112.66.111.208

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.111.6	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 541353298c7beb81 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: ip.skk.moe \| User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:17:55

Type

Details

Datetime

112.66.111.6

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 541353298c7beb81 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:17:55

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.111.208
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38567
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.111.208.			IN	A

;; AUTHORITY SECTION:
.			338	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030102 1800 900 604800 86400

;; Query time: 25 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 02 10:56:23 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 208.111.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 208.111.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
93.174.93.123	attackbotsspam	Feb 8 09:57:09 debian-2gb-nbg1-2 kernel: \[3411469.528393\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=93.174.93.123 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=19678 PROTO=TCP SPT=58206 DPT=3375 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-08 17:06:37
175.6.5.233	attack	$f2bV_matches	2020-02-08 17:05:51
218.92.0.138	attackspambots	Feb 8 13:29:23 gw1 sshd[31355]: Failed password for root from 218.92.0.138 port 41337 ssh2 Feb 8 13:29:37 gw1 sshd[31355]: error: maximum authentication attempts exceeded for root from 218.92.0.138 port 41337 ssh2 [preauth] ...	2020-02-08 16:46:27
165.227.95.131	attackspambots	Port scan: Attack repeated for 24 hours	2020-02-08 16:55:23
103.232.130.122	attackspam	Trying ports that it shouldn't be.	2020-02-08 16:57:46
222.186.42.75	attackbotsspam	08.02.2020 08:43:08 SSH access blocked by firewall	2020-02-08 16:56:47
47.247.143.1	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-08 16:40:45
185.147.212.12	attack	[2020-02-08 03:14:55] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.12:52755' - Wrong password [2020-02-08 03:14:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-08T03:14:55.497-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="7473",SessionID="0x7fd82cd25138",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.12/52755",Challenge="0b507dac",ReceivedChallenge="0b507dac",ReceivedHash="a7c8eeef31f35778d11947f9fe25198e" [2020-02-08 03:16:02] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.147.212.12:60256' - Wrong password [2020-02-08 03:16:02] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-08T03:16:02.394-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6971",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-02-08 16:21:38
157.245.91.72	attackspam	Feb 8 05:54:44 v22018076622670303 sshd\[11281\]: Invalid user aov from 157.245.91.72 port 57622 Feb 8 05:54:44 v22018076622670303 sshd\[11281\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.245.91.72 Feb 8 05:54:45 v22018076622670303 sshd\[11281\]: Failed password for invalid user aov from 157.245.91.72 port 57622 ssh2 ...	2020-02-08 16:44:35
121.180.17.31	attack	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-08 16:30:14
45.148.10.143	attackspambots	Feb 8 08:57:40 MK-Soft-VM3 sshd[21479]: Failed password for root from 45.148.10.143 port 47088 ssh2 ...	2020-02-08 16:24:49
122.51.154.150	attackspambots	Feb 8 08:37:39 icinga sshd[755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.154.150 Feb 8 08:37:41 icinga sshd[755]: Failed password for invalid user pen from 122.51.154.150 port 41237 ssh2 Feb 8 09:04:39 icinga sshd[26789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.154.150 ...	2020-02-08 16:36:35
113.163.182.46	attack	Automatic report - Port Scan Attack	2020-02-08 16:52:34
113.163.13.83	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 08-02-2020 04:55:10.	2020-02-08 16:29:01
81.213.141.184	attackspam	Honeypot attack, port: 81, PTR: 81.213.141.184.dynamic.ttnet.com.tr.	2020-02-08 17:06:15

Recently Reported IPs

112.66.111.36	112.66.112.159	112.66.114.186	112.66.123.150
112.66.124.64	112.66.168.191	112.66.176.103	112.66.176.104
112.66.176.13	112.66.176.133	112.66.176.165	112.66.176.167
207.139.4.159	112.66.176.181	112.66.176.211	112.66.176.215
112.66.176.224	112.66.176.234	112.66.176.238	112.66.176.29