106.11.159.80 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.11.159.109	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5436d4ba9e4fe819 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:11:43
106.11.159.82	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5415d7cce96f990b \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:07:14
106.11.159.142	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410032158f8e7c9 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: YisouSpider \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:58:39
106.11.159.49	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 541680b9ee8feef2 \| WAF_Rule_ID: f6705d4933894b0583ba1042603083f6 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 YisouSpider/5.0 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:43:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.11.159.80
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3543
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.11.159.80.			IN	A

;; AUTHORITY SECTION:
.			236	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 16:23:42 CST 2022
;; MSG SIZE  rcvd: 106

Host info

80.159.11.106.in-addr.arpa domain name pointer shenmaspider-106-11-159-80.crawl.sm.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
80.159.11.106.in-addr.arpa	name = shenmaspider-106-11-159-80.crawl.sm.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
85.185.95.130	attackspambots	Unauthorized connection attempt from IP address 85.185.95.130 on Port 445(SMB)	2020-06-01 19:32:54
106.12.100.73	attackspambots	Jun 1 09:41:22 *** sshd[15636]: User root from 106.12.100.73 not allowed because not listed in AllowUsers	2020-06-01 19:47:28
59.153.246.173	attackspambots	Unauthorized connection attempt from IP address 59.153.246.173 on Port 445(SMB)	2020-06-01 19:42:30
116.233.89.208	attackbotsspam	Unauthorized connection attempt from IP address 116.233.89.208 on Port 445(SMB)	2020-06-01 19:43:29
114.35.79.94	attackspambots	Attempted connection to port 23.	2020-06-01 20:03:55
45.178.255.105	attackspambots	2020-06-0105:44:041jfbMp-0003sg-Ix\<=info@whatsup2013.chH=\(localhost\)[90.161.89.87]:55947P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2175id=9F9A2C7F74A08FCC10155CE4206DEA96@whatsup2013.chT="Justsimplywantasmallamountofyourfocus"forgallogallegos513@gmail.com2020-06-0105:42:481jfbLY-0003mp-Ia\<=info@whatsup2013.chH=\(localhost\)[183.89.237.73]:40817P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2276id=919422717AAE81C21E1B52EA2EACEACF@whatsup2013.chT="I'mcurrentlypreparedtogetalong-lastingconnection"forjoseabravocuello@gmail.com2020-06-0105:42:231jfbLC-0003lp-Dc\<=info@whatsup2013.chH=\(localhost\)[49.236.214.53]:40986P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2100id=5154E2B1BA6E4102DEDB922AEED9EABA@whatsup2013.chT="Justsimplywantasmallamountofyourfocus"forluisdelgado17@gmail.com2020-06-0105:44:371jfbNM-0003vR-Ds\<=info@whatsup2013.chH=\(localhost\)[189.196.194.88]:5	2020-06-01 19:33:16
220.85.206.96	attack	Jun 1 19:10:17 localhost sshd[3265389]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.206.96 user=root Jun 1 19:10:19 localhost sshd[3265389]: Failed password for root from 220.85.206.96 port 60894 ssh2 ...	2020-06-01 20:03:03
134.175.120.56	attack	(pop3d) Failed POP3 login from 134.175.120.56 (CN/China/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun 1 14:50:29 ir1 dovecot[2885757]: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=134.175.120.56, lip=5.63.12.44, session=<+jjNJAOnePeGr3g4>	2020-06-01 19:59:13
176.65.176.187	attack	Attempted connection to port 445.	2020-06-01 19:58:19
111.241.99.83	attackspam	TCP (SYN) 111.241.99.83:55952 -> port 23, len 44	2020-06-01 19:38:01
36.235.213.251	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-06-01 19:52:58
106.12.90.63	attackbots	Port Scan detected! ...	2020-06-01 19:27:17
36.84.137.115	attack	Jun 1 13:17:07 our-server-hostname sshd[1846]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.84.137.115 user=r.r Jun 1 13:17:09 our-server-hostname sshd[1846]: Failed password for r.r from 36.84.137.115 port 42718 ssh2 Jun 1 13:28:14 our-server-hostname sshd[4929]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.84.137.115 user=r.r Jun 1 13:28:16 our-server-hostname sshd[4929]: Failed password for r.r from 36.84.137.115 port 38636 ssh2 Jun 1 13:32:34 our-server-hostname sshd[5886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.84.137.115 user=r.r Jun 1 13:32:36 our-server-hostname sshd[5886]: Failed password for r.r from 36.84.137.115 port 39338 ssh2 Jun 1 13:36:40 our-server-hostname sshd[6706]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.84.137.115 user=r.r Jun 1 13:36:42 our-ser........ -------------------------------	2020-06-01 19:35:36
156.217.165.200	attackspambots	TCP (SYN) 156.217.165.200:11311 -> port 23, len 44	2020-06-01 19:58:42
45.253.26.216	attack	Jun 1 05:41:33 vps639187 sshd\[13108\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.253.26.216 user=root Jun 1 05:41:35 vps639187 sshd\[13108\]: Failed password for root from 45.253.26.216 port 52660 ssh2 Jun 1 05:45:41 vps639187 sshd\[13133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.253.26.216 user=root ...	2020-06-01 19:38:50

Recently Reported IPs

117.61.0.21	218.76.87.243	27.114.128.83	2.179.67.65
45.90.60.81	103.170.55.118	116.98.0.135	209.85.210.175
103.251.83.254	68.58.233.110	43.239.85.131	49.49.43.136
79.0.11.110	117.215.200.191	5.112.210.246	115.195.125.53
85.93.123.158	201.140.7.63	123.162.169.227	54.193.126.32