112.66.96.211 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.96.51	attackspam	Unauthorized connection attempt detected from IP address 112.66.96.51 to port 8080 [J]	2020-03-02 21:36:36
112.66.96.27	attackbots	Unauthorized connection attempt detected from IP address 112.66.96.27 to port 8000 [J]	2020-01-27 14:47:20
112.66.96.172	attack	Unauthorized connection attempt detected from IP address 112.66.96.172 to port 6666 [J]	2020-01-22 07:26:23
112.66.96.200	attack	Unauthorized connection attempt detected from IP address 112.66.96.200 to port 8118 [J]	2020-01-22 07:26:05
112.66.96.60	attackspambots	Unauthorized connection attempt detected from IP address 112.66.96.60 to port 80 [J]	2020-01-21 02:20:40
112.66.96.31	attackspam	Unauthorized connection attempt detected from IP address 112.66.96.31 to port 80 [J]	2020-01-19 14:20:11
112.66.96.218	attackspambots	Unauthorized connection attempt detected from IP address 112.66.96.218 to port 82 [T]	2020-01-10 08:58:07
112.66.96.251	attackbots	Unauthorized connection attempt detected from IP address 112.66.96.251 to port 803 [T]	2020-01-10 08:57:51
112.66.96.245	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430d8dfa88ad34a \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0184010163 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:57.0) Gecko/20100101 Firefox/57.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:41:15
112.66.96.159	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5414eeb87ff8ebb9 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: api.skk.moe \| User-Agent: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:36:37
112.66.96.146	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 5415f7e6c900eb39 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:18:42
112.66.96.174	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fa094cb6eeb5d \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:22:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.96.211
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56275
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.96.211.			IN	A

;; AUTHORITY SECTION:
.			116	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 58 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 20 20:12:05 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 211.96.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 211.96.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.168.246.128	attackspambots	Dec 24 01:36:42 dedicated sshd[18007]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.168.246.128 user=root Dec 24 01:36:45 dedicated sshd[18007]: Failed password for root from 104.168.246.128 port 34672 ssh2	2019-12-24 08:51:32
14.245.124.100	attack	Unauthorized connection attempt detected from IP address 14.245.124.100 to port 445	2019-12-24 08:30:39
95.84.128.25	attack	Dec 23 23:46:13 exim[24839]: [1\31] 1ijWSq-0006Sd-4F H=broadband-95-84-128-25.ip.moscow.rt.ru [95.84.128.25] F= rejected after DATA: This message scored 103.5 spam points.	2019-12-24 08:34:22
123.136.161.146	attackspam	Dec 23 22:52:48 thevastnessof sshd[7632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.136.161.146 ...	2019-12-24 08:41:17
190.78.93.162	attackspam	1577141179 - 12/23/2019 23:46:19 Host: 190.78.93.162/190.78.93.162 Port: 445 TCP Blocked	2019-12-24 08:56:35
217.103.68.77	attackspam	Dec 24 01:34:21 srv206 sshd[7712]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-217-103-68-77.ip.prioritytelecom.net user=root Dec 24 01:34:23 srv206 sshd[7712]: Failed password for root from 217.103.68.77 port 39106 ssh2 ...	2019-12-24 08:48:45
49.88.112.64	attackspam	Unauthorized connection attempt detected from IP address 49.88.112.64 to port 22	2019-12-24 08:40:14
45.76.206.84	attackbots	Dec 23 23:46:43 debian-2gb-nbg1-2 kernel: \[793946.252567\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.76.206.84 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=56877 PROTO=TCP SPT=48976 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-24 08:45:11
140.143.206.216	attack	Lines containing failures of 140.143.206.216 Dec 23 23:16:36 nextcloud sshd[19583]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.206.216 user=r.r Dec 23 23:16:39 nextcloud sshd[19583]: Failed password for r.r from 140.143.206.216 port 36272 ssh2 Dec 23 23:16:39 nextcloud sshd[19583]: Received disconnect from 140.143.206.216 port 36272:11: Bye Bye [preauth] Dec 23 23:16:39 nextcloud sshd[19583]: Disconnected from authenticating user r.r 140.143.206.216 port 36272 [preauth] Dec 23 23:40:55 nextcloud sshd[28927]: Invalid user shelly from 140.143.206.216 port 46408 Dec 23 23:40:55 nextcloud sshd[28927]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.206.216 Dec 23 23:40:56 nextcloud sshd[28927]: Failed password for invalid user shelly from 140.143.206.216 port 46408 ssh2 Dec 23 23:40:57 nextcloud sshd[28927]: Received disconnect from 140.143.206.216 port 46408:11: Bye Bye [pr........ ------------------------------	2019-12-24 08:44:18
201.72.238.179	attackbots	Invalid user yoyo from 201.72.238.179 port 10802	2019-12-24 08:49:08
122.114.157.184	attackspam	Dec 24 00:44:13 www sshd\[1171\]: Invalid user stapnes from 122.114.157.184Dec 24 00:44:15 www sshd\[1171\]: Failed password for invalid user stapnes from 122.114.157.184 port 47308 ssh2Dec 24 00:47:18 www sshd\[1184\]: Invalid user isabey from 122.114.157.184Dec 24 00:47:20 www sshd\[1184\]: Failed password for invalid user isabey from 122.114.157.184 port 43642 ssh2 ...	2019-12-24 08:18:58
14.162.186.101	attackbots	Unauthorized connection attempt detected from IP address 14.162.186.101 to port 445	2019-12-24 08:19:33
182.61.136.23	attack	Dec 23 18:14:14 linuxvps sshd\[65011\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.136.23 user=root Dec 23 18:14:15 linuxvps sshd\[65011\]: Failed password for root from 182.61.136.23 port 57822 ssh2 Dec 23 18:19:01 linuxvps sshd\[2845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.136.23 user=root Dec 23 18:19:03 linuxvps sshd\[2845\]: Failed password for root from 182.61.136.23 port 43844 ssh2 Dec 23 18:23:46 linuxvps sshd\[5902\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.136.23 user=root	2019-12-24 08:35:26
203.158.198.237	attackspam	Automatic report - SSH Brute-Force Attack	2019-12-24 08:32:28
118.89.201.225	attack	Dec 23 01:14:07 carla sshd[721]: Invalid user johnny from 118.89.201.225 Dec 23 01:14:07 carla sshd[721]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.201.225 Dec 23 01:14:09 carla sshd[721]: Failed password for invalid user johnny from 118.89.201.225 port 39052 ssh2 Dec 23 01:14:10 carla sshd[722]: Received disconnect from 118.89.201.225: 11: Bye Bye Dec 23 01:28:49 carla sshd[805]: Invalid user server from 118.89.201.225 Dec 23 01:28:49 carla sshd[805]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.201.225 Dec 23 01:28:51 carla sshd[805]: Failed password for invalid user server from 118.89.201.225 port 38876 ssh2 Dec 23 01:28:51 carla sshd[806]: Received disconnect from 118.89.201.225: 11: Bye Bye Dec 23 01:36:59 carla sshd[821]: Invalid user test from 118.89.201.225 Dec 23 01:36:59 carla sshd[821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty........ -------------------------------	2019-12-24 08:20:06

Recently Reported IPs

112.66.96.122	112.67.206.115	112.66.99.21	112.67.37.208
112.70.33.251	112.72.230.183	112.74.125.141	112.74.108.47
112.74.18.76	112.74.126.141	112.74.138.88	112.74.201.25
104.21.18.149	112.74.190.224	112.74.19.160	112.74.24.28
112.74.55.204	112.74.21.20	112.74.71.96	112.74.32.103