112.66.106.207

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.106.218	attack	Unauthorized connection attempt detected from IP address 112.66.106.218 to port 8080	2019-12-31 06:31:00
112.66.106.87	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540f2ea2d96a9965 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:18:11

Type

Details

Datetime

112.66.106.218

attack

Unauthorized connection attempt detected from IP address 112.66.106.218 to port 8080

2019-12-31 06:31:00

112.66.106.87

attack

The IP has triggered Cloudflare WAF. CF-Ray: 540f2ea2d96a9965 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:18:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.106.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48719
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.106.207.			IN	A

;; AUTHORITY SECTION:
.			526	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 324 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 00:16:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 207.106.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.106.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
79.85.2.163	attack	Feb 23 14:28:03 ovpn sshd\[25181\]: Invalid user test from 79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25182\]: Invalid user test from 79.85.2.163 Feb 23 14:28:03 ovpn sshd\[25182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.85.2.163 Feb 23 14:28:05 ovpn sshd\[25181\]: Failed password for invalid user test from 79.85.2.163 port 36522 ssh2	2020-02-23 23:09:51
14.232.214.14	attackbots	Feb 23 14:28:29 MK-Root1 kernel: [48590.224418] [UFW BLOCK] IN=enp35s0 OUT=vmbr105 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.244 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2198 DF PROTO=TCP SPT=61988 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 23 14:28:30 MK-Root1 kernel: [48591.275505] [UFW BLOCK] IN=enp35s0 OUT=vmbr106 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.245 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2258 DF PROTO=TCP SPT=62106 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0 Feb 23 14:28:31 MK-Root1 kernel: [48592.333122] [UFW BLOCK] IN=enp35s0 OUT=vmbr107 MAC=a8:a1:59:0e:9e:7d:80:7f:f8:79:1c:25:08:00 SRC=14.232.214.14 DST=5.9.239.246 LEN=52 TOS=0x00 PREC=0x00 TTL=112 ID=2283 DF PROTO=TCP SPT=62220 DPT=445 WINDOW=8192 RES=0x00 SYN URGP=0	2020-02-23 22:44:12
117.90.24.214	attack	Brute force blocker - service: proftpd1 - aantal: 25 - Mon Jun 25 03:35:18 2018	2020-02-23 23:18:40
188.251.181.239	attack	Feb 23 13:10:28 server sshd[307776]: Failed password for invalid user sunlei from 188.251.181.239 port 59055 ssh2 Feb 23 13:49:06 server sshd[330105]: Failed password for invalid user wangqiang from 188.251.181.239 port 52872 ssh2 Feb 23 14:28:03 server sshd[352606]: Failed password for invalid user zabbix from 188.251.181.239 port 63347 ssh2	2020-02-23 23:12:42
179.12.19.225	attackspambots	SSH/22 MH Probe, BF, Hack -	2020-02-23 23:09:01
133.130.98.177	attackspam	Feb 23 08:45:08 plusreed sshd[13766]: Invalid user gzq from 133.130.98.177 ...	2020-02-23 23:12:04
219.155.30.100	attackspambots	Telnet Server BruteForce Attack	2020-02-23 23:14:16
59.127.148.209	attack	Honeypot attack, port: 81, PTR: 59-127-148-209.HINET-IP.hinet.net.	2020-02-23 23:00:52
69.176.80.66	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-23 23:23:26
185.53.88.119	attack	[2020-02-23 09:20:20] NOTICE[1148] chan_sip.c: Registration from '"165" ' failed for '185.53.88.119:5466' - Wrong password [2020-02-23 09:20:20] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-23T09:20:20.140-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="165",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.88.119/5466",Challenge="3ff02122",ReceivedChallenge="3ff02122",ReceivedHash="964bcb3a6296971b5fb416f6307eeba0" [2020-02-23 09:20:20] NOTICE[1148] chan_sip.c: Registration from '"165" ' failed for '185.53.88.119:5466' - Wrong password [2020-02-23 09:20:20] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-23T09:20:20.317-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="165",SessionID="0x7fd82c4c0778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.53.8 ...	2020-02-23 23:06:10
51.178.78.152	attack	Autoban 51.178.78.152 AUTH/CONNECT	2020-02-23 23:23:58
131.221.97.186	attack	Honeypot attack, port: 445, PTR: dynamic-131-221-97-186.webturbonet.com.br.	2020-02-23 23:20:08
85.105.220.6	attackbots	Honeypot attack, port: 81, PTR: 85.105.220.6.static.ttnet.com.tr.	2020-02-23 22:48:17
112.45.114.81	attack	Feb 23 14:28:07 sso sshd[26831]: Failed password for root from 112.45.114.81 port 40468 ssh2 Feb 23 14:28:07 sso sshd[26831]: error: Received disconnect from 112.45.114.81 port 40468:3: com.jcraft.jsch.JSchException: Auth fail [preauth] ...	2020-02-23 23:08:12
125.141.139.9	attack	Feb 23 14:28:21 zulu412 sshd\[31385\]: Invalid user odoo from 125.141.139.9 port 39190 Feb 23 14:28:21 zulu412 sshd\[31385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.141.139.9 Feb 23 14:28:23 zulu412 sshd\[31385\]: Failed password for invalid user odoo from 125.141.139.9 port 39190 ssh2 ...	2020-02-23 22:47:32

Recently Reported IPs

112.66.107.180	112.66.107.27	112.66.108.120	112.66.108.14
130.176.29.156	112.66.108.202	112.66.109.67	112.66.109.95
112.66.111.195	112.66.208.32	112.66.209.21	112.66.213.244
112.66.213.34	112.66.214.54	240.194.64.214	112.66.215.125
112.66.215.19	227.166.186.244	112.66.215.253	112.66.245.44