66.42.110.228 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States of America (the)

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
66.42.110.138	attack	(sshd) Failed SSH login from 66.42.110.138 (US/United States/66.42.110.138.vultr.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 25 23:27:35 ubnt-55d23 sshd[26465]: Invalid user postgres from 66.42.110.138 port 34212 Mar 25 23:27:37 ubnt-55d23 sshd[26465]: Failed password for invalid user postgres from 66.42.110.138 port 34212 ssh2	2020-03-26 07:31:16

Type

Details

Datetime

66.42.110.138

attack

(sshd) Failed SSH login from 66.42.110.138 (US/United States/66.42.110.138.vultr.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 25 23:27:35 ubnt-55d23 sshd[26465]: Invalid user postgres from 66.42.110.138 port 34212
Mar 25 23:27:37 ubnt-55d23 sshd[26465]: Failed password for invalid user postgres from 66.42.110.138 port 34212 ssh2

2020-03-26 07:31:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 66.42.110.228
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26936
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;66.42.110.228.			IN	A

;; AUTHORITY SECTION:
.			29	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025030601 1800 900 604800 86400

;; Query time: 63 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 07 04:22:17 CST 2025
;; MSG SIZE  rcvd: 106

Host info

228.110.42.66.in-addr.arpa domain name pointer 66.42.110.228.vultrusercontent.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
228.110.42.66.in-addr.arpa	name = 66.42.110.228.vultrusercontent.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
180.183.70.129	attackspam	[portscan] Port scan	2020-08-04 16:02:13
5.188.206.197	attack	Aug 4 12:24:17 bacztwo courieresmtpd[3304]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle@andcycle.idv.tw Aug 4 12:24:25 bacztwo courieresmtpd[3869]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle Aug 4 12:24:25 bacztwo courieresmtpd[3869]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle Aug 4 13:10:41 bacztwo courieresmtpd[8050]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle-bitcointalk.org@andcycle.idv.tw Aug 4 13:10:41 bacztwo courieresmtpd[8050]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle-bitcointalk.org@andcycle.idv.tw Aug 4 13:10:48 bacztwo courieresmtpd[9169]: error,relay=::ffff:5.188.206.197,msg="535 Authentication failed.",cmd: AUTH LOGIN andcycle-bitcointalk.org Aug 4 13:10:48 bacztwo courieresmtpd[9169]: error,relay=::ffff:5.188.206.197,msg="535 A ...	2020-08-04 16:13:04
183.12.243.253	attackbotsspam	Aug 4 05:43:02 mail.srvfarm.net postfix/smtpd[1212710]: NOQUEUE: reject: RCPT from unknown[183.12.243.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo= Aug 4 05:43:02 mail.srvfarm.net postfix/smtpd[1212710]: lost connection after RCPT from unknown[183.12.243.253] Aug 4 05:43:06 mail.srvfarm.net postfix/smtpd[1212444]: NOQUEUE: reject: RCPT from unknown[183.12.243.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo= Aug 4 05:43:06 mail.srvfarm.net postfix/smtpd[1212444]: lost connection after RCPT from unknown[183.12.243.253] Aug 4 05:43:12 mail.srvfarm.net postfix/smtpd[1214321]: NOQUEUE: reject: RCPT from unknown[183.12.243.253]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=SMTP helo=	2020-08-04 16:07:54
150.109.150.77	attack	Aug 4 07:34:31 *** sshd[12648]: User root from 150.109.150.77 not allowed because not listed in AllowUsers	2020-08-04 15:54:13
