112.66.103.159

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.103.151	attackbotsspam	Unauthorized connection attempt detected from IP address 112.66.103.151 to port 443 [J]	2020-02-05 09:41:11
112.66.103.60	attackbots	Unauthorized connection attempt detected from IP address 112.66.103.60 to port 8090	2020-01-01 21:03:55
112.66.103.94	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5411f2caebd7eb6d \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:47:55

Type

Details

Datetime

112.66.103.151

attackbotsspam

Unauthorized connection attempt detected from IP address 112.66.103.151 to port 443 [J]

2020-02-05 09:41:11

112.66.103.60

attackbots

Unauthorized connection attempt detected from IP address 112.66.103.60 to port 8090

2020-01-01 21:03:55

112.66.103.94

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5411f2caebd7eb6d | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:47:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.103.159
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34909
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.103.159.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 05:51:02 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 159.103.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 159.103.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.30.187	attackspambots	Mar 22 08:54:56 dcd-gentoo sshd[410]: User root from 222.186.30.187 not allowed because none of user's groups are listed in AllowGroups Mar 22 08:54:58 dcd-gentoo sshd[410]: error: PAM: Authentication failure for illegal user root from 222.186.30.187 Mar 22 08:54:56 dcd-gentoo sshd[410]: User root from 222.186.30.187 not allowed because none of user's groups are listed in AllowGroups Mar 22 08:54:58 dcd-gentoo sshd[410]: error: PAM: Authentication failure for illegal user root from 222.186.30.187 Mar 22 08:54:56 dcd-gentoo sshd[410]: User root from 222.186.30.187 not allowed because none of user's groups are listed in AllowGroups Mar 22 08:54:58 dcd-gentoo sshd[410]: error: PAM: Authentication failure for illegal user root from 222.186.30.187 Mar 22 08:54:58 dcd-gentoo sshd[410]: Failed keyboard-interactive/pam for invalid user root from 222.186.30.187 port 29671 ssh2 ...	2020-03-22 16:01:45
182.61.163.126	attack	Mar 22 07:40:11 serwer sshd\[23190\]: Invalid user zouyin from 182.61.163.126 port 51598 Mar 22 07:40:11 serwer sshd\[23190\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.163.126 Mar 22 07:40:14 serwer sshd\[23190\]: Failed password for invalid user zouyin from 182.61.163.126 port 51598 ssh2 ...	2020-03-22 15:35:10
81.4.106.78	attack	DATE:2020-03-22 08:34:40, IP:81.4.106.78, PORT:ssh SSH brute force auth (docker-dc)	2020-03-22 15:53:34
45.133.99.12	attack	2020-03-22 08:33:07 dovecot_login authenticator failed for \(\[45.133.99.12\]\) \[45.133.99.12\]: 535 Incorrect authentication data \(set_id=root@opso.it\) 2020-03-22 08:33:14 dovecot_login authenticator failed for \(\[45.133.99.12\]\) \[45.133.99.12\]: 535 Incorrect authentication data 2020-03-22 08:33:23 dovecot_login authenticator failed for \(\[45.133.99.12\]\) \[45.133.99.12\]: 535 Incorrect authentication data 2020-03-22 08:33:28 dovecot_login authenticator failed for \(\[45.133.99.12\]\) \[45.133.99.12\]: 535 Incorrect authentication data 2020-03-22 08:33:40 dovecot_login authenticator failed for \(\[45.133.99.12\]\) \[45.133.99.12\]: 535 Incorrect authentication data	2020-03-22 15:52:19
63.82.48.110	attackbotsspam	Mar 22 04:28:29 mail.srvfarm.net postfix/smtpd[541911]: NOQUEUE: reject: RCPT from unknown[63.82.48.110]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:28:29 mail.srvfarm.net postfix/smtpd[541938]: NOQUEUE: reject: RCPT from unknown[63.82.48.110]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:28:29 mail.srvfarm.net postfix/smtpd[541912]: NOQUEUE: reject: RCPT from unknown[63.82.48.110]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:28:29 mail.srvfarm.net postfix/smtpd[539385]: NOQUEUE: reject: RCPT from unknown[63.82.48.110]: 450 4.1.8	2020-03-22 15:51:24
