66.249.75.221 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	WEB_SERVER 403 Forbidden	2020-01-20 22:22:40
attackspambots	HTTP 403 XSS Attempt	2019-11-08 03:11:25

Comments on same subnet:

IP	Type	Details	Datetime
66.249.75.93	attack	Automatic report - Banned IP Access	2020-10-07 06:20:43
66.249.75.31	attackspambots	Automatic report - Banned IP Access	2020-10-07 03:34:02
66.249.75.31	attackspambots	Automatic report - Banned IP Access	2020-10-06 19:35:55
66.249.75.93	attackbotsspam	Automatic report - Banned IP Access	2020-10-06 14:22:15
66.249.75.31	attackspambots	Automatic report - Banned IP Access	2020-10-06 02:42:10
66.249.75.31	attackspambots	Automatic report - Banned IP Access	2020-10-05 18:31:33
66.249.75.170	attackbotsspam	Sep 13 18:57:52 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=27605 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:53 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28028 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:55 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28878 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:59 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=29903 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep ...	2020-09-14 21:38:48
66.249.75.170	attackbots	Sep 13 18:57:52 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=27605 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:53 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28028 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:55 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28878 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:59 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=29903 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep ...	2020-09-14 13:32:29
66.249.75.170	attack	Sep 13 18:57:52 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=27605 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:53 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28028 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:55 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=28878 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep 13 18:57:59 hidden kernel: [UFW BLOCK] IN=ens192 OUT= MAC=00:50:56:bc:13:b8:00:07:7d:bd:41:7f:08:00 SRC=66.249.75.170 DST=217.198.117.163 LEN=60 TOS=0x00 PREC=0x00 TTL=105 ID=29903 PROTO=TCP SPT=50535 DPT=8080 WINDOW=65535 RES=0x00 SYN URGP=0 Sep ...	2020-09-14 05:30:52
66.249.75.4	attackspambots	Automatic report - Banned IP Access	2020-08-29 05:19:45
66.249.75.206	attackbots	Automatic report - Banned IP Access	2020-08-28 20:31:02
66.249.75.21	attack	Automatic report - Banned IP Access	2020-08-07 17:24:26
66.249.75.95	attackspambots	Automatic report - Banned IP Access	2020-08-05 20:29:57
66.249.75.1	attack	Automatic report - Banned IP Access	2020-07-27 22:11:46
66.249.75.82	attackbots	Automatic report - Banned IP Access	2020-07-23 18:19:23

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.249.75.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43087
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;66.249.75.221.			IN	A

;; AUTHORITY SECTION:
.			459	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110700 1800 900 604800 86400

;; Query time: 115 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 08 03:11:22 CST 2019
;; MSG SIZE  rcvd: 117

Host info

221.75.249.66.in-addr.arpa domain name pointer crawl-66-249-75-221.googlebot.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
221.75.249.66.in-addr.arpa	name = crawl-66-249-75-221.googlebot.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.197.176.130	attack	Jan 1 16:54:58 MK-Soft-VM7 sshd[18659]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.176.130 Jan 1 16:55:00 MK-Soft-VM7 sshd[18659]: Failed password for invalid user seed from 138.197.176.130 port 34117 ssh2 ...	2020-01-02 00:38:01
50.67.178.164	attack	Jan 1 13:30:41 firewall sshd[25045]: Failed password for invalid user stocks from 50.67.178.164 port 60728 ssh2 Jan 1 13:34:42 firewall sshd[25122]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.67.178.164 user=backup Jan 1 13:34:44 firewall sshd[25122]: Failed password for backup from 50.67.178.164 port 34278 ssh2 ...	2020-01-02 00:41:20
159.203.22.237	attack	Jan 1 15:52:54 MK-Soft-Root2 sshd[31173]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.22.237 Jan 1 15:52:56 MK-Soft-Root2 sshd[31173]: Failed password for invalid user server from 159.203.22.237 port 46562 ssh2 ...	2020-01-02 00:05:20
91.235.198.219	attackbotsspam	Jan 1 15:52:55 grey postfix/smtpd\[23589\]: NOQUEUE: reject: RCPT from unknown\[91.235.198.219\]: 554 5.7.1 Service unavailable\; Client host \[91.235.198.219\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[91.235.198.219\]\; from=\ to=\ proto=ESMTP helo=\<\[91.235.198.219\]\> ...	2020-01-02 00:05:38
218.70.174.23	attackbots	Jan 1 15:42:53 herz-der-gamer sshd[10092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.70.174.23 user=root Jan 1 15:42:55 herz-der-gamer sshd[10092]: Failed password for root from 218.70.174.23 port 38956 ssh2 Jan 1 15:52:22 herz-der-gamer sshd[13923]: Invalid user mingchu from 218.70.174.23 port 56575 ...	2020-01-02 00:22:42
196.52.43.100	attackspam	Unauthorized connection attempt detected from IP address 196.52.43.100 to port 5904	2020-01-02 00:08:33
79.136.86.101	attackbots	Unauthorized connection attempt detected from IP address 79.136.86.101 to port 23	2020-01-02 00:32:17
181.81.114.23	attackbots	Automatic report - Port Scan Attack	2020-01-02 00:10:51
201.163.207.228	attackbotsspam	Unauthorized connection attempt detected from IP address 201.163.207.228 to port 3389	2020-01-02 00:11:20
165.22.38.221	attackspambots	Jan 1 16:54:36 dedicated sshd[10131]: Invalid user karre from 165.22.38.221 port 49168	2020-01-02 00:28:54
106.54.113.118	attack	Jan 1 05:57:40 web9 sshd\[6867\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118 user=root Jan 1 05:57:42 web9 sshd\[6867\]: Failed password for root from 106.54.113.118 port 45474 ssh2 Jan 1 05:59:02 web9 sshd\[7078\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118 user=backup Jan 1 05:59:05 web9 sshd\[7078\]: Failed password for backup from 106.54.113.118 port 53894 ssh2 Jan 1 06:00:20 web9 sshd\[7279\]: Invalid user tecusan from 106.54.113.118 Jan 1 06:00:20 web9 sshd\[7279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.113.118	2020-01-02 00:13:07
45.55.88.94	attackspambots	SSH bruteforce (Triggered fail2ban)	2020-01-02 00:33:50
213.85.3.250	attackbotsspam	invalid user	2020-01-02 00:15:36
82.102.173.83	attackspam	Jan 1 15:52:23 debian-2gb-nbg1-2 kernel: \[149675.502826\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=82.102.173.83 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x60 TTL=244 ID=54254 PROTO=TCP SPT=40228 DPT=8280 WINDOW=1024 RES=0x00 SYN URGP=0	2020-01-02 00:20:40
185.203.241.181	attackspambots	Automatic report - Port Scan	2020-01-02 00:42:40

Recently Reported IPs

160.176.190.78	188.243.100.4	63.80.184.116	54.145.234.241
81.28.100.97	85.10.240.253	200.163.197.23	118.91.167.154
149.202.198.86	201.179.46.75	60.169.115.59	207.46.13.51
123.20.183.105	159.192.192.252	37.215.90.149	93.84.86.69
46.172.69.163	46.101.9.5	106.13.82.224	191.251.203.137