Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Hainan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.1 to port 2095
2019-12-31 08:33:07
Comments on same subnet:
IP Type Details Datetime
112.66.99.6 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 8000 [J]
2020-01-27 15:15:57
112.66.99.159 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.159 to port 802 [T]
2020-01-10 09:23:22
112.66.99.167 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.167 to port 8899
2020-01-04 08:33:51
112.66.99.25 attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.25 to port 8090
2020-01-01 21:33:22
112.66.99.6 attackbotsspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 3128
2019-12-31 07:42:24
112.66.99.211 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430c47bb86fe825 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 06:48:59
112.66.99.155 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7b87ae62e4fe | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:35:16
112.66.99.74 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5414bd353ee5eb45 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:09:41
112.66.99.63 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:18:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.99.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35192
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.66.99.1.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 08:33:04 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 1.99.66.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.99.66.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
113.74.35.81 attackbots
Jun 22 19:23:45 mailman postfix/smtpd[533]: NOQUEUE: reject: RCPT from unknown[113.74.35.81]: 554 5.7.1 Service unavailable; Client host [113.74.35.81] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/113.74.35.81; from= to=<[munged][at][munged]> proto=ESMTP helo=
Jun 22 19:23:46 mailman postfix/smtpd[533]: NOQUEUE: reject: RCPT from unknown[113.74.35.81]: 554 5.7.1 Service unavailable; Client host [113.74.35.81] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/113.74.35.81; from= to=<[munged][at][munged]> proto=ESMTP helo=
2019-06-23 08:28:23
80.67.172.162 attackbots
(sshd) Failed SSH login from 80.67.172.162 (algrothendieck.nos-oignons.net): 5 in the last 3600 secs
2019-06-23 07:57:39
184.168.152.184 attackbotsspam
xmlrpc attack
2019-06-23 07:57:07
34.248.103.64 attackspambots
20 attempts against mh-ssh on creek.magehost.pro
2019-06-23 08:31:53
165.16.37.186 attack
IP: 165.16.37.186
ASN: AS37284 Aljeel-net
Port: World Wide Web HTTP 80
Found in one or more Blacklists
Date: 22/06/2019 2:26:57 PM UTC
2019-06-23 08:20:00
169.239.48.162 attackspam
Jun 17 09:33:37 our-server-hostname postfix/smtpd[31797]: connect from unknown[169.239.48.162]
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun 17 09:33:54 our-server-hostname postfix/smtpd[31797]: too many errors after RCPT from unknown[169.239.48.162]
Jun 17 09:33:54 our-server-hostname postfix/smtpd[31797]: disconnect from unknown[169.239.48.162]
Jun 17 09:36:33 our-server-hostname postfix/smtpd[32495]: connect from unknown[169.239.48.162]
Jun x@x
Jun x@x
Jun x@x
Jun 17 09:36:37 our-server-hostname postfix/smtpd[32495]: lost connection after RCPT from unknown[169.239.48.162]
Jun 17 09:36:37 our-server-hostname postfix/smtpd[32495]: disconnect from unknown[169.239.48.162]
Jun 17 12:31:16 our-server-hostname postfix/smtpd[9223]: connect from unknown[169.239.48.162]
Jun x@x
Jun 17 12:31:19 our-server-hostname postfix/smtpd[9223]: lost connection after RCPT ........
-------------------------------
2019-06-23 08:21:16
173.249.49.134 attackspam
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:40 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:42 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:44 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:46 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:48 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
[munged]::443 173.249.49.134 - - [23/Jun/2019:02:23:50 +0200] "POST /[munged]: HTTP/1.1" 200 9079 "-" "Mozilla/5.0 (X11
2019-06-23 08:25:46
147.135.149.26 attackbotsspam
IP: 147.135.149.26
ASN: AS16276 OVH SAS
Port: IMAP over TLS protocol 993
Date: 22/06/2019 2:26:52 PM UTC
2019-06-23 08:23:56
134.209.233.74 attackbots
Jun 22 18:47:37 *** sshd[1685]: Invalid user doom from 134.209.233.74
2019-06-23 07:48:03
92.119.160.125 attack
22.06.2019 23:20:08 Connection to port 2523 blocked by firewall
2019-06-23 08:05:01
165.227.226.214 attack
IP: 165.227.226.214
ASN: AS14061 DigitalOcean LLC
Port: World Wide Web HTTP 80
Date: 22/06/2019 2:26:58 PM UTC
2019-06-23 08:19:15
200.89.99.30 attackbotsspam
proto=tcp  .  spt=38577  .  dpt=25  .     (listed on Blocklist de  Jun 22)     (835)
2019-06-23 07:51:43
165.231.168.230 attack
IP: 165.231.168.230
ASN: AS47536 Global IP Exchange
Port: http protocol over TLS/SSL 443
Date: 22/06/2019 2:26:59 PM UTC
2019-06-23 08:18:03
118.24.92.216 attackbotsspam
Jun 23 01:08:39 mail sshd\[18188\]: Failed password for invalid user admin from 118.24.92.216 port 58006 ssh2
Jun 23 01:23:53 mail sshd\[18498\]: Invalid user irlande from 118.24.92.216 port 36810
...
2019-06-23 08:26:36
201.77.141.178 attackbotsspam
web-1 [ssh] SSH Attack
2019-06-23 08:29:12

Recently Reported IPs

65.102.109.65 108.209.101.100 115.211.198.55 182.47.78.37
111.224.221.199 213.26.211.77 60.43.214.133 117.241.198.165
110.177.79.43 81.106.137.148 9.208.223.10 110.177.73.123
110.80.152.253 25.23.45.59 27.171.155.186 199.231.201.15
62.171.0.134 152.110.165.206 106.45.1.129 101.108.103.77