106.14.12.1 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.14.120.139	attackspambots	106.14.120.139 - - [20/Jul/2020:06:08:27 +0100] "POST /wp-login.php HTTP/1.1" 200 2109 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.14.120.139 - - [20/Jul/2020:06:08:30 +0100] "POST /wp-login.php HTTP/1.1" 200 2155 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 106.14.120.139 - - [20/Jul/2020:06:08:31 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-07-20 20:31:06
106.14.122.2	attackspam	web Attack on Website	2019-11-30 06:51:44
106.14.126.41	attackspambots	port scan and connect, tcp 80 (http)	2019-11-09 07:11:39
106.14.122.59	attack	37215/tcp [2019-08-16]1pkt	2019-08-16 14:04:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.14.12.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1404
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.14.12.1.			IN	A

;; AUTHORITY SECTION:
.			156	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 14:29:54 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 1.12.14.106.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.12.14.106.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
103.216.195.96	attackbots	[Sat Aug 01 19:18:36.325068 2020] [:error] [pid 7356:tid 139925676984064] [client 103.216.195.96:38249] [client 103.216.195.96] ModSecurity: Access denied with code 403 (phase 4). Pattern match "^5\\\\d{2}$" at RESPONSE_STATUS. [file "/etc/modsecurity/owasp-modsecurity-crs-3.2.0/rules/RESPONSE-950-DATA-LEAKAGES.conf"] [line "118"] [id "950100"] [msg "The Application Returned a 500-Level Status Code"] [data "Matched Data: 500 found within RESPONSE_STATUS: 500"] [severity "ERROR"] [ver "OWASP_CRS/3.2.0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-disclosure"] [tag "WASCTC/WASC-13"] [tag "OWASP_TOP_10/A6"] [tag "PCI/6.5.6"] [tag "paranoia-level/2"] [hostname "karangploso.jatim.bmkg.go.id"] [uri "/index.php/prakiraan-cuaca-daerah-malang-dan-batu-seminggu-ke-depan"] [unique_id "XyVdnFHKUUcACO3wcKKSnQAB7wM"], referer: android-app://com.google.android.googlequicksearchbox ...	2020-08-02 01:26:30
188.19.179.245	attackspambots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 01:26:10
122.173.218.130	attackspambots	Email rejected due to spam filtering	2020-08-02 01:57:15
5.206.227.136	attackbotsspam	port 23	2020-08-02 01:59:36
181.122.156.250	attack	2020-08-01 07:04:43.283331-0500 localhost smtpd[51711]: NOQUEUE: reject: RCPT from unknown[181.122.156.250]: 554 5.7.1 Service unavailable; Client host [181.122.156.250] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/181.122.156.250; from= to= proto=ESMTP helo=	2020-08-02 01:54:26
181.22.100.81	attackbotsspam	Email rejected due to spam filtering	2020-08-02 01:50:28
189.241.241.113	attackspam	Aug 1 19:33:43 [host] sshd[25451]: pam_unix(sshd: Aug 1 19:33:46 [host] sshd[25451]: Failed passwor Aug 1 19:41:45 [host] sshd[25995]: pam_unix(sshd:	2020-08-02 02:01:02
188.137.72.80	attackspambots	Aug 1 12:17:56 vps-51d81928 sshd[372355]: Failed password for root from 188.137.72.80 port 25621 ssh2 Aug 1 12:18:03 vps-51d81928 sshd[372359]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.137.72.80 user=root Aug 1 12:18:05 vps-51d81928 sshd[372359]: Failed password for root from 188.137.72.80 port 26546 ssh2 Aug 1 12:18:13 vps-51d81928 sshd[372361]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.137.72.80 user=root Aug 1 12:18:15 vps-51d81928 sshd[372361]: Failed password for root from 188.137.72.80 port 27634 ssh2 ...	2020-08-02 01:45:48
149.56.13.111	attackbots	Aug 1 17:59:20 minden010 sshd[23310]: Failed password for root from 149.56.13.111 port 58907 ssh2 Aug 1 18:03:32 minden010 sshd[24316]: Failed password for root from 149.56.13.111 port 36338 ssh2 ...	2020-08-02 01:27:39
34.71.129.32	attack	SSH Brute-Forcing (server2)	2020-08-02 01:34:29
23.236.210.217	attack	REQUESTED PAGE: /wp-json/contact-form-7/v1/contact-forms/4/feedback	2020-08-02 01:46:42
125.116.105.164	attack	Unauthorized connection attempt detected from IP address 125.116.105.164 to port 23	2020-08-02 01:25:21
159.89.196.75	attackspam	Aug 1 08:49:54 ny01 sshd[31340]: Failed password for root from 159.89.196.75 port 53380 ssh2 Aug 1 08:53:58 ny01 sshd[31806]: Failed password for root from 159.89.196.75 port 54586 ssh2	2020-08-02 01:30:27
3.250.25.245	attackspam	/.s3cfg	2020-08-02 02:00:07
42.113.175.44	attackbotsspam	Telnet/23 MH Probe, Scan, BF, Hack -	2020-08-02 01:35:50

Recently Reported IPs

106.14.12.240	106.14.120.149	106.14.12.68	106.14.120.176
106.14.120.20	106.14.12.93	106.14.120.36	106.14.120.182
106.14.120.9	106.14.2.20	106.14.121.106	106.14.121.111
106.14.120.47	106.14.121.14	106.14.121.13	106.14.121.140
106.14.121.167	106.14.121.156	106.14.121.154	106.14.121.169