112.66.108.206

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.108.185	attackspam	Unauthorized connection attempt detected from IP address 112.66.108.185 to port 999 [J]	2020-03-02 21:36:14
112.66.108.112	attackspambots	HTTP/80/443 Probe, BF, WP, Hack -	2019-12-26 05:22:34
112.66.108.92	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fe74d1f6fd366 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:05:15
112.66.108.128	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 540f519dae11eabb \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:13:02
112.66.108.17	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54168ea45acb98c3 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:03:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.108.206
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17210
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.108.206.			IN	A

;; AUTHORITY SECTION:
.			96	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 14:31:39 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 206.108.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 206.108.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
118.89.231.109	attackspam	Invalid user ce from 118.89.231.109 port 54431	2020-04-18 03:22:03
202.137.134.139	attackspam	IMAP brute force ...	2020-04-18 03:29:20
150.95.181.49	attack	SSH bruteforce	2020-04-18 03:23:43
35.199.73.100	attack	Bruteforce detected by fail2ban	2020-04-18 03:31:10
222.186.180.6	attackspam	2020-04-17T21:34:07.700233vps751288.ovh.net sshd\[11911\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.6 user=root 2020-04-17T21:34:09.846796vps751288.ovh.net sshd\[11911\]: Failed password for root from 222.186.180.6 port 27382 ssh2 2020-04-17T21:34:13.776492vps751288.ovh.net sshd\[11911\]: Failed password for root from 222.186.180.6 port 27382 ssh2 2020-04-17T21:34:17.254371vps751288.ovh.net sshd\[11911\]: Failed password for root from 222.186.180.6 port 27382 ssh2 2020-04-17T21:34:21.145107vps751288.ovh.net sshd\[11911\]: Failed password for root from 222.186.180.6 port 27382 ssh2	2020-04-18 03:35:18
178.205.163.205	attack	1587120699 - 04/17/2020 12:51:39 Host: 178.205.163.205/178.205.163.205 Port: 445 TCP Blocked	2020-04-18 03:23:19
108.61.126.16	attackspam	Apr 17 15:28:15 vzmaster sshd[31238]: Address 108.61.126.16 maps to 108.61.126.16.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Apr 17 15:28:15 vzmaster sshd[31238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.61.126.16 user=r.r Apr 17 15:28:17 vzmaster sshd[31238]: Failed password for r.r from 108.61.126.16 port 37804 ssh2 Apr 17 15:33:10 vzmaster sshd[6152]: Address 108.61.126.16 maps to 108.61.126.16.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Apr 17 15:33:10 vzmaster sshd[6152]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=108.61.126.16 user=r.r Apr 17 15:33:11 vzmaster sshd[6152]: Failed password for r.r from 108.61.126.16 port 40898 ssh2 Apr 17 15:34:47 vzmaster sshd[7142]: Address 108.61.126.16 maps to 108.61.126.16.vultr.com, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Ap........ -------------------------------	2020-04-18 03:48:54
182.61.43.202	attack	Apr 17 16:16:54 ws12vmsma01 sshd[39394]: Invalid user ubuntu from 182.61.43.202 Apr 17 16:16:56 ws12vmsma01 sshd[39394]: Failed password for invalid user ubuntu from 182.61.43.202 port 45798 ssh2 Apr 17 16:23:03 ws12vmsma01 sshd[40395]: Invalid user jj from 182.61.43.202 ...	2020-04-18 03:39:04
106.75.179.75	attackbotsspam	SSH Brute-Force reported by Fail2Ban	2020-04-18 03:25:55
208.113.153.203	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-04-18 03:44:50
45.12.213.14	attack	[portscan] Port scan	2020-04-18 03:47:40
80.211.241.29	attack	Found by fail2ban	2020-04-18 03:55:18
71.6.220.101	attackspambots	$f2bV_matches	2020-04-18 03:40:57
46.61.130.238	attack	46.61.130.238 (RU/Russia/Krasnodarskiy/Estosadok (Slantsevyy Rudnik)/-), 3 distributed imapd attacks on account [robert@webpods.com] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Apr 17 15:17:45 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 33 secs): user=, method=PLAIN, rip=171.103.160.214, lip=69.195.129.243, TLS, session= Apr 17 15:23:59 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 24 secs): user=, method=PLAIN, rip=46.61.130.238, lip=69.195.129.243, TLS: Disconnected, session= Apr 17 15:18:17 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 15 secs): user=, method=PLAIN, rip=183.89.212.77, lip=69.195.129.243, TLS: Disconnected, session=<7Vd3aIGjh+23WdRN> IP Addresses Blocked: 171.103.160.214 (TH/Thailand/Bangkok/Bangkok (Khwaeng Din Daeng)/171-103-160-214.static.asianet.co.th)	2020-04-18 03:34:39
94.154.191.252	spamattack	hacked my steam account-hapa277	2020-04-18 03:46:28

Recently Reported IPs

112.66.107.88	112.66.108.111	112.66.108.237	112.66.107.221
112.66.108.27	112.66.108.44	112.66.108.46	112.66.108.45
112.66.108.5	112.66.109.121	112.66.109.140	112.66.109.97
112.66.109.22	112.66.109.87	112.66.109.86	112.66.109.144
112.66.110.207	112.66.110.134	112.66.110.50	112.66.110.102