112.66.98.124 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
112.66.98.86	attackbots	Unauthorised access (Aug 30) SRC=112.66.98.86 LEN=40 TTL=51 ID=13759 TCP DPT=23 WINDOW=6350 SYN	2020-08-31 08:15:47
112.66.98.112	attackspam	Unauthorized connection attempt detected from IP address 112.66.98.112 to port 8123 [J]	2020-03-02 15:04:45
112.66.98.99	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54304a3eb933ebc9 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:49:23
112.66.98.114	attack	The IP has triggered Cloudflare WAF. CF-Ray: 54128ea20951d37e \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/4.038533357 Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1) QQBrowser/6.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:13:49
112.66.98.35	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 541560a2cd22e7ed \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:48:21

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.98.124
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25563
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.98.124.			IN	A

;; AUTHORITY SECTION:
.			302	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:32:58 CST 2022
;; MSG SIZE  rcvd: 106

Host info

Host 124.98.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 124.98.66.112.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
192.227.252.14	attackbots	Invalid user admin from 192.227.252.14 port 33170	2019-09-26 03:46:40
86.105.59.184	attackbotsspam	Honeypot attack, port: 23, PTR: host-static-86-105-59-184.moldtelecom.md.	2019-09-26 03:45:17
222.186.175.167	attack	Sep 25 21:56:09 Ubuntu-1404-trusty-64-minimal sshd\[27615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Sep 25 21:56:10 Ubuntu-1404-trusty-64-minimal sshd\[27615\]: Failed password for root from 222.186.175.167 port 32932 ssh2 Sep 25 21:56:34 Ubuntu-1404-trusty-64-minimal sshd\[27793\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root Sep 25 21:56:37 Ubuntu-1404-trusty-64-minimal sshd\[27793\]: Failed password for root from 222.186.175.167 port 31368 ssh2 Sep 25 21:57:05 Ubuntu-1404-trusty-64-minimal sshd\[27966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.167 user=root	2019-09-26 03:57:32
41.211.116.32	attackbotsspam	ssh failed login	2019-09-26 03:59:35
117.240.189.202	attackbotsspam	445/tcp [2019-09-25]1pkt	2019-09-26 03:55:32
49.88.112.111	attackbotsspam	Sep 25 17:20:02 monocul sshd[7209]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.111 user=root Sep 25 17:20:04 monocul sshd[7209]: Failed password for root from 49.88.112.111 port 38057 ssh2 ...	2019-09-26 03:59:11
36.236.141.156	attackbots	Honeypot attack, port: 23, PTR: 36-236-141-156.dynamic-ip.hinet.net.	2019-09-26 03:41:11
115.124.29.97	attack	Spam from qdt@tritonchina.com	2019-09-26 04:11:58
167.114.152.139	attack	Sep 25 21:45:17 MK-Soft-VM4 sshd[3048]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.152.139 Sep 25 21:45:19 MK-Soft-VM4 sshd[3048]: Failed password for invalid user 12 from 167.114.152.139 port 58542 ssh2 ...	2019-09-26 03:49:48
62.219.142.10	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/62.219.142.10/ IL - 1H : (65) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : IL NAME ASN : ASN8551 IP : 62.219.142.10 CIDR : 62.219.136.0/21 PREFIX COUNT : 3249 UNIQUE IP COUNT : 1550848 WYKRYTE ATAKI Z ASN8551 : 1H - 1 3H - 1 6H - 3 12H - 6 24H - 21 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-09-26 03:45:59
77.247.109.28	attackspam	\[2019-09-25 09:40:16\] NOTICE\[1970\] chan_sip.c: Registration from '"9999" \' failed for '77.247.109.28:5142' - Wrong password \[2019-09-25 09:40:16\] SECURITY\[1978\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-25T09:40:16.985-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9999",SessionID="0x7f9b3403d098",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.28/5142",Challenge="6e387814",ReceivedChallenge="6e387814",ReceivedHash="87d86f148b7d94251d70d9bb43093927" \[2019-09-25 09:40:17\] SECURITY\[1978\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-25T09:40:17.963-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441519470422",SessionID="0x7f9b3402de58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.28/5142",ACLName="no_extension_match" \[2019-09-25 09:40:17\] SECURITY\[1978\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-09-25T	2019-09-26 03:56:11
118.193.31.181	attack	Honeypot hit.	2019-09-26 04:16:17
137.59.162.169	attack	Sep 25 20:45:25 srv206 sshd[11494]: Invalid user newscng from 137.59.162.169 ...	2019-09-26 03:41:40
116.250.198.242	attackbots	Honeypot attack, port: 23, PTR: 116-250-198-242.pool.activ8me.net.au.	2019-09-26 03:46:57
118.169.85.226	attackbotsspam	Scanning random ports - tries to find possible vulnerable services	2019-09-26 03:52:26

Recently Reported IPs

112.66.98.66	112.66.98.242	112.66.98.73	112.66.99.227
112.66.99.179	112.67.190.232	112.72.144.45	112.72.185.175
112.66.99.58	112.74.39.28	112.7.46.162	112.74.56.145
112.74.168.139	112.78.133.146	112.7.43.236	112.78.181.182
112.72.95.94	112.79.224.243	112.78.133.49	112.80.136.104