112.66.107.195

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.107.70	attack	Unauthorized connection attempt detected from IP address 112.66.107.70 to port 8082 [J]	2020-03-02 20:34:45
112.66.107.228	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 541755e7a874999b \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:05:42
112.66.107.110	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541760960bd7eb91 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:13:22

Type

Details

Datetime

112.66.107.70

attack

Unauthorized connection attempt detected from IP address 112.66.107.70 to port 8082 [J]

2020-03-02 20:34:45

112.66.107.228

attackspambots

The IP has triggered Cloudflare WAF. CF-Ray: 541755e7a874999b | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:05:42

112.66.107.110

attack

The IP has triggered Cloudflare WAF. CF-Ray: 541760960bd7eb91 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:13:22

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.107.195
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54529
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.107.195.			IN	A

;; AUTHORITY SECTION:
.			367	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030302 1800 900 604800 86400

;; Query time: 87 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 11:44:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 195.107.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 195.107.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
13.234.67.232	attack	TCP (SYN) 13.234.67.232:8833 -> port 23, len 40	2020-08-01 17:53:38
190.210.73.121	attackspambots	Aug 1 07:22:59 mail.srvfarm.net postfix/smtpd[860226]: warning: unknown[190.210.73.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 07:22:59 mail.srvfarm.net postfix/smtpd[860226]: lost connection after AUTH from unknown[190.210.73.121] Aug 1 07:27:12 mail.srvfarm.net postfix/smtpd[888305]: warning: unknown[190.210.73.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Aug 1 07:27:12 mail.srvfarm.net postfix/smtpd[888305]: lost connection after AUTH from unknown[190.210.73.121] Aug 1 07:31:56 mail.srvfarm.net postfix/smtpd[887734]: warning: unknown[190.210.73.121]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-08-01 18:07:43
52.154.75.148	attackbotsspam	RDPBruteGSL24	2020-08-01 17:58:15
85.209.0.102	attackbots	Aug 1 09:26:41 scw-tender-jepsen sshd[10796]: Failed password for root from 85.209.0.102 port 64898 ssh2 Aug 1 09:26:41 scw-tender-jepsen sshd[10797]: Failed password for root from 85.209.0.102 port 64886 ssh2	2020-08-01 17:31:54
116.31.116.64	attack	SMB Server BruteForce Attack	2020-08-01 18:05:30
148.72.207.250	attackspam	Attempt to hack Wordpress Login, XMLRPC or other login	2020-08-01 17:57:30
181.214.91.140	attack	SSH Scan	2020-08-01 17:40:33
165.231.148.169	attack	Trying to Relay Mail or Not fully qualified domain	2020-08-01 17:45:22
162.244.77.140	attack	$f2bV_matches	2020-08-01 17:38:46
54.36.148.250	attackspambots	caw-Joomla User : try to access forms...	2020-08-01 18:04:55
51.77.201.36	attack	Aug 1 11:30:17 nextcloud sshd\[17588\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.201.36 user=root Aug 1 11:30:19 nextcloud sshd\[17588\]: Failed password for root from 51.77.201.36 port 45184 ssh2 Aug 1 11:34:32 nextcloud sshd\[22952\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.201.36 user=root	2020-08-01 17:59:21
61.177.172.102	attackbotsspam	Aug 1 14:51:54 gw1 sshd[29837]: Failed password for root from 61.177.172.102 port 50356 ssh2 ...	2020-08-01 18:01:25
85.187.237.246	attack	firewall-block, port(s): 445/tcp	2020-08-01 17:36:41
103.219.112.1	attack	Unauthorized connection attempt detected from IP address 103.219.112.1 to port 4656	2020-08-01 17:35:52
122.117.127.253	attackbotsspam	Attempted connection to port 445.	2020-08-01 18:02:48

Recently Reported IPs

103.66.219.9	103.73.183.233	103.73.183.159	103.73.182.109
103.73.35.72	103.73.75.60	112.66.107.2	103.73.35.246
103.73.35.99	103.73.75.231	103.73.32.211	103.74.117.225
103.73.33.22	103.73.79.10	103.74.139.17	112.66.107.202
103.74.139.124	103.74.193.135	103.74.139.115	103.74.193.146