112.66.107.192

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
112.66.107.70	attack	Unauthorized connection attempt detected from IP address 112.66.107.70 to port 8082 [J]	2020-03-02 20:34:45
112.66.107.228	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 541755e7a874999b \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:05:42
112.66.107.110	attack	The IP has triggered Cloudflare WAF. CF-Ray: 541760960bd7eb91 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 04:13:22

类型

评论内容

时间

112.66.107.70

attack

Unauthorized connection attempt detected from IP address 112.66.107.70 to port 8082 [J]

2020-03-02 20:34:45

112.66.107.228

attackspambots

The IP has triggered Cloudflare WAF. CF-Ray: 541755e7a874999b | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.077692140 Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:05:42

112.66.107.110

attack

The IP has triggered Cloudflare WAF. CF-Ray: 541760960bd7eb91 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 04:13:22

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.107.192
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16068
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;112.66.107.192.			IN	A

;; AUTHORITY SECTION:
.			158	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021202 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:32:20 CST 2022
;; MSG SIZE  rcvd: 107

HOST信息:

Host 192.107.66.112.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 192.107.66.112.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
185.50.149.13	attackbots	Apr 23 01:56:17 georgia postfix/smtpd[3154]: connect from unknown[185.50.149.13] Apr 23 01:56:22 georgia postfix/smtpd[3154]: warning: unknown[185.50.149.13]: SASL LOGIN authentication failed: authentication failure Apr 23 01:56:23 georgia postfix/smtpd[3154]: lost connection after AUTH from unknown[185.50.149.13] Apr 23 01:56:23 georgia postfix/smtpd[3154]: disconnect from unknown[185.50.149.13] ehlo=1 auth=0/1 commands=1/2 Apr 23 01:56:23 georgia postfix/smtpd[3154]: connect from unknown[185.50.149.13] Apr 23 01:56:27 georgia postfix/smtpd[3154]: warning: unknown[185.50.149.13]: SASL LOGIN authentication failed: authentication failure Apr 23 01:56:28 georgia postfix/smtpd[3154]: lost connection after AUTH from unknown[185.50.149.13] Apr 23 01:56:28 georgia postfix/smtpd[3154]: disconnect from unknown[185.50.149.13] ehlo=1 auth=0/1 commands=1/2 Apr 23 01:56:33 georgia postfix/smtpd[3154]: connect from unknown[185.50.149.13] Apr 23 01:56:38 georgia postfix/smtpd[3154]: ........ -------------------------------	2020-04-23 21:54:54
88.249.182.227	attackspambots	Automatic report - Port Scan Attack	2020-04-23 21:36:25
86.123.211.133	attack	DATE:2020-04-23 10:50:12, IP:86.123.211.133, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-04-23 21:30:33
14.136.245.194	attackbots	(sshd) Failed SSH login from 14.136.245.194 (HK/Hong Kong/astri.org): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 23 12:19:21 ubnt-55d23 sshd[24737]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.136.245.194 user=root Apr 23 12:19:23 ubnt-55d23 sshd[24737]: Failed password for root from 14.136.245.194 port 38113 ssh2	2020-04-23 21:43:20
178.45.125.82	attackspam	Unauthorized connection attempt from IP address 178.45.125.82 on Port 445(SMB)	2020-04-23 21:14:25
120.70.101.103	attackspam	2020-04-23T08:25:48.755562abusebot-5.cloudsearch.cf sshd[25647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.101.103 user=root 2020-04-23T08:25:50.301181abusebot-5.cloudsearch.cf sshd[25647]: Failed password for root from 120.70.101.103 port 51897 ssh2 2020-04-23T08:31:17.132936abusebot-5.cloudsearch.cf sshd[25668]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.101.103 user=root 2020-04-23T08:31:19.511491abusebot-5.cloudsearch.cf sshd[25668]: Failed password for root from 120.70.101.103 port 50129 ssh2 2020-04-23T08:33:41.990454abusebot-5.cloudsearch.cf sshd[25769]: Invalid user postgres from 120.70.101.103 port 32924 2020-04-23T08:33:41.996101abusebot-5.cloudsearch.cf sshd[25769]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.70.101.103 2020-04-23T08:33:41.990454abusebot-5.cloudsearch.cf sshd[25769]: Invalid user postgres from 120.70.101.1 ...	2020-04-23 21:22:52
