106.11.159.216

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.11.159.109	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436d4ba9e4fe819 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:11:43
106.11.159.82	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415d7cce96f990b \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:07:14
106.11.159.142	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410032158f8e7c9 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: YisouSpider \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:58:39
106.11.159.49	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541680b9ee8feef2 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:43:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.159.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9068
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.159.216.			IN	A

;; AUTHORITY SECTION:
.			338	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022062700 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jun 27 16:51:44 CST 2022
;; MSG SIZE  rcvd: 107

Host info

216.159.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-159-216.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
216.159.11.106.in-addr.arpa	name = shenmaspider-106-11-159-216.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.25.231.17	attack	Sep 27 02:12:12 hcbb sshd\[2960\]: Invalid user tl from 118.25.231.17 Sep 27 02:12:12 hcbb sshd\[2960\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.231.17 Sep 27 02:12:14 hcbb sshd\[2960\]: Failed password for invalid user tl from 118.25.231.17 port 43832 ssh2 Sep 27 02:15:57 hcbb sshd\[3235\]: Invalid user admin from 118.25.231.17 Sep 27 02:15:57 hcbb sshd\[3235\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.231.17	2019-09-27 20:23:41
77.247.110.135	attackbotsspam	\[2019-09-27 07:35:33\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-27T07:35:33.416-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="2045701148333554002",SessionID="0x7f1e1c8be8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.135/57586",ACLName="no_extension_match" \[2019-09-27 07:35:51\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-27T07:35:51.717-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1604601148857315011",SessionID="0x7f1e1c2bed58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.135/57168",ACLName="no_extension_match" \[2019-09-27 07:36:01\] SECURITY\[2006\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-27T07:36:01.907-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="1166801148833566007",SessionID="0x7f1e1c1e96b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.135/52578",	2019-09-27 19:41:24
51.15.95.170	attackspam	404 NOT FOUND	2019-09-27 20:09:06
115.238.249.100	attackbots	Sep 27 11:54:38 vps01 sshd[31743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.238.249.100 Sep 27 11:54:40 vps01 sshd[31743]: Failed password for invalid user saurabh from 115.238.249.100 port 34324 ssh2	2019-09-27 19:50:38
83.171.252.54	attackspam	4.652.971,55-03/02 [bc18/m65] concatform PostRequest-Spammer scoring: Lusaka01	2019-09-27 20:24:30
173.249.15.49	attackspam	Sep 27 12:54:55 vps647732 sshd[12400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.15.49 Sep 27 12:54:57 vps647732 sshd[12400]: Failed password for invalid user admin from 173.249.15.49 port 52232 ssh2 ...	2019-09-27 20:04:51
177.8.244.38	attackspambots	2019-09-27T11:52:56.147261abusebot-8.cloudsearch.cf sshd\[8198\]: Invalid user sinus from 177.8.244.38 port 52528	2019-09-27 20:09:30
59.91.224.32	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 27-09-2019 04:45:21.	2019-09-27 19:57:24
103.14.45.98	attack	2019-09-26 22:45:02 H=(looneytours.it) [103.14.45.98]:55237 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/103.14.45.98) 2019-09-26 22:45:03 H=(looneytours.it) [103.14.45.98]:55237 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/103.14.45.98) 2019-09-26 22:45:04 H=(looneytours.it) [103.14.45.98]:55237 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.3, 127.0.0.4) (https://www.spamhaus.org/query/ip/103.14.45.98) ...	2019-09-27 20:09:54
125.26.169.17	attackbotsspam	Automatic report - Port Scan Attack	2019-09-27 19:46:30
59.3.71.222	attack	Sep 27 12:45:40 XXX sshd[44888]: Invalid user ofsaa from 59.3.71.222 port 33074	2019-09-27 19:35:50
51.38.80.173	attack	Invalid user postgres from 51.38.80.173 port 51920	2019-09-27 20:08:12
14.49.38.114	attack	Sep 26 17:58:17 lcdev sshd\[13426\]: Invalid user artwork from 14.49.38.114 Sep 26 17:58:17 lcdev sshd\[13426\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114 Sep 26 17:58:19 lcdev sshd\[13426\]: Failed password for invalid user artwork from 14.49.38.114 port 38752 ssh2 Sep 26 18:03:03 lcdev sshd\[13775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.49.38.114 user=root Sep 26 18:03:05 lcdev sshd\[13775\]: Failed password for root from 14.49.38.114 port 50760 ssh2	2019-09-27 20:16:11
62.99.132.170	attack	Sep 27 01:50:21 TORMINT sshd\[13936\]: Invalid user yjlo from 62.99.132.170 Sep 27 01:50:21 TORMINT sshd\[13936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.99.132.170 Sep 27 01:50:23 TORMINT sshd\[13936\]: Failed password for invalid user yjlo from 62.99.132.170 port 60108 ssh2 ...	2019-09-27 19:35:37
103.42.255.104	attackspam	SPF Fail sender not permitted to send mail for @2lmn.com / Sent mail to target address hacked/leaked from abandonia in 2016	2019-09-27 20:12:03

Recently Reported IPs

137.226.133.93	137.226.70.19	137.226.88.45	169.229.210.136
137.226.221.118	169.229.188.104	172.105.186.143	180.76.138.54
137.226.50.27	80.82.77.47	106.11.152.72	218.30.103.124
218.30.103.108	218.30.103.68	123.126.113.99	222.228.67.135
137.226.222.79	169.229.214.127	183.157.173.153	169.229.62.151