112.66.111.196

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.111.6	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 541353298c7beb81 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:17:55

Type

Details

Datetime

112.66.111.6

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 541353298c7beb81 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:17:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.111.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54882
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.111.196.			IN	A

;; AUTHORITY SECTION:
.			109	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 15:06:53 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 196.111.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.111.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
209.17.96.106	attackspam	Automatic report - Port Scan	2020-08-06 01:05:45
200.69.236.172	attackspam	2020-08-05 16:34:03,443 fail2ban.actions: WARNING [ssh] Ban 200.69.236.172	2020-08-06 01:33:05
188.156.97.88	attackbots	Aug 5 13:42:20 rocket sshd[25110]: Failed password for root from 188.156.97.88 port 36722 ssh2 Aug 5 13:47:24 rocket sshd[25839]: Failed password for root from 188.156.97.88 port 49536 ssh2 ...	2020-08-06 01:18:54
147.135.253.94	attackspam	[2020-08-05 13:34:06] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:53402' - Wrong password [2020-08-05 13:34:06] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T13:34:06.741-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="562",SessionID="0x7f27200a09d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94/53402",Challenge="043b9b97",ReceivedChallenge="043b9b97",ReceivedHash="e59ff1669fd2fb5f7c6d6b6574e79b84" [2020-08-05 13:34:30] NOTICE[1248] chan_sip.c: Registration from '' failed for '147.135.253.94:60200' - Wrong password [2020-08-05 13:34:30] SECURITY[1275] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-08-05T13:34:30.545-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="563",SessionID="0x7f27205a5c28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/147.135.253.94 ...	2020-08-06 01:42:37
50.239.145.20	attackspam	20/8/5@08:15:27: FAIL: Alarm-Network address from=50.239.145.20 20/8/5@08:15:27: FAIL: Alarm-Network address from=50.239.145.20 ...	2020-08-06 01:09:47
82.138.50.172	attackbotsspam	Unauthorized connection attempt from IP address 82.138.50.172 on Port 445(SMB)	2020-08-06 01:01:37
119.15.191.95	attackbotsspam	Unauthorized connection attempt from IP address 119.15.191.95 on Port 445(SMB)	2020-08-06 01:28:25
194.156.184.28	attack	Aug 5 15:56:57 abendstille sshd\[15626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.156.184.28 user=root Aug 5 15:56:59 abendstille sshd\[15626\]: Failed password for root from 194.156.184.28 port 57135 ssh2 Aug 5 15:59:55 abendstille sshd\[18477\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.156.184.28 user=root Aug 5 15:59:57 abendstille sshd\[18477\]: Failed password for root from 194.156.184.28 port 51381 ssh2 Aug 5 16:02:59 abendstille sshd\[21280\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=194.156.184.28 user=root ...	2020-08-06 01:27:56
94.177.201.50	attack	Aug 5 13:57:51 ovpn sshd\[12102\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.201.50 user=root Aug 5 13:57:53 ovpn sshd\[12102\]: Failed password for root from 94.177.201.50 port 33996 ssh2 Aug 5 14:09:21 ovpn sshd\[14854\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.201.50 user=root Aug 5 14:09:23 ovpn sshd\[14854\]: Failed password for root from 94.177.201.50 port 39668 ssh2 Aug 5 14:15:21 ovpn sshd\[16370\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.201.50 user=root	2020-08-06 01:13:44
103.219.112.47	attack	ET CINS Active Threat Intelligence Poor Reputation IP group 97 - port: 18515 proto: tcp cat: Misc Attackbytes: 60	2020-08-06 01:19:55
186.2.132.222	attack	Unauthorized connection attempt from IP address 186.2.132.222 on Port 445(SMB)	2020-08-06 01:07:43
61.155.110.210	attackspam	Repeated brute force against a port	2020-08-06 01:42:52
116.12.92.250	attackspam	Unauthorized connection attempt from IP address 116.12.92.250 on Port 445(SMB)	2020-08-06 01:17:35
139.198.122.19	attackspambots	Aug 5 19:24:28 prod4 sshd\[15139\]: Failed password for root from 139.198.122.19 port 54546 ssh2 Aug 5 19:27:59 prod4 sshd\[16795\]: Failed password for root from 139.198.122.19 port 48842 ssh2 Aug 5 19:32:07 prod4 sshd\[18530\]: Failed password for root from 139.198.122.19 port 37140 ssh2 ...	2020-08-06 01:32:11
45.55.61.114	attack	Automatic report - XMLRPC Attack	2020-08-06 01:40:02

Recently Reported IPs

36.148.104.139	27.6.200.209	172.69.196.69	115.225.161.202
185.17.132.15	164.90.232.130	118.201.227.14	217.196.161.59
95.85.173.31	36.4.208.141	211.55.33.251	89.17.35.130
43.133.9.231	171.91.27.110	189.80.111.61	118.101.123.229
185.165.151.194	37.152.180.224	114.119.133.17	95.78.125.235