106.59.214.207

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
106.59.214.142	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54325d785a07e811 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 02:24:44
106.59.214.147	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5414e1bb7e6ed38e \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 01:38:39

Type

Details

Datetime

106.59.214.142

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 54325d785a07e811 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 02:24:44

106.59.214.147

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5414e1bb7e6ed38e | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 01:38:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 106.59.214.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 55344
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;106.59.214.207.			IN	A

;; AUTHORITY SECTION:
.			388	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022701 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 28 02:57:45 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 207.214.59.106.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 106.59.214.207.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
217.218.190.236	attackspam	Port scan on 1 port(s): 445	2020-10-12 00:38:42
177.46.133.60	attackspambots	Unauthorized connection attempt from IP address 177.46.133.60 on Port 445(SMB)	2020-10-12 00:11:37
184.154.74.66	attackbotsspam	44818/tcp 5007/tcp 9042/tcp... [2020-08-11/10-11]35pkt,23pt.(tcp),3pt.(udp)	2020-10-12 00:39:08
190.207.249.177	attackbots	Brute forcing RDP port 3389	2020-10-12 00:12:30
103.79.54.3	attackbots	Unauthorized connection attempt from IP address 103.79.54.3 on Port 445(SMB)	2020-10-12 00:41:17
187.123.232.164	attackbotsspam	187.123.232.164 - - [11/Oct/2020:11:41:29 +0100] "POST /wp-login.php HTTP/1.1" 403 221 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 187.123.232.164 - - [11/Oct/2020:11:41:32 +0100] "POST /wp-login.php HTTP/1.1" 200 2539 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 187.123.232.164 - - [11/Oct/2020:11:41:35 +0100] "POST /wp-login.php HTTP/1.1" 200 2538 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-12 00:44:01
45.143.221.41	attack	[2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.226-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f854d238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/7384",Challenge="680a328f",ReceivedChallenge="680a328f",ReceivedHash="1e6e62d2c5d20e0f03dc77bd5f78bb79" [2020-10-11 12:04:24] NOTICE[1182] chan_sip.c: Registration from '"9900" ' failed for '45.143.221.41:7384' - Wrong password [2020-10-11 12:04:24] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-11T12:04:24.402-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9900",SessionID="0x7f22f83b6678",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-12 00:24:20
114.42.207.37	attack	TCP Port Scanning	2020-10-12 00:23:54
88.218.17.103	attackspam	TCP (SYN) 88.218.17.103:41834 -> port 3389, len 44	2020-10-12 00:09:46
118.24.243.53	attackspambots	Lines containing failures of 118.24.243.53 Oct 8 23:51:00 shared07 sshd[29307]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.243.53 user=r.r Oct 8 23:51:02 shared07 sshd[29307]: Failed password for r.r from 118.24.243.53 port 54578 ssh2 Oct 8 23:51:02 shared07 sshd[29307]: Received disconnect from 118.24.243.53 port 54578:11: Bye Bye [preauth] Oct 8 23:51:02 shared07 sshd[29307]: Disconnected from authenticating user r.r 118.24.243.53 port 54578 [preauth] Oct 9 00:02:46 shared07 sshd[2127]: Invalid user cssserver from 118.24.243.53 port 34162 Oct 9 00:02:46 shared07 sshd[2127]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.24.243.53 Oct 9 00:02:48 shared07 sshd[2127]: Failed password for invalid user cssserver from 118.24.243.53 port 34162 ssh2 Oct 9 00:02:48 shared07 sshd[2127]: Received disconnect from 118.24.243.53 port 34162:11: Bye Bye [preauth] Oct 9 00:02:48 s........ ------------------------------	2020-10-12 00:17:30
85.208.213.114	attack	SSH brutforce	2020-10-12 00:27:29
164.90.226.53	attackspambots	Oct 11 15:13:15 h2829583 sshd[4053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.90.226.53	2020-10-12 00:45:30
81.70.22.100	attackbots	SSH login attempts.	2020-10-12 00:27:46
51.223.146.4	attackbots	Unauthorized connection attempt from IP address 51.223.146.4 on Port 445(SMB)	2020-10-12 00:15:30
87.188.112.15	attack	Brute-force attempt banned	2020-10-12 00:08:33

Recently Reported IPs

106.59.214.196	106.59.214.247	106.59.214.236	106.59.214.70
106.59.214.107	106.59.214.93	106.59.230.245	106.59.245.210
106.6.141.27	106.6.177.26	106.6.216.14	106.6.38.144
106.59.245.237	106.59.245.35	106.59.245.86	106.66.196.16
106.59.245.30	106.59.245.69	106.67.162.242	106.7.96.97