111.14.193.52 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
111.14.193.246	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5412bd707e1cc39a \| WAF_Rule_ID: 1aff1cdfeb5c4074965d7cd85bfc1d4e \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 \| CF_DC: SIN. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:31:05

Type

Details

Datetime

111.14.193.246

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5412bd707e1cc39a | WAF_Rule_ID: 1aff1cdfeb5c4074965d7cd85bfc1d4e | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.112 Safari/537.36 | CF_DC: SIN. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:31:05

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 111.14.193.52
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19650
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;111.14.193.52.			IN	A

;; AUTHORITY SECTION:
.			167	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024020800 1800 900 604800 86400

;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 09 01:15:14 CST 2024
;; MSG SIZE  rcvd: 106

Host info

b'Host 52.193.14.111.in-addr.arpa not found: 2(SERVFAIL)
'

Nslookup info:

server can't find 111.14.193.52.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
114.67.75.142	attack	2020-03-31T02:52:54.861588librenms sshd[18290]: Failed password for root from 114.67.75.142 port 52762 ssh2 2020-03-31T02:57:41.573197librenms sshd[18809]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.67.75.142 user=root 2020-03-31T02:57:43.385580librenms sshd[18809]: Failed password for root from 114.67.75.142 port 55950 ssh2 ...	2020-03-31 09:12:31
114.32.52.174	attackspam	Unauthorized connection attempt detected from IP address 114.32.52.174 to port 23	2020-03-31 09:06:03
94.123.74.172	attack	DATE:2020-03-31 00:27:25, IP:94.123.74.172, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-03-31 09:19:17
80.82.64.110	attack	Mar 30 23:21:36 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.64.110, lip=192.168.100.101, session=\\ Mar 30 23:23:08 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.64.110, lip=192.168.100.101, session=\\ Mar 30 23:54:51 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.64.110, lip=192.168.100.101, session=\\ Mar 31 00:03:34 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.64.110, lip=192.168.100.101, session=\\ Mar 31 00:15:23 pop3-login: Info: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=80.82.64.110, lip=192.168.100.101, session=\\ Mar 31 00:16:36	2020-03-31 08:58:01
178.128.227.211	attackspambots	Mar 31 05:26:30 itv-usvr-02 sshd[21505]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.227.211 user=root Mar 31 05:26:32 itv-usvr-02 sshd[21505]: Failed password for root from 178.128.227.211 port 42394 ssh2 Mar 31 05:31:49 itv-usvr-02 sshd[21723]: Invalid user sh from 178.128.227.211 port 54572 Mar 31 05:31:49 itv-usvr-02 sshd[21723]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.227.211 Mar 31 05:31:49 itv-usvr-02 sshd[21723]: Invalid user sh from 178.128.227.211 port 54572 Mar 31 05:31:51 itv-usvr-02 sshd[21723]: Failed password for invalid user sh from 178.128.227.211 port 54572 ssh2	2020-03-31 09:04:54
145.239.82.11	attackbots	3x Failed Password	2020-03-31 09:00:55
72.192.84.230	attackbotsspam	SSH brute-force attempt	2020-03-31 09:25:30
176.31.31.185	attack	Mar 31 03:27:42 pkdns2 sshd\[45481\]: Invalid user cz from 176.31.31.185Mar 31 03:27:43 pkdns2 sshd\[45481\]: Failed password for invalid user cz from 176.31.31.185 port 42733 ssh2Mar 31 03:30:27 pkdns2 sshd\[45649\]: Invalid user virtualbox from 176.31.31.185Mar 31 03:30:29 pkdns2 sshd\[45649\]: Failed password for invalid user virtualbox from 176.31.31.185 port 40679 ssh2Mar 31 03:33:28 pkdns2 sshd\[45776\]: Failed password for root from 176.31.31.185 port 38633 ssh2Mar 31 03:36:22 pkdns2 sshd\[45943\]: Invalid user planet from 176.31.31.185 ...	2020-03-31 09:30:29
179.124.34.9	attackspambots	(sshd) Failed SSH login from 179.124.34.9 (BR/Brazil/9.34.124.179.static.sp2.alog.com.br): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar 31 00:31:46 ubnt-55d23 sshd[27499]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.124.34.9 user=root Mar 31 00:31:48 ubnt-55d23 sshd[27499]: Failed password for root from 179.124.34.9 port 54833 ssh2	2020-03-31 09:06:32
128.73.108.186	attack	Unauthorized connection attempt from IP address 128.73.108.186 on Port 445(SMB)	2020-03-31 09:13:22
167.99.123.34	attackbots	xmlrpc attack	2020-03-31 09:06:49
109.66.103.11	attack	Automatic report - Port Scan Attack	2020-03-31 09:16:29
5.36.218.155	attack	1585607516 - 03/31/2020 00:31:56 Host: 5.36.218.155/5.36.218.155 Port: 445 TCP Blocked	2020-03-31 09:02:28
39.46.216.58	attackspam	Unauthorized connection attempt from IP address 39.46.216.58 on Port 445(SMB)	2020-03-31 09:33:06
86.21.205.149	attackbotsspam	Mar 31 03:58:20 gw1 sshd[26462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.21.205.149 Mar 31 03:58:22 gw1 sshd[26462]: Failed password for invalid user zhangjinyang from 86.21.205.149 port 48918 ssh2 ...	2020-03-31 08:54:03

Recently Reported IPs

111.138.142.246	111.137.78.20	111.137.71.221	111.137.95.148
111.138.120.241	111.138.52.15	111.138.2.74	111.137.63.206
111.138.0.70	111.137.31.7	111.137.77.44	111.138.109.77
111.138.187.150	111.138.134.153	111.137.36.97	111.138.149.214
111.138.157.116	111.137.57.168	111.139.161.13	111.138.122.221