112.66.78.149 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.78.186	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54341caf7996ebad \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/2 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:49:40

Type

Details

Datetime

112.66.78.186

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 54341caf7996ebad | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/2 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.4 Safari/605.1.15 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 04:49:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.78.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30654
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.78.149.			IN	A

;; AUTHORITY SECTION:
.			95	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030102 1800 900 604800 86400

;; Query time: 24 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 02 11:20:53 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 149.78.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.78.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
191.102.156.130	attackspam	Contact form spam	2020-08-27 15:11:51
198.96.155.3	attack	SSH login attempts.	2020-08-27 15:15:39
118.27.11.79	attack	Firewall Dropped Connection	2020-08-27 15:45:44
177.52.26.72	attackbots	Automatic report - Port Scan Attack	2020-08-27 15:05:21
178.62.241.56	attackbotsspam	Invalid user maryam from 178.62.241.56 port 54950	2020-08-27 15:45:14
222.186.180.6	attackbots	Aug 27 08:24:57 ip40 sshd[9633]: Failed password for root from 222.186.180.6 port 30878 ssh2 Aug 27 08:25:00 ip40 sshd[9633]: Failed password for root from 222.186.180.6 port 30878 ssh2 ...	2020-08-27 15:09:33
78.249.121.44	attack	Aug 25 02:27:16 h2022099 sshd[27054]: Invalid user pi from 78.249.121.44 Aug 25 02:27:16 h2022099 sshd[27054]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ces34-1-78-249-121-44.fbx.proxad.net Aug 25 02:27:16 h2022099 sshd[27056]: Invalid user pi from 78.249.121.44 Aug 25 02:27:16 h2022099 sshd[27056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ces34-1-78-249-121-44.fbx.proxad.net Aug 25 02:27:18 h2022099 sshd[27054]: Failed password for invalid user pi from 78.249.121.44 port 39822 ssh2 Aug 25 02:27:18 h2022099 sshd[27054]: Connection closed by 78.249.121.44 [preauth] Aug 25 02:27:18 h2022099 sshd[27056]: Failed password for invalid user pi from 78.249.121.44 port 39830 ssh2 Aug 25 02:27:18 h2022099 sshd[27056]: Connection closed by 78.249.121.44 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=78.249.121.44	2020-08-27 15:27:43
64.146.226.97	attackbots	(sshd) Failed SSH login from 64.146.226.97 (US/United States/ip-64-146-226-97.noanet.net): 5 in the last 300 secs	2020-08-27 15:03:49
27.5.68.243	attackbotsspam	1598500160 - 08/27/2020 05:49:20 Host: 27.5.68.243/27.5.68.243 Port: 445 TCP Blocked ...	2020-08-27 15:10:33
212.129.25.123	attackspambots	212.129.25.123 - - [27/Aug/2020:07:34:06 +0100] "POST /wp-login.php HTTP/1.1" 200 2216 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.25.123 - - [27/Aug/2020:07:34:07 +0100] "POST /wp-login.php HTTP/1.1" 200 2182 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 212.129.25.123 - - [27/Aug/2020:07:34:07 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-27 15:36:43
162.241.215.221	attack	Automatic report - XMLRPC Attack	2020-08-27 15:26:31
188.214.122.60	attackbots	Unauthorized connection attempt detected, IP banned.	2020-08-27 15:33:52
148.63.120.241	attackbotsspam	2020-08-26 22:36:04.069746-0500 localhost smtpd[75750]: NOQUEUE: reject: RCPT from unknown[148.63.120.241]: 554 5.7.1 Service unavailable; Client host [148.63.120.241] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/148.63.120.241; from= to= proto=ESMTP helo=<241.120.63.148.rev.vodafone.pt>	2020-08-27 15:42:11
68.196.44.255	attack	Port probing on unauthorized port 23	2020-08-27 15:48:17
85.209.0.252	attackspambots	$f2bV_matches	2020-08-27 15:47:05

Recently Reported IPs

112.66.78.142	112.66.78.155	112.66.78.158	112.66.78.17
234.23.70.17	112.66.78.177	112.66.78.189	112.66.78.192
112.66.78.197	112.66.78.198	112.66.78.217	112.66.78.22
112.66.78.224	112.66.78.231	112.66.78.237	112.66.78.246
112.66.78.248	78.168.56.13	112.66.78.251	55.46.14.95