106.11.159.114

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.11.159.109	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436d4ba9e4fe819 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:11:43
106.11.159.82	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415d7cce96f990b \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:07:14
106.11.159.142	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410032158f8e7c9 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: YisouSpider \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:58:39
106.11.159.49	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541680b9ee8feef2 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:43:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.159.114
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.159.114.			IN	A

;; AUTHORITY SECTION:
.			397	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062700 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 15:25:42 CST 2022
;; MSG SIZE  rcvd: 107

Host info

114.159.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-159-114.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
114.159.11.106.in-addr.arpa	name = shenmaspider-106-11-159-114.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.242.90.195	attackbots	Unauthorized connection attempt from IP address 210.242.90.195 on Port 445(SMB)	2020-09-09 03:52:57
189.180.48.216	attackbotsspam	Unauthorized connection attempt from IP address 189.180.48.216 on Port 445(SMB)	2020-09-09 04:16:16
185.220.103.7	attackspambots	Sep 8 21:20:23 buvik sshd[19879]: Failed password for root from 185.220.103.7 port 35070 ssh2 Sep 8 21:20:25 buvik sshd[19879]: Failed password for root from 185.220.103.7 port 35070 ssh2 Sep 8 21:20:28 buvik sshd[19879]: Failed password for root from 185.220.103.7 port 35070 ssh2 ...	2020-09-09 03:58:04
91.219.236.31	attackspam	91.219.236.31 has been banned for [WebApp Attack] ...	2020-09-09 03:55:37
222.186.173.142	attackbotsspam	Sep 8 21:40:35 ift sshd\[37115\]: Failed password for root from 222.186.173.142 port 4090 ssh2Sep 8 21:40:38 ift sshd\[37115\]: Failed password for root from 222.186.173.142 port 4090 ssh2Sep 8 21:40:41 ift sshd\[37115\]: Failed password for root from 222.186.173.142 port 4090 ssh2Sep 8 21:40:54 ift sshd\[37160\]: Failed password for root from 222.186.173.142 port 12266 ssh2Sep 8 21:41:05 ift sshd\[37160\]: Failed password for root from 222.186.173.142 port 12266 ssh2 ...	2020-09-09 04:10:54
5.189.155.73	attack	[N10.H2.VM2] Port Scanner Detected Blocked by UFW	2020-09-09 04:13:44
46.49.41.131	attackbots	Sep 7 20:04:56 mxgate1 sshd[20358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.49.41.131 user=r.r Sep 7 20:04:58 mxgate1 sshd[20358]: Failed password for r.r from 46.49.41.131 port 37414 ssh2 Sep 7 20:04:58 mxgate1 sshd[20358]: Connection closed by 46.49.41.131 port 37414 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=46.49.41.131	2020-09-09 04:14:17
190.202.89.199	attackspam	TCP (SYN) 190.202.89.199:49969 -> port 445, len 48	2020-09-09 04:14:32
113.179.245.234	attackbotsspam	Unauthorized connection attempt from IP address 113.179.245.234 on Port 445(SMB)	2020-09-09 04:00:28
23.129.64.215	attackbots	2020-09-08T21:26:56.374185galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:26:58.423863galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:27:01.155881galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:27:03.975970galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:27:06.529306galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:27:08.963754galaxy.wi.uni-potsdam.de sshd[27326]: Failed password for root from 23.129.64.215 port 21006 ssh2 2020-09-08T21:27:08.963898galaxy.wi.uni-potsdam.de sshd[27326]: error: maximum authentication attempts exceeded for root from 23.129.64.215 port 21006 ssh2 [preauth] 2020-09-08T21:27:08.963908galaxy.wi.uni-potsdam.de sshd[27326]: Disconnecting: Too many au ...	2020-09-09 04:13:05
45.5.68.3	attackspambots	Unauthorized connection attempt from IP address 45.5.68.3 on Port 445(SMB)	2020-09-09 03:49:07
114.247.63.190	attackspambots	Coordinated SSH brute-force attack from different IPs. pam_unix(sshd:auth):	2020-09-09 04:22:51
185.65.206.171	attackspam	[2020-09-08 15:49:32] NOTICE[1194] chan_sip.c: Registration from '"733"' failed for '185.65.206.171:19919' - Wrong password [2020-09-08 15:49:32] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-08T15:49:32.288-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="733",SessionID="0x7f2ddc6919e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.65.206.171/19919",Challenge="0cef7161",ReceivedChallenge="0cef7161",ReceivedHash="aba327ad9b94104cc95879f10dacba1e" [2020-09-08 15:49:39] NOTICE[1194] chan_sip.c: Registration from '"734"' failed for '185.65.206.171:12894' - Wrong password ...	2020-09-09 03:51:04
209.97.138.97	attackspam	209.97.138.97 - - [08/Sep/2020:18:14:17 +0100] "POST /wp-login.php HTTP/1.1" 200 2020 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 209.97.138.97 - - [08/Sep/2020:18:14:18 +0100] "POST /wp-login.php HTTP/1.1" 200 2019 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 209.97.138.97 - - [08/Sep/2020:18:14:18 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-09-09 03:50:09
191.83.43.218	attackspam	1599502520 - 09/07/2020 20:15:20 Host: 191.83.43.218/191.83.43.218 Port: 445 TCP Blocked	2020-09-09 03:56:20

Recently Reported IPs

220.181.124.184	80.82.66.220	137.226.159.11	180.76.83.200
180.76.93.149	213.96.27.109	180.76.192.172	111.202.101.244
42.236.10.168	106.120.173.107	106.120.173.61	169.229.164.224
180.76.39.209	169.229.192.254	106.120.173.47	106.120.173.50
169.229.167.93	169.229.166.66	169.229.164.213	111.202.101.87