112.66.105.68 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.105.143	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ CN - 1H : (585) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : CN NAME ASN : ASN4134 IP : 112.66.105.143 CIDR : 112.66.0.0/15 PREFIX COUNT : 5430 UNIQUE IP COUNT : 106919680 ATTACKS DETECTED ASN4134 : 1H - 15 3H - 36 6H - 77 12H - 137 24H - 256 DateTime : 2019-11-04 15:35:55 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-11-04 23:02:37

Type

Details

Datetime

112.66.105.143

attackspambots

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/112.66.105.143/ 
 
 CN - 1H : (585)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4134 
 
 IP : 112.66.105.143 
 
 CIDR : 112.66.0.0/15 
 
 PREFIX COUNT : 5430 
 
 UNIQUE IP COUNT : 106919680 
 
 
 ATTACKS DETECTED ASN4134 :  
  1H - 15 
  3H - 36 
  6H - 77 
 12H - 137 
 24H - 256 
 
 DateTime : 2019-11-04 15:35:55 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-11-04 23:02:37

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.105.68
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40514
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.105.68.			IN	A

;; AUTHORITY SECTION:
.			274	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030501 1800 900 604800 86400

;; Query time: 60 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 10:40:34 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 68.105.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 68.105.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
69.122.35.173	attackspambots	NAME : AS6128 CIDR : 69.122.32.0/20 SYN Flood DDoS Attack US - block certain countries :) IP: 69.122.35.173 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-08-16 04:17:46
177.129.90.17	attackspam	2019-08-15 04:18:52 H=(peer-access.internet58-fix--bvh-ro.com.br) [177.129.90.17]:58372 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-08-15 04:18:52 H=(peer-access.internet58-fix--bvh-ro.com.br) [177.129.90.17]:58372 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed 2019-08-15 04:18:53 H=(peer-access.internet58-fix--bvh-ro.com.br) [177.129.90.17]:58372 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-08-16 04:01:51
5.83.78.157	attackbots	2019-08-15T10:01:43.948443abusebot-3.cloudsearch.cf sshd\[6824\]: Invalid user chsm from 5.83.78.157 port 59012	2019-08-16 04:17:00
27.254.137.144	attackspam	2019-08-15T16:35:58.323743abusebot-3.cloudsearch.cf sshd\[7651\]: Invalid user fang from 27.254.137.144 port 33268	2019-08-16 03:50:17
222.120.192.114	attackbots	Aug 15 14:35:08 Ubuntu-1404-trusty-64-minimal sshd\[20696\]: Invalid user test1 from 222.120.192.114 Aug 15 14:35:08 Ubuntu-1404-trusty-64-minimal sshd\[20696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.120.192.114 Aug 15 14:35:10 Ubuntu-1404-trusty-64-minimal sshd\[20696\]: Failed password for invalid user test1 from 222.120.192.114 port 49920 ssh2 Aug 15 15:41:35 Ubuntu-1404-trusty-64-minimal sshd\[25129\]: Invalid user hamoelet from 222.120.192.114 Aug 15 15:41:35 Ubuntu-1404-trusty-64-minimal sshd\[25129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.120.192.114	2019-08-16 03:46:37
34.87.125.104	attackspam	(sshd) Failed SSH login from 34.87.125.104 (104.125.87.34.bc.googleusercontent.com): 5 in the last 3600 secs	2019-08-16 04:08:54
94.191.43.58	attackbots	SSH Brute Force, server-1 sshd[21496]: Failed password for invalid user just from 94.191.43.58 port 38500 ssh2	2019-08-16 03:37:14
180.250.115.98	attackbots	Aug 15 10:08:11 aiointranet sshd\[27299\]: Invalid user easton from 180.250.115.98 Aug 15 10:08:11 aiointranet sshd\[27299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.115.98 Aug 15 10:08:13 aiointranet sshd\[27299\]: Failed password for invalid user easton from 180.250.115.98 port 41524 ssh2 Aug 15 10:13:23 aiointranet sshd\[27839\]: Invalid user smsd from 180.250.115.98 Aug 15 10:13:23 aiointranet sshd\[27839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.115.98	2019-08-16 04:17:19
45.169.110.199	attack	Aug 15 14:37:01 mailman sshd[5489]: Invalid user pi from 45.169.110.199 Aug 15 14:37:01 mailman sshd[5488]: Invalid user pi from 45.169.110.199 Aug 15 14:37:01 mailman sshd[5489]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.169.110.199	2019-08-16 03:53:16
83.254.232.231	attackspambots	Looking for resource vulnerabilities	2019-08-16 03:38:33
51.38.133.86	attackbotsspam	WordPress login Brute force / Web App Attack on client site.	2019-08-16 04:08:00
104.202.211.218	attackspambots	NAME : AS18978 CIDR : 104.202.0.0/15 \| STATUS : 403 {Looking for resource vulnerabilities} DDoS Attack US - block certain countries :) IP: 104.202.211.218 Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN - data recovery https://help-dysk.pl	2019-08-16 04:14:47
119.252.174.195	attack	Aug 15 11:08:03 plusreed sshd[5760]: Invalid user sun from 119.252.174.195 ...	2019-08-16 03:41:04
37.44.253.159	attackbots	[ThuAug1511:18:49.5097422019][:error][pid8285:tid47981877352192][client37.44.253.159:30928][client37.44.253.159]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][hostname"filarmonicagorduno.ch"][uri"/"][unique_id"XVUjeVzgGchgGbVUDsWw8QAAABU"][ThuAug1511:18:50.2173122019][:error][pid28172:tid47981858440960][client37.44.253.159:45360][client37.44.253.159]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch"python-requests/"atREQUEST_HEADERS:User-Agent.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"211"][id"332039"][rev"4"][msg"Atomicorp.comWAFRules:SuspiciousUnusualUserAgent\(python-requests\).Disablethisruleifyouusepython-requests/."][severity"CRITICAL"][h	2019-08-16 04:01:02
112.64.89.4	attack	2019-08-15 05:41:00 server sshd[9094]: Failed password for invalid user admin from 112.64.89.4 port 49696 ssh2	2019-08-16 03:36:53

Recently Reported IPs

112.66.105.69	112.66.105.55	113.128.16.146	112.66.105.95
112.66.105.93	112.66.106.108	112.66.106.109	112.66.106.139
112.66.105.48	112.66.106.141	112.66.106.157	112.66.106.178
112.66.106.14	112.66.106.18	113.128.16.148	112.66.106.162
112.66.106.173	112.66.106.132	112.66.106.195	112.66.106.205