106.11.157.16 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.11.157.121	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 543446d0e963791c \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:04:30
106.11.157.154	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5410c8e579b49833 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:38:17
106.11.157.61	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 540feece8ce1e4f2 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:40:18

Type

Details

Datetime

106.11.157.121

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 543446d0e963791c | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 04:04:30

106.11.157.154

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 5410c8e579b49833 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:38:17

106.11.157.61

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 540feece8ce1e4f2 | WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 01:40:18

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.157.16
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 65172
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.157.16.			IN	A

;; AUTHORITY SECTION:
.			520	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 16:03:08 CST 2022
;; MSG SIZE  rcvd: 106

Host info

16.157.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-157-16.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
16.157.11.106.in-addr.arpa	name = shenmaspider-106-11-157-16.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.241.33.158	attackbotsspam	Automatic report BANNED IP	2020-08-07 05:24:42
2.36.136.146	attackspam	Aug 6 19:46:01 nextcloud sshd\[821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root Aug 6 19:46:03 nextcloud sshd\[821\]: Failed password for root from 2.36.136.146 port 37246 ssh2 Aug 6 19:49:55 nextcloud sshd\[5532\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=2.36.136.146 user=root	2020-08-07 05:30:19
177.152.124.23	attackspambots	2020-08-06 21:24:01,606 fail2ban.actions: WARNING [ssh] Ban 177.152.124.23	2020-08-07 05:37:52
178.43.163.52	attackbotsspam	WordPress brute force	2020-08-07 05:16:31
185.138.209.138	attackbots	Unauthorized connection attempt from IP address 185.138.209.138 on port 3389	2020-08-07 05:15:00
213.32.78.219	attackbotsspam	2020-08-06T21:39:11.437908+02:00 sshd[6128]: Failed password for root from 213.32.78.219 port 58192 ssh2	2020-08-07 05:36:17
23.96.55.135	attackspam	X-Sender-IP: 23.96.55.135 X-SID-PRA: ALLIEDMOVEH27@QUOTE.ZK1X6ESH.COM X-SID-Result: NONE X-MS-Exchange-Organization-PCL: 2 X-Microsoft-Antispam: BCL:0; X-Forefront-Antispam-Report: CIP:23.96.55.135;CTRY:US;LANG:en;SCL:0;SRV:;IPV:NLI;SFV:NSPM;H:CustomercomSatisfactlionoplusofferswcDy1.com;PTR:InfoDomainNonexistent;CAT:NONE;SFTY:;SFS:;DIR:INB;SFP:; X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Aug 2020 03:55:13.1640 (UTC)	2020-08-07 05:14:36
104.236.112.52	attack	2020-08-06T16:17:34.855296amanda2.illicoweb.com sshd\[26627\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root 2020-08-06T16:17:36.816802amanda2.illicoweb.com sshd\[26627\]: Failed password for root from 104.236.112.52 port 58344 ssh2 2020-08-06T16:20:54.060172amanda2.illicoweb.com sshd\[27365\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root 2020-08-06T16:20:55.811046amanda2.illicoweb.com sshd\[27365\]: Failed password for root from 104.236.112.52 port 55519 ssh2 2020-08-06T16:24:17.425424amanda2.illicoweb.com sshd\[28458\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.236.112.52 user=root ...	2020-08-07 05:22:14
106.51.113.15	attackspam	Aug 6 15:17:09 Tower sshd[5410]: Connection from 106.51.113.15 port 46248 on 192.168.10.220 port 22 rdomain "" Aug 6 15:17:11 Tower sshd[5410]: Failed password for root from 106.51.113.15 port 46248 ssh2 Aug 6 15:17:11 Tower sshd[5410]: Received disconnect from 106.51.113.15 port 46248:11: Bye Bye [preauth] Aug 6 15:17:11 Tower sshd[5410]: Disconnected from authenticating user root 106.51.113.15 port 46248 [preauth]	2020-08-07 05:03:10
192.35.168.251	attackspam	1596743343 - 08/07/2020 02:49:03 Host: worker-15.sfj.censys-scanner.com/192.35.168.251 Port: 6379 TCP Blocked ...	2020-08-07 05:06:23
37.49.224.192	attack	$f2bV_matches	2020-08-07 05:13:01
5.188.84.119	attackspam	0,25-01/02 [bc01/m10] PostRequest-Spammer scoring: essen	2020-08-07 05:03:24
49.236.203.163	attack	k+ssh-bruteforce	2020-08-07 05:33:28
164.68.109.69	attack	SSH break in attempt ...	2020-08-07 05:10:01
176.10.56.26	attackbots	2020-08-06 08:14:56.784809-0500 localhost smtpd[81944]: NOQUEUE: reject: RCPT from unknown[176.10.56.26]: 554 5.7.1 Service unavailable; Client host [176.10.56.26] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/176.10.56.26; from= to= proto=ESMTP helo=	2020-08-07 05:06:51

Recently Reported IPs

180.76.97.170	201.139.123.178	201.110.149.209	209.14.70.100
200.106.236.142	180.76.255.190	94.102.49.247	94.102.50.52
111.202.101.147	137.226.19.126	213.3.9.31	202.81.232.28
209.15.187.33	201.210.113.247	180.76.150.8	200.148.19.92
137.226.209.233	187.26.46.127	180.76.255.253	115.151.67.209