Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
112.66.104.41 attack
The IP has triggered Cloudflare WAF. CF-Ray: 5410875db8eeeb29 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:36:01
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.104.212
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14397
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.104.212.			IN	A

;; AUTHORITY SECTION:
.			276	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 67 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 10:40:29 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 212.104.66.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 212.104.66.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
217.182.206.121 attackbotsspam
2020-07-27T16:49:09.6915511495-001 sshd[30866]: Invalid user hyt from 217.182.206.121 port 39264
2020-07-27T16:49:11.6290671495-001 sshd[30866]: Failed password for invalid user hyt from 217.182.206.121 port 39264 ssh2
2020-07-27T16:53:22.2033521495-001 sshd[31101]: Invalid user miyazawa from 217.182.206.121 port 52686
2020-07-27T16:53:22.2070421495-001 sshd[31101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.ip-217-182-206.eu
2020-07-27T16:53:22.2033521495-001 sshd[31101]: Invalid user miyazawa from 217.182.206.121 port 52686
2020-07-27T16:53:24.9769151495-001 sshd[31101]: Failed password for invalid user miyazawa from 217.182.206.121 port 52686 ssh2
...
2020-07-28 06:03:38
106.53.125.253 attack
Jul 27 23:45:39 buvik sshd[6366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.125.253
Jul 27 23:45:41 buvik sshd[6366]: Failed password for invalid user liushuang from 106.53.125.253 port 53864 ssh2
Jul 27 23:57:31 buvik sshd[8064]: Invalid user liuyufei from 106.53.125.253
...
2020-07-28 06:22:48
47.254.151.244 attackspambots
Jul 27 23:16:55 server sshd[22959]: Failed password for invalid user wangkt from 47.254.151.244 port 54236 ssh2
Jul 27 23:23:02 server sshd[25173]: Failed password for invalid user ashmit from 47.254.151.244 port 40780 ssh2
Jul 27 23:28:48 server sshd[26993]: Failed password for invalid user gaoxinchen from 47.254.151.244 port 55558 ssh2
2020-07-28 06:16:26
61.163.210.18 attackspambots
2020-07-28T03:09:21.266978hostname sshd[33961]: Invalid user linguanghe from 61.163.210.18 port 17163
2020-07-28T03:09:23.707135hostname sshd[33961]: Failed password for invalid user linguanghe from 61.163.210.18 port 17163 ssh2
2020-07-28T03:11:58.281086hostname sshd[34197]: Invalid user seino from 61.163.210.18 port 5864
...
2020-07-28 06:00:45
49.235.240.21 attackbots
Jul 27 22:10:39 abendstille sshd\[5066\]: Invalid user kmycloud from 49.235.240.21
Jul 27 22:10:39 abendstille sshd\[5066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.240.21
Jul 27 22:10:41 abendstille sshd\[5066\]: Failed password for invalid user kmycloud from 49.235.240.21 port 56816 ssh2
Jul 27 22:12:42 abendstille sshd\[7179\]: Invalid user liujun from 49.235.240.21
Jul 27 22:12:42 abendstille sshd\[7179\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.240.21
...
2020-07-28 05:50:05
51.68.44.13 attack
SSH Invalid Login
2020-07-28 06:21:35
213.32.105.159 attack
Invalid user user from 213.32.105.159 port 58858
2020-07-28 05:51:54
180.76.152.157 attackbots
2020-07-27T20:01:04.436128ionos.janbro.de sshd[54995]: Invalid user tangxianfeng from 180.76.152.157 port 53678
2020-07-27T20:01:07.262888ionos.janbro.de sshd[54995]: Failed password for invalid user tangxianfeng from 180.76.152.157 port 53678 ssh2
2020-07-27T20:06:49.496289ionos.janbro.de sshd[55017]: Invalid user zuoyu from 180.76.152.157 port 32934
2020-07-27T20:06:49.658826ionos.janbro.de sshd[55017]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.152.157
2020-07-27T20:06:49.496289ionos.janbro.de sshd[55017]: Invalid user zuoyu from 180.76.152.157 port 32934
2020-07-27T20:06:51.559267ionos.janbro.de sshd[55017]: Failed password for invalid user zuoyu from 180.76.152.157 port 32934 ssh2
2020-07-27T20:12:37.247195ionos.janbro.de sshd[55036]: Invalid user sui from 180.76.152.157 port 40406
2020-07-27T20:12:37.391576ionos.janbro.de sshd[55036]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.
...
2020-07-28 05:51:34
145.239.91.6 attackspambots
Jul 27 16:31:28 Tower sshd[33018]: Connection from 145.239.91.6 port 46696 on 192.168.10.220 port 22 rdomain ""
Jul 27 16:31:35 Tower sshd[33018]: Invalid user huang from 145.239.91.6 port 46696
Jul 27 16:31:35 Tower sshd[33018]: error: Could not get shadow information for NOUSER
Jul 27 16:31:35 Tower sshd[33018]: Failed password for invalid user huang from 145.239.91.6 port 46696 ssh2
Jul 27 16:31:35 Tower sshd[33018]: Received disconnect from 145.239.91.6 port 46696:11: Bye Bye [preauth]
Jul 27 16:31:35 Tower sshd[33018]: Disconnected from invalid user huang 145.239.91.6 port 46696 [preauth]
2020-07-28 05:57:53
36.89.157.197 attack
Exploited Host.
2020-07-28 05:56:29
222.186.175.169 attack
Jul 28 00:05:15 nextcloud sshd\[18591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.169  user=root
Jul 28 00:05:17 nextcloud sshd\[18591\]: Failed password for root from 222.186.175.169 port 55558 ssh2
Jul 28 00:05:21 nextcloud sshd\[18591\]: Failed password for root from 222.186.175.169 port 55558 ssh2
2020-07-28 06:14:18
134.209.123.101 attackbotsspam
Trolling for resource vulnerabilities
2020-07-28 06:10:23
94.156.119.230 attackbots
(imapd) Failed IMAP login from 94.156.119.230 (BG/Bulgaria/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 28 00:42:17 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=94.156.119.230, lip=5.63.12.44, TLS: Connection closed, session=
2020-07-28 06:15:04
5.154.243.131 attackbots
Jul 28 01:01:47 journals sshd\[51509\]: Invalid user junjie from 5.154.243.131
Jul 28 01:01:47 journals sshd\[51509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131
Jul 28 01:01:49 journals sshd\[51509\]: Failed password for invalid user junjie from 5.154.243.131 port 33236 ssh2
Jul 28 01:06:16 journals sshd\[52004\]: Invalid user donghang from 5.154.243.131
Jul 28 01:06:16 journals sshd\[52004\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.154.243.131
...
2020-07-28 06:13:50
83.239.138.38 attack
$f2bV_matches
2020-07-28 05:52:09

Recently Reported IPs

112.66.104.165 112.66.104.224 113.128.16.140 112.66.104.238
112.66.104.39 112.66.104.26 112.66.104.67 112.66.104.64
112.66.104.66 112.66.104.75 112.66.104.63 112.66.104.90
112.66.104.7 112.66.104.98 113.128.16.144 112.66.105.127
112.66.105.151 112.66.105.108 112.66.105.168 112.66.105.153