106.11.159.132

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.11.159.109	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436d4ba9e4fe819 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:11:43
106.11.159.82	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415d7cce96f990b \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:07:14
106.11.159.142	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410032158f8e7c9 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: YisouSpider \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:58:39
106.11.159.49	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541680b9ee8feef2 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:43:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.159.132
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9188
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.159.132.			IN	A

;; AUTHORITY SECTION:
.			485	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022063001 1800 900 604800 86400

;; Query time: 66 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 01 09:34:34 CST 2022
;; MSG SIZE  rcvd: 107

Host info

132.159.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-159-132.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
132.159.11.106.in-addr.arpa	name = shenmaspider-106-11-159-132.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
61.69.254.46	attackspam	Oct 26 09:25:54 areeb-Workstation sshd[9137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.69.254.46 Oct 26 09:25:56 areeb-Workstation sshd[9137]: Failed password for invalid user odete from 61.69.254.46 port 55704 ssh2 ...	2019-10-26 12:07:53
218.246.5.115	attackbotsspam	2019-10-25T23:09:48.278974abusebot-2.cloudsearch.cf sshd\[20052\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.246.5.115 user=root	2019-10-26 08:24:28
106.12.209.59	attack	(sshd) Failed SSH login from 106.12.209.59 (CN/China/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 25 22:55:38 andromeda sshd[28678]: Invalid user anirudh from 106.12.209.59 port 45488 Oct 25 22:55:40 andromeda sshd[28678]: Failed password for invalid user anirudh from 106.12.209.59 port 45488 ssh2 Oct 25 23:09:21 andromeda sshd[30177]: Did not receive identification string from 106.12.209.59 port 60118	2019-10-26 08:11:19
193.32.161.48	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 2323 proto: TCP cat: Misc Attack	2019-10-26 08:03:32
223.196.83.98	attackbotsspam	Oct 26 05:54:39 mail sshd[18462]: Invalid user aeok from 223.196.83.98 Oct 26 05:54:39 mail sshd[18462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.196.83.98 Oct 26 05:54:39 mail sshd[18462]: Invalid user aeok from 223.196.83.98 Oct 26 05:54:41 mail sshd[18462]: Failed password for invalid user aeok from 223.196.83.98 port 38536 ssh2 ...	2019-10-26 12:09:50
193.32.160.151	attackbotsspam	Oct 26 05:58:52 server postfix/smtpd[15407]: NOQUEUE: reject: RCPT from unknown[193.32.160.151]: 554 5.7.1 Service unavailable; Client host [193.32.160.151] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL462197; from= to= proto=ESMTP helo=<[193.32.160.150]> Oct 26 05:58:52 server postfix/smtpd[15407]: NOQUEUE: reject: RCPT from unknown[193.32.160.151]: 554 5.7.1 Service unavailable; Client host [193.32.160.151] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/sbl/query/SBL462197; from= to= proto=ESMTP helo=<[193.32.160.150]>	2019-10-26 12:10:36
117.50.46.176	attackspam	F2B jail: sshd. Time: 2019-10-26 05:54:56, Reported by: VKReport	2019-10-26 12:02:00
118.24.173.104	attackspam	SSH Brute Force, server-1 sshd[17804]: Failed password for root from 118.24.173.104 port 41881 ssh2	2019-10-26 08:23:44
217.113.21.168	attack	ET SCAN Suspicious inbound to MSSQL port 1433 - port: 1433 proto: TCP cat: Potentially Bad Traffic	2019-10-26 08:02:31
185.209.0.83	attackbots	10/26/2019-01:02:19.788541 185.209.0.83 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-10-26 08:04:20
185.156.73.14	attackspambots	firewall-block, port(s): 8862/tcp, 33706/tcp, 33707/tcp, 33708/tcp, 40048/tcp, 40049/tcp, 40050/tcp, 40814/tcp	2019-10-26 08:08:31
222.186.174.18	attackspam	Oct 26 05:50:12 eventyay sshd[28547]: Failed password for root from 222.186.174.18 port 62832 ssh2 Oct 26 05:55:13 eventyay sshd[28587]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.174.18 Oct 26 05:55:16 eventyay sshd[28587]: Failed password for invalid user support from 222.186.174.18 port 49289 ssh2 ...	2019-10-26 12:01:22
14.169.195.3	attackspambots	Oct 25 16:25:55 web1 postfix/smtpd[14882]: warning: unknown[14.169.195.3]: SASL PLAIN authentication failed: authentication failure ...	2019-10-26 08:22:32
60.184.181.253	attack	22/tcp [2019-10-25]1pkt	2019-10-26 08:24:01
175.214.123.227	attackspam	Automatic report - Banned IP Access	2019-10-26 12:12:18

Recently Reported IPs

180.76.167.124	180.76.88.205	169.229.183.156	180.76.63.175
180.76.75.120	180.76.90.147	180.76.102.110	41.74.129.145
138.201.137.230	150.136.56.234	169.229.141.116	137.226.83.45
200.7.168.217	24.155.173.43	180.76.88.68	106.11.155.122
180.76.73.244	73.108.197.89	180.76.178.215	180.76.127.233