112.66.106.6 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): None

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.66.106.218	attack	Unauthorized connection attempt detected from IP address 112.66.106.218 to port 8080	2019-12-31 06:31:00
112.66.106.87	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540f2ea2d96a9965 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:18:11

类型

评论内容

时间

112.66.106.218

attack

Unauthorized connection attempt detected from IP address 112.66.106.218 to port 8080

2019-12-31 06:31:00

112.66.106.87

attack

The IP has triggered Cloudflare WAF. CF-Ray: 540f2ea2d96a9965 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:18:11

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.106.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23341
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.106.6.			IN	A

;; AUTHORITY SECTION:
.			499	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 14 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:04:25 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 6.106.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.106.66.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
34.205.210.194	attack	21 attempts against mh-ssh on echoip.magehost.pro	2019-12-18 20:16:42
109.228.21.199	attackbotsspam	Honeypot attack, port: 445, PTR: server109-228-21-199.live-servers.net.	2019-12-18 20:21:03
185.163.47.181	attackspambots	Honeypot attack, port: 81, PTR: 185-163-47-181.mivocloud.com.	2019-12-18 20:31:41
175.176.23.13	attackspambots	Automatic report - Port Scan	2019-12-18 20:43:39
218.255.148.182	attack	Unauthorized connection attempt detected from IP address 218.255.148.182 to port 445	2019-12-18 20:54:08
120.131.3.144	attack	detected by Fail2Ban	2019-12-18 20:41:52
40.92.70.83	attackspambots	Dec 18 09:25:44 debian-2gb-vpn-nbg1-1 kernel: [1028709.457001] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.70.83 DST=78.46.192.101 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=14986 DF PROTO=TCP SPT=6149 DPT=25 WINDOW=0 RES=0x00 ACK RST URGP=0	2019-12-18 20:16:01
41.87.80.26	attack	2019-12-18T13:14:47.157925 sshd[4770]: Invalid user universitaetsgelaende from 41.87.80.26 port 15151 2019-12-18T13:14:47.173035 sshd[4770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.87.80.26 2019-12-18T13:14:47.157925 sshd[4770]: Invalid user universitaetsgelaende from 41.87.80.26 port 15151 2019-12-18T13:14:49.514787 sshd[4770]: Failed password for invalid user universitaetsgelaende from 41.87.80.26 port 15151 ssh2 2019-12-18T13:22:30.825898 sshd[4954]: Invalid user mansourati from 41.87.80.26 port 22682 ...	2019-12-18 20:35:47
159.203.32.71	attackspambots	Dec 17 22:40:52 hpm sshd\[31487\]: Invalid user noelscher from 159.203.32.71 Dec 17 22:40:52 hpm sshd\[31487\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.32.71 Dec 17 22:40:55 hpm sshd\[31487\]: Failed password for invalid user noelscher from 159.203.32.71 port 59762 ssh2 Dec 17 22:48:15 hpm sshd\[32330\]: Invalid user rabipour from 159.203.32.71 Dec 17 22:48:15 hpm sshd\[32330\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.203.32.71	2019-12-18 20:22:46
40.92.70.53	attackspambots	Dec 18 09:25:45 debian-2gb-vpn-nbg1-1 kernel: [1028709.957944] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.70.53 DST=78.46.192.101 LEN=48 TOS=0x00 PREC=0x00 TTL=110 ID=31587 DF PROTO=TCP SPT=6149 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0	2019-12-18 20:16:23
36.71.236.159	attackspam	Attempt to attack host OS, exploiting network vulnerabilities, on 18-12-2019 06:25:13.	2019-12-18 20:52:57
181.48.139.118	attackspam	$f2bV_matches	2019-12-18 20:17:15
51.91.118.71	attackspam	Dec 17 08:56:35 liveconfig01 sshd[22330]: Invalid user yoyo from 51.91.118.71 Dec 17 08:56:35 liveconfig01 sshd[22330]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.118.71 Dec 17 08:56:36 liveconfig01 sshd[22330]: Failed password for invalid user yoyo from 51.91.118.71 port 56420 ssh2 Dec 17 08:56:36 liveconfig01 sshd[22330]: Received disconnect from 51.91.118.71 port 56420:11: Bye Bye [preauth] Dec 17 08:56:36 liveconfig01 sshd[22330]: Disconnected from 51.91.118.71 port 56420 [preauth] Dec 17 09:07:42 liveconfig01 sshd[22781]: Invalid user jahnace from 51.91.118.71 Dec 17 09:07:42 liveconfig01 sshd[22781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.118.71 Dec 17 09:07:44 liveconfig01 sshd[22781]: Failed password for invalid user jahnace from 51.91.118.71 port 53534 ssh2 Dec 17 09:07:44 liveconfig01 sshd[22781]: Received disconnect from 51.91.118.71 port 53534:11: Bye By........ -------------------------------	2019-12-18 20:27:21
106.13.208.49	attackbots	Brute-force attempt banned	2019-12-18 20:32:25
37.49.230.81	attackspambots	\[2019-12-18 07:13:58\] NOTICE\[2839\] chan_sip.c: Registration from '"808" \' failed for '37.49.230.81:5294' - Wrong password \[2019-12-18 07:13:58\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T07:13:58.085-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="808",SessionID="0x7f0fb4287008",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.81/5294",Challenge="36e89487",ReceivedChallenge="36e89487",ReceivedHash="196886df6a842e039194c5c1a0c3832c" \[2019-12-18 07:13:58\] NOTICE\[2839\] chan_sip.c: Registration from '"808" \' failed for '37.49.230.81:5294' - Wrong password \[2019-12-18 07:13:58\] SECURITY\[2857\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-12-18T07:13:58.210-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="808",SessionID="0x7f0fb4123628",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.2	2019-12-18 20:29:26

最近上报的IP列表

112.66.105.89	112.66.106.201	112.66.105.210	112.66.107.117
112.66.107.200	112.66.107.217	112.66.107.164	112.66.107.91
112.66.108.176	112.66.108.191	112.66.108.131	112.66.108.207
112.66.108.235	112.66.108.186	112.66.108.58	112.66.108.33
112.66.109.135	112.66.108.54	112.66.108.40	112.66.109.150