112.66.104.64 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.104.41	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5410875db8eeeb29 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:36:01

Type

Details

Datetime

112.66.104.41

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5410875db8eeeb29 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:36:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.104.64
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 21190
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.104.64.			IN	A

;; AUTHORITY SECTION:
.			267	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 10:40:30 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 64.104.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 64.104.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.53.223.22	attack	20/8/28@23:55:31: FAIL: Alarm-Network address from=182.53.223.22 ...	2020-08-29 16:43:27
179.191.13.232	attackbotsspam	23/tcp 23/tcp [2020-08-04/29]2pkt	2020-08-29 16:11:20
51.158.21.162	attackspambots	51.158.21.162 - - [29/Aug/2020:05:52:48 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1865 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.158.21.162 - - [29/Aug/2020:05:52:49 +0100] "POST /wp/wp-login.php HTTP/1.1" 200 1857 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.158.21.162 - - [29/Aug/2020:05:52:49 +0100] "POST /wp/xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 16:49:10
103.231.45.234	attackbots	Unauthorized connection attempt from IP address 103.231.45.234 on Port 445(SMB)	2020-08-29 16:25:05
74.82.47.60	attack	8080/tcp 11211/tcp 873/tcp... [2020-06-28/08-29]30pkt,16pt.(tcp),1pt.(udp)	2020-08-29 16:31:17
119.130.154.139	attackbotsspam	Aug 29 05:00:49 vps46666688 sshd[957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.130.154.139 Aug 29 05:00:52 vps46666688 sshd[957]: Failed password for invalid user christa from 119.130.154.139 port 14719 ssh2 ...	2020-08-29 16:36:38
37.148.116.48	attackspambots	Unauthorized connection attempt from IP address 37.148.116.48 on Port 445(SMB)	2020-08-29 16:42:10
2.62.42.154	attack	Aug 29 05:55:18 karger wordpress(buerg)[7837]: XML-RPC authentication attempt for unknown user domi from 2.62.42.154 Aug 29 05:55:24 karger wordpress(buerg)[7836]: XML-RPC authentication attempt for unknown user domi from 2.62.42.154 ...	2020-08-29 16:49:29
143.255.8.2	attackspam	Aug 29 08:29:25 hidden sshd[8658]: Failed password for invalid user etherpad from 143.255.8.2 port 49740 ssh2 Aug 29 08:36:48 hidden sshd[10101]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=143.255.8.2 user=root Aug 29 08:36:51 hidden sshd[10101]: Failed password for hidden from 143.255.8.2 port 60718 ssh2	2020-08-29 16:43:59
153.153.62.97	attackbotsspam	Aug 29 05:55:27 mail postfix/smtpd[1409]: NOQUEUE: reject: RCPT from oogw1331.ocn.ad.jp[153.153.62.97]: 454 4.7.1 : Relay access denied; from= to= proto=ESMTP helo= ...	2020-08-29 16:46:18
190.85.24.53	attackspambots	Unauthorized connection attempt from IP address 190.85.24.53 on Port 445(SMB)	2020-08-29 16:29:39
142.93.122.161	attackspam	142.93.122.161 - - [29/Aug/2020:06:51:39 +0100] "POST /wp-login.php HTTP/1.1" 200 2606 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.161 - - [29/Aug/2020:06:51:40 +0100] "POST /wp-login.php HTTP/1.1" 200 2581 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 142.93.122.161 - - [29/Aug/2020:06:51:41 +0100] "POST /wp-login.php HTTP/1.1" 200 2581 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-29 16:07:57
120.210.89.180	attackspambots	$f2bV_matches	2020-08-29 16:28:28
36.85.181.189	attack	DATE:2020-08-29 05:55:16, IP:36.85.181.189, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-08-29 16:17:25
113.107.244.124	attack	Invalid user hzy from 113.107.244.124 port 34402	2020-08-29 16:42:53

Recently Reported IPs

112.66.104.67	112.66.104.66	112.66.104.75	112.66.104.63
112.66.104.90	112.66.104.7	112.66.104.98	113.128.16.144
112.66.105.127	112.66.105.151	112.66.105.108	112.66.105.168
112.66.105.153	112.66.105.241	112.66.105.254	112.66.105.69
112.66.105.68	112.66.105.55	113.128.16.146	112.66.105.95