220.133.97.20	attackspambots	Apr 23 15:11:25 h2779839 sshd[25438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.97.20 user=root Apr 23 15:11:27 h2779839 sshd[25438]: Failed password for root from 220.133.97.20 port 38006 ssh2 Apr 23 15:16:05 h2779839 sshd[25498]: Invalid user bn from 220.133.97.20 port 52118 Apr 23 15:16:05 h2779839 sshd[25498]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.97.20 Apr 23 15:16:05 h2779839 sshd[25498]: Invalid user bn from 220.133.97.20 port 52118 Apr 23 15:16:07 h2779839 sshd[25498]: Failed password for invalid user bn from 220.133.97.20 port 52118 ssh2 Apr 23 15:20:41 h2779839 sshd[25562]: Invalid user bb from 220.133.97.20 port 37986 Apr 23 15:20:41 h2779839 sshd[25562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.133.97.20 Apr 23 15:20:41 h2779839 sshd[25562]: Invalid user bb from 220.133.97.20 port 37986 Apr 23 15:20:43 h2779839 s ...	2020-04-23 21:49:08
133.242.53.108	attackspambots	IP blocked	2020-04-23 21:30:03
58.87.66.249	attackspam	Invalid user xc from 58.87.66.249 port 53240	2020-04-23 21:38:11
165.22.70.101	attack	Unauthorized connection attempt detected from IP address 165.22.70.101 to port 9056	2020-04-23 21:20:26
202.179.13.34	attackspam	Unauthorized connection attempt from IP address 202.179.13.34 on Port 445(SMB)	2020-04-23 21:25:55
217.112.128.171	attackbots	Apr 23 11:28:59 web01.agentur-b-2.de postfix/smtpd[131327]: NOQUEUE: reject: RCPT from unknown[217.112.128.171]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 23 11:28:59 web01.agentur-b-2.de postfix/smtpd[148078]: NOQUEUE: reject: RCPT from unknown[217.112.128.171]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 23 11:28:59 web01.agentur-b-2.de postfix/smtpd[148135]: NOQUEUE: reject: RCPT from unknown[217.112.128.171]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Apr 23 11:28:59 web01.agentur-b-2.de postfix/smtpd[148136]: NOQUEUE: reject: RCPT from unknown[217.112.128.171]: 450 4.7	2020-04-23 21:51:52
200.88.48.99	attackspambots	2020-04-23T12:21:00.609356shield sshd\[25090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.88.48.99 user=root 2020-04-23T12:21:02.820540shield sshd\[25090\]: Failed password for root from 200.88.48.99 port 33494 ssh2 2020-04-23T12:25:17.955789shield sshd\[25815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.88.48.99 user=root 2020-04-23T12:25:20.448009shield sshd\[25815\]: Failed password for root from 200.88.48.99 port 45726 ssh2 2020-04-23T12:29:34.072709shield sshd\[26429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.88.48.99 user=root	2020-04-23 21:15:30
185.50.149.15	attack	Apr 23 15:41:27 mailserver postfix/smtps/smtpd[73287]: disconnect from unknown[185.50.149.15] Apr 23 15:41:27 mailserver postfix/smtps/smtpd[73287]: connect from unknown[185.50.149.15] Apr 23 15:41:34 mailserver postfix/smtps/smtpd[73287]: lost connection after AUTH from unknown[185.50.149.15] Apr 23 15:41:34 mailserver postfix/smtps/smtpd[73287]: disconnect from unknown[185.50.149.15] Apr 23 15:41:35 mailserver postfix/smtps/smtpd[73287]: connect from unknown[185.50.149.15] Apr 23 15:41:42 mailserver postfix/smtps/smtpd[73287]: lost connection after AUTH from unknown[185.50.149.15] Apr 23 15:41:42 mailserver postfix/smtps/smtpd[73287]: disconnect from unknown[185.50.149.15] Apr 23 15:41:42 mailserver postfix/smtps/smtpd[73287]: connect from unknown[185.50.149.15] Apr 23 15:41:46 mailserver dovecot: auth-worker(73264): sql([hidden],185.50.149.15): unknown user Apr 23 15:41:48 mailserver postfix/smtps/smtpd[73287]: warning: unknown[185.50.149.15]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-04-23 21:54:24
208.187.166.178	attackbots	Apr 23 10:35:55 mail.srvfarm.net postfix/smtpd[3840616]: NOQUEUE: reject: RCPT from unknown[208.187.166.178]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 23 10:35:55 mail.srvfarm.net postfix/smtpd[3844490]: NOQUEUE: reject: RCPT from unknown[208.187.166.178]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 23 10:38:34 mail.srvfarm.net postfix/smtpd[3837599]: NOQUEUE: reject: RCPT from unknown[208.187.166.178]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Apr 23 10:38:39 mail.srvfarm.net postfix/smtpd[3845049]: NOQUEUE: rejec	2020-04-23 21:52:22

最近上报的IP列表

112.66.107.101	112.66.107.226	112.66.107.15	112.66.107.237
112.66.107.236	112.66.107.212	112.66.107.69	112.66.107.251
112.66.108.137	112.66.107.83	112.66.108.161	112.66.108.190
112.66.108.187	112.66.108.217	112.66.107.8	112.66.108.178
112.66.108.86	112.66.108.37	112.66.108.9	112.66.109.118