201.149.20.162	attack	Mar 22 07:55:59 web8 sshd\[29485\]: Invalid user kealan from 201.149.20.162 Mar 22 07:55:59 web8 sshd\[29485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.20.162 Mar 22 07:56:01 web8 sshd\[29485\]: Failed password for invalid user kealan from 201.149.20.162 port 64490 ssh2 Mar 22 08:00:02 web8 sshd\[31606\]: Invalid user sw from 201.149.20.162 Mar 22 08:00:02 web8 sshd\[31606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.149.20.162	2020-03-22 16:07:26
188.162.200.50	attackspambots	1584849249 - 03/22/2020 04:54:09 Host: 188.162.200.50/188.162.200.50 Port: 445 TCP Blocked	2020-03-22 15:39:57
134.73.51.121	attackspam	Mar 22 04:34:05 mail.srvfarm.net postfix/smtpd[541939]: NOQUEUE: reject: RCPT from unknown[134.73.51.121]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:34:10 mail.srvfarm.net postfix/smtpd[543204]: NOQUEUE: reject: RCPT from unknown[134.73.51.121]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:34:10 mail.srvfarm.net postfix/smtpd[543207]: NOQUEUE: reject: RCPT from unknown[134.73.51.121]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Mar 22 04:34:10 mail.srvfarm.net postfix/smtpd[543203]: NOQUEUE: reject: RCPT from unknown[134.73.51.121]: 450 4.1.8 : S	2020-03-22 15:47:06
103.145.12.18	attackspam	[2020-03-22 03:35:32] NOTICE[1148][C-000147d7] chan_sip.c: Call from '' (103.145.12.18:49571) to extension '0707090046406820585' rejected because extension not found in context 'public'. [2020-03-22 03:35:32] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-22T03:35:32.254-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="0707090046406820585",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.18/49571",ACLName="no_extension_match" [2020-03-22 03:38:51] NOTICE[1148][C-000147db] chan_sip.c: Call from '' (103.145.12.18:50155) to extension '164350046406820585' rejected because extension not found in context 'public'. [2020-03-22 03:38:51] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-22T03:38:51.316-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="164350046406820585",SessionID="0x7fd82cdb8718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddr ...	2020-03-22 15:52:59
52.247.7.164	attack	Brute forcing email accounts	2020-03-22 16:12:17
110.80.142.84	attack	20 attempts against mh-ssh on cloud	2020-03-22 15:38:34
185.53.88.36	attackbots	[2020-03-22 03:57:56] NOTICE[1148][C-000147f3] chan_sip.c: Call from '' (185.53.88.36:57242) to extension '011442037698349' rejected because extension not found in context 'public'. [2020-03-22 03:57:56] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-22T03:57:56.327-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011442037698349",SessionID="0x7fd82c530768",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.36/57242",ACLName="no_extension_match" [2020-03-22 03:57:56] NOTICE[1148][C-000147f4] chan_sip.c: Call from '' (185.53.88.36:57512) to extension '9011442037698349' rejected because extension not found in context 'public'. [2020-03-22 03:57:56] SECURITY[1163] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-03-22T03:57:56.400-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="9011442037698349",SessionID="0x7fd82cdb8718",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1 ...	2020-03-22 16:07:46
78.187.120.62	attack	Automatic report - Port Scan Attack	2020-03-22 15:34:02
148.204.63.194	attackbotsspam	2020-03-22T01:28:50.265062mail.thespaminator.com sshd[4628]: Invalid user karl from 148.204.63.194 port 59932 2020-03-22T01:28:52.281702mail.thespaminator.com sshd[4628]: Failed password for invalid user karl from 148.204.63.194 port 59932 ssh2 ...	2020-03-22 16:04:05
51.89.149.213	attackspambots	Automatic report - SSH Brute-Force Attack	2020-03-22 15:54:21

Recently Reported IPs

112.66.102.118	112.66.103.33	112.66.104.145	112.66.103.84
112.66.103.68	112.66.104.150	112.66.104.69	112.66.104.208
112.66.105.109	112.66.105.135	112.66.105.166	112.66.105.205
112.66.105.213	112.66.105.94	112.66.106.25	112.66.106.75
112.66.106.122	112.66.106.12	112.66.107.188	112.66.107.223