194.34.134.9	attackbots	Port Scan ...	2020-08-04 15:42:19
177.87.68.210	attackspam	Aug 4 05:19:42 mail.srvfarm.net postfix/smtpd[1212717]: warning: unknown[177.87.68.210]: SASL PLAIN authentication failed: Aug 4 05:19:42 mail.srvfarm.net postfix/smtpd[1212717]: lost connection after AUTH from unknown[177.87.68.210] Aug 4 05:21:11 mail.srvfarm.net postfix/smtpd[1214276]: warning: unknown[177.87.68.210]: SASL PLAIN authentication failed: Aug 4 05:21:12 mail.srvfarm.net postfix/smtpd[1214276]: lost connection after AUTH from unknown[177.87.68.210] Aug 4 05:29:31 mail.srvfarm.net postfix/smtpd[1212444]: warning: unknown[177.87.68.210]: SASL PLAIN authentication failed:	2020-08-04 16:09:06
181.164.132.26	attackbots	Aug 4 07:58:12 pkdns2 sshd\[59509\]: Failed password for root from 181.164.132.26 port 35926 ssh2Aug 4 07:59:52 pkdns2 sshd\[59553\]: Failed password for root from 181.164.132.26 port 47500 ssh2Aug 4 08:01:30 pkdns2 sshd\[59672\]: Failed password for root from 181.164.132.26 port 59086 ssh2Aug 4 08:03:14 pkdns2 sshd\[59739\]: Failed password for root from 181.164.132.26 port 42426 ssh2Aug 4 08:05:24 pkdns2 sshd\[59859\]: Failed password for root from 181.164.132.26 port 54000 ssh2Aug 4 08:07:29 pkdns2 sshd\[59933\]: Failed password for root from 181.164.132.26 port 37342 ssh2 ...	2020-08-04 16:13:51
153.35.93.145	attack	2020-08-04 05:54:10,393 fail2ban.actions: WARNING [ssh] Ban 153.35.93.145	2020-08-04 15:40:49
177.54.111.177	attackbotsspam	Attempted Brute Force (dovecot)	2020-08-04 16:14:14
112.120.72.193	attackbotsspam	Aug 3 23:50:15 r.ca sshd[4160]: Failed password for admin from 112.120.72.193 port 46499 ssh2	2020-08-04 15:47:36
150.109.57.43	attack	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-04 15:41:39
94.200.247.166	attack	Aug 4 10:11:48 lukav-desktop sshd\[22464\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root Aug 4 10:11:51 lukav-desktop sshd\[22464\]: Failed password for root from 94.200.247.166 port 18323 ssh2 Aug 4 10:16:02 lukav-desktop sshd\[15951\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root Aug 4 10:16:04 lukav-desktop sshd\[15951\]: Failed password for root from 94.200.247.166 port 45434 ssh2 Aug 4 10:20:17 lukav-desktop sshd\[16008\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.200.247.166 user=root	2020-08-04 15:59:25
59.47.229.130	attack	Aug 4 00:55:16 george sshd[29942]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.47.229.130 user=root Aug 4 00:55:18 george sshd[29942]: Failed password for root from 59.47.229.130 port 36612 ssh2 Aug 4 00:58:55 george sshd[31318]: Invalid user 7890 from 59.47.229.130 port 36650 Aug 4 00:58:55 george sshd[31318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.47.229.130 Aug 4 00:58:56 george sshd[31318]: Failed password for invalid user 7890 from 59.47.229.130 port 36650 ssh2 ...	2020-08-04 16:18:10
115.178.48.38	attackspambots	$f2bV_matches	2020-08-04 15:44:33
134.209.24.61	attackbots	Aug 4 04:52:38 vps46666688 sshd[30791]: Failed password for root from 134.209.24.61 port 52544 ssh2 ...	2020-08-04 16:16:30

Recently Reported IPs

79.156.124.25	167.204.224.100	151.137.47.223	173.6.56.199
107.163.225.151	73.253.86.26	128.199.182.93	93.26.147.16
172.155.113.200	72.5.189.212	210.17.74.24	86.61.208.28
82.143.89.238	135.133.108.181	92.202.34.66	97.173.63.209
130.180.6.208	74.135.240.197	240.241.175.89	174.88.47.149