[29589]: Failed password for invalid user Blue123 from 91.121.136.44 port 39068 ssh2 ...	2019-10-05 12:11:16

Recently Reported IPs

38.53.46.98	118.208.27.83	25.241.225.13	14.186.7.226
180.164.50.89	81.211.120.250	2.86.36.72	137.119.19.230
113.187.80.73	58.153.109.49	95.71.178.78	36.78.152.167
183.89.212.8	95.183.249.44	176.59.34.2	132.148.29.48
190.99.234.118	182.187.88.81	36.235.168.197	191.162.7.47