112.66.108.207

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.108.185	attackspam	Unauthorized connection attempt detected from IP address 112.66.108.185 to port 999 [J]	2020-03-02 21:36:14
112.66.108.112	attackspambots	HTTP/80/443 Probe, BF, WP, Hack -	2019-12-26 05:22:34
112.66.108.92	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fe74d1f6fd366 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:05:15
112.66.108.128	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 540f519dae11eabb \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:13:02
112.66.108.17	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54168ea45acb98c3 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:03:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.108.207
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63070
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.108.207.			IN	A

;; AUTHORITY SECTION:
.			392	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:04:28 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 207.108.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 207.108.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
125.130.142.12	attackbotsspam	$f2bV_matches	2019-08-30 07:37:19
177.44.17.247	attackbotsspam	$f2bV_matches	2019-08-30 07:17:06
157.230.183.158	attack	Aug 29 23:46:49 mail sshd\[19303\]: Failed password for invalid user wyatt from 157.230.183.158 port 35148 ssh2 Aug 30 00:01:55 mail sshd\[19534\]: Invalid user eustace from 157.230.183.158 port 41922 Aug 30 00:01:55 mail sshd\[19534\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.183.158 ...	2019-08-30 07:15:25
118.163.181.157	attack	Aug 29 12:10:21 aiointranet sshd\[24762\]: Invalid user ralph from 118.163.181.157 Aug 29 12:10:21 aiointranet sshd\[24762\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118-163-181-157.hinet-ip.hinet.net Aug 29 12:10:23 aiointranet sshd\[24762\]: Failed password for invalid user ralph from 118.163.181.157 port 39466 ssh2 Aug 29 12:15:04 aiointranet sshd\[25167\]: Invalid user ayub from 118.163.181.157 Aug 29 12:15:04 aiointranet sshd\[25167\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118-163-181-157.hinet-ip.hinet.net	2019-08-30 07:43:28
177.7.108.208	attackbots	Automatic report - Port Scan Attack	2019-08-30 07:32:49
222.186.52.86	attack	Aug 29 22:34:54 ip-172-31-1-72 sshd\[11315\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.86 user=root Aug 29 22:34:55 ip-172-31-1-72 sshd\[11315\]: Failed password for root from 222.186.52.86 port 43121 ssh2 Aug 29 22:36:55 ip-172-31-1-72 sshd\[11345\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.52.86 user=root Aug 29 22:36:57 ip-172-31-1-72 sshd\[11345\]: Failed password for root from 222.186.52.86 port 33204 ssh2 Aug 29 22:36:59 ip-172-31-1-72 sshd\[11345\]: Failed password for root from 222.186.52.86 port 33204 ssh2	2019-08-30 07:28:31
134.209.78.43	attack	Aug 29 12:57:52 kapalua sshd\[5661\]: Invalid user suzuki from 134.209.78.43 Aug 29 12:57:52 kapalua sshd\[5661\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43 Aug 29 12:57:54 kapalua sshd\[5661\]: Failed password for invalid user suzuki from 134.209.78.43 port 34098 ssh2 Aug 29 13:01:45 kapalua sshd\[6029\]: Invalid user sophie from 134.209.78.43 Aug 29 13:01:45 kapalua sshd\[6029\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.209.78.43	2019-08-30 07:06:13
92.63.194.90	attack	2019-08-30T05:36:23.122360enmeeting.mahidol.ac.th sshd\[3050\]: Invalid user admin from 92.63.194.90 port 58654 2019-08-30T05:36:23.136825enmeeting.mahidol.ac.th sshd\[3050\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 2019-08-30T05:36:25.681448enmeeting.mahidol.ac.th sshd\[3050\]: Failed password for invalid user admin from 92.63.194.90 port 58654 ssh2 ...	2019-08-30 07:21:12
175.146.20.27	attackbotsspam	Unauthorised access (Aug 29) SRC=175.146.20.27 LEN=40 TTL=49 ID=3310 TCP DPT=8080 WINDOW=61413 SYN Unauthorised access (Aug 27) SRC=175.146.20.27 LEN=40 TTL=49 ID=47166 TCP DPT=8080 WINDOW=42590 SYN	2019-08-30 07:30:55
158.69.110.31	attackspam	ssh failed login	2019-08-30 07:50:40
104.140.188.22	attackbots	29.08.2019 20:29:12 Connection to port 5900 blocked by firewall	2019-08-30 07:44:16
159.65.171.113	attackbots	Aug 29 18:09:03 aat-srv002 sshd[30226]: Failed password for invalid user icinga from 159.65.171.113 port 52912 ssh2 Aug 29 18:24:58 aat-srv002 sshd[30835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 Aug 29 18:25:00 aat-srv002 sshd[30835]: Failed password for invalid user pankaj from 159.65.171.113 port 36482 ssh2 Aug 29 18:29:00 aat-srv002 sshd[31005]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113 ...	2019-08-30 07:51:30
202.69.177.67	attackbots	Multiple failed RDP login attempts	2019-08-30 07:27:05
59.126.66.75	attackbots	(mod_security) mod_security (id:230011) triggered by 59.126.66.75 (TW/Taiwan/59-126-66-75.HINET-IP.hinet.net): 5 in the last 3600 secs	2019-08-30 07:24:45
5.62.41.136	attackspam	\[2019-08-29 19:28:51\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '5.62.41.136:3330' - Wrong password \[2019-08-29 19:28:51\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T19:28:51.439-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="22691",SessionID="0x7f7b30db7498",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.136/61581",Challenge="33fb4725",ReceivedChallenge="33fb4725",ReceivedHash="e279c9c43902494a33f6816f17ebbbf2" \[2019-08-29 19:29:41\] NOTICE\[1829\] chan_sip.c: Registration from '\' failed for '5.62.41.136:3262' - Wrong password \[2019-08-29 19:29:41\] SECURITY\[1837\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-08-29T19:29:41.507-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="29374",SessionID="0x7f7b30be0af8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/5.62.41.136/6	2019-08-30 07:40:07

Recently Reported IPs

112.66.108.131	112.66.108.235	112.66.108.186	112.66.108.58
112.66.108.33	112.66.109.135	112.66.108.54	112.66.108.40
112.66.109.150	112.66.108.94	112.66.109.200	112.66.109.4
112.66.109.20	112.66.110.1	112.66.110.132	112.66.109.184
112.66.110.229	112.66.110.137	112.66.110.15	112.66.110.147