66.134.104.162

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: Megapath Corporation

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 66.134.104.162 to port 445	2020-01-16 04:22:36

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.134.104.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29743
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.134.104.162.			IN	A

;; AUTHORITY SECTION:
.			252	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011501 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 16 04:22:33 CST 2020
;; MSG SIZE  rcvd: 118

Host info

162.104.134.66.in-addr.arpa domain name pointer h-66-134-104-162.phnd.az.globalcapacity.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
162.104.134.66.in-addr.arpa	name = h-66-134-104-162.phnd.az.globalcapacity.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
36.74.45.174	attackbotsspam	Unauthorized connection attempt from IP address 36.74.45.174 on Port 445(SMB)	2019-09-24 04:37:00
31.135.182.92	attackspambots	Unauthorized connection attempt from IP address 31.135.182.92 on Port 445(SMB)	2019-09-24 04:52:31
118.238.25.69	attackspam	Sep 23 10:59:02 web9 sshd\[28406\]: Invalid user qwe123 from 118.238.25.69 Sep 23 10:59:02 web9 sshd\[28406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.238.25.69 Sep 23 10:59:03 web9 sshd\[28406\]: Failed password for invalid user qwe123 from 118.238.25.69 port 52909 ssh2 Sep 23 11:03:47 web9 sshd\[29329\]: Invalid user please from 118.238.25.69 Sep 23 11:03:47 web9 sshd\[29329\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.238.25.69	2019-09-24 05:05:06
92.247.201.112	attack	Sep 23 13:17:49 mail postfix/postscreen[11383]: PREGREET 36 after 0.84 from [92.247.201.112]:41268: EHLO 92-247-201-112.spectrumnet.bg ...	2019-09-24 04:47:56
117.247.84.194	attackbotsspam	Unauthorized connection attempt from IP address 117.247.84.194 on Port 445(SMB)	2019-09-24 04:29:05
92.242.240.34	attackbots	proto=tcp . spt=41657 . dpt=25 . (listed on MailSpike (spam wave plus L3-L5) also unsubscore and rbldns-ru) (531)	2019-09-24 05:05:20
188.165.210.176	attack	Sep 23 22:19:37 SilenceServices sshd[25157]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.210.176 Sep 23 22:19:38 SilenceServices sshd[25157]: Failed password for invalid user minecraft from 188.165.210.176 port 41738 ssh2 Sep 23 22:23:11 SilenceServices sshd[26135]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.165.210.176	2019-09-24 04:42:45
122.252.241.94	attackspambots	Unauthorized connection attempt from IP address 122.252.241.94 on Port 445(SMB)	2019-09-24 04:40:38
113.163.168.61	attack	Unauthorized connection attempt from IP address 113.163.168.61 on Port 445(SMB)	2019-09-24 04:49:15
185.166.215.101	attack	2019-09-23T14:28:21.933308 sshd[26187]: Invalid user cancri from 185.166.215.101 port 40038 2019-09-23T14:28:21.947366 sshd[26187]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.166.215.101 2019-09-23T14:28:21.933308 sshd[26187]: Invalid user cancri from 185.166.215.101 port 40038 2019-09-23T14:28:23.528838 sshd[26187]: Failed password for invalid user cancri from 185.166.215.101 port 40038 ssh2 2019-09-23T14:32:41.710617 sshd[26285]: Invalid user rtkit from 185.166.215.101 port 54376 ...	2019-09-24 04:41:21
80.218.89.85	attackspam	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/80.218.89.85/ DE - 1H : (143) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : DE NAME ASN : ASN6830 IP : 80.218.89.85 CIDR : 80.218.0.0/16 PREFIX COUNT : 755 UNIQUE IP COUNT : 12137216 WYKRYTE ATAKI Z ASN6830 : 1H - 3 3H - 6 6H - 12 12H - 21 24H - 25 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-24 04:36:37
78.164.151.170	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2019-09-24 04:39:04
117.103.5.186	attackbotsspam	proto=tcp . spt=50288 . dpt=25 . (listed on Blocklist de Sep 22) (537)	2019-09-24 04:40:00
185.52.2.165	attackbotsspam	Attempted WordPress login: "GET /wp-login.php"	2019-09-24 04:34:32
77.247.110.127	attackbotsspam	\[2019-09-23 16:24:24\] NOTICE\[2270\] chan_sip.c: Registration from '"1090" \' failed for '77.247.110.127:6086' - Wrong password \[2019-09-23 16:24:24\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T16:24:24.303-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1090",SessionID="0x7fcd8d1544c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.127/6086",Challenge="10d7c8a9",ReceivedChallenge="10d7c8a9",ReceivedHash="8fe586241ded352a518c37d07757f659" \[2019-09-23 16:24:24\] NOTICE\[2270\] chan_sip.c: Registration from '"1090" \' failed for '77.247.110.127:6086' - Wrong password \[2019-09-23 16:24:24\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-23T16:24:24.400-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1090",SessionID="0x7fcd8c57a408",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-09-24 04:51:43

Recently Reported IPs

5.202.144.239	5.202.37.101	71.138.197.202	117.66.33.84
201.253.222.145	201.119.210.226	200.194.14.73	183.60.100.205
188.215.31.9	191.8.138.150	99.230.82.43	190.144.60.138
189.142.76.101	186.47.77.214	186.14.211.72	185.220.44.251
152.44.46.220	179.187.239.51	189.172.145.143	177.102.49.197