Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Hainan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.1 to port 2095
2019-12-31 08:33:07
Comments on same subnet:
IP Type Details Datetime
112.66.99.6 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 8000 [J]
2020-01-27 15:15:57
112.66.99.159 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.159 to port 802 [T]
2020-01-10 09:23:22
112.66.99.167 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.167 to port 8899
2020-01-04 08:33:51
112.66.99.25 attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.25 to port 8090
2020-01-01 21:33:22
112.66.99.6 attackbotsspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 3128
2019-12-31 07:42:24
112.66.99.211 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430c47bb86fe825 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 06:48:59
112.66.99.155 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7b87ae62e4fe | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:35:16
112.66.99.74 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5414bd353ee5eb45 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:09:41
112.66.99.63 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:18:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.99.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35192
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.66.99.1.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 08:33:04 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 1.99.66.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.99.66.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
179.214.141.41 attackbots
Sep  7 15:07:12 XXX sshd[59645]: Invalid user test from 179.214.141.41 port 54817
2019-09-07 23:34:27
62.234.109.155 attack
Sep  7 13:04:27 MK-Soft-Root1 sshd\[30063\]: Invalid user jenkins from 62.234.109.155 port 52628
Sep  7 13:04:27 MK-Soft-Root1 sshd\[30063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.109.155
Sep  7 13:04:29 MK-Soft-Root1 sshd\[30063\]: Failed password for invalid user jenkins from 62.234.109.155 port 52628 ssh2
...
2019-09-07 23:57:48
2a01:4f8:121:30d::2 attack
Sep  7 09:36:25 wildwolf wplogin[31162]: 2a01:4f8:121:30d::2 prometheus.ngo [2019-09-07 09:36:25+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "admin" "F*uckYou"
Sep  7 09:36:26 wildwolf wplogin[5591]: 2a01:4f8:121:30d::2 prometheus.ngo [2019-09-07 09:36:26+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "alina" ""
Sep  7 09:36:27 wildwolf wplogin[7017]: 2a01:4f8:121:30d::2 prometheus.ngo [2019-09-07 09:36:27+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "burko" ""
Sep  7 09:36:28 wildwolf wplogin[32010]: 2a01:4f8:121:30d::2 prometheus.ngo [2019-09-07 09:36:28+0000] "POST /wp-login.php HTTP/1.1" "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" "pavlo" ""
Sep  7 09:36:29 wildwolf wplogin[19304]: 2a01:4f8:121:30d::2 prometheus........
------------------------------
2019-09-07 23:47:35
128.199.142.0 attackbotsspam
Sep  7 06:10:12 hiderm sshd\[7028\]: Invalid user user from 128.199.142.0
Sep  7 06:10:12 hiderm sshd\[7028\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0
Sep  7 06:10:13 hiderm sshd\[7028\]: Failed password for invalid user user from 128.199.142.0 port 40036 ssh2
Sep  7 06:15:27 hiderm sshd\[7485\]: Invalid user usuario from 128.199.142.0
Sep  7 06:15:27 hiderm sshd\[7485\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.142.0
2019-09-08 00:25:18
90.148.170.179 attackbotsspam
Sep  7 11:39:12 h2421860 postfix/postscreen[10871]: CONNECT from [90.148.170.179]:59029 to [85.214.119.52]:25
Sep  7 11:39:12 h2421860 postfix/dnsblog[10874]: addr 90.148.170.179 listed by domain zen.spamhaus.org as 127.0.0.4
Sep  7 11:39:12 h2421860 postfix/dnsblog[10874]: addr 90.148.170.179 listed by domain zen.spamhaus.org as 127.0.0.11
Sep  7 11:39:12 h2421860 postfix/dnsblog[10874]: addr 90.148.170.179 listed by domain Unknown.trblspam.com as 185.53.179.7
Sep  7 11:39:12 h2421860 postfix/dnsblog[10880]: addr 90.148.170.179 listed by domain dnsbl.sorbs.net as 127.0.0.10
Sep  7 11:39:12 h2421860 postfix/dnsblog[10880]: addr 90.148.170.179 listed by domain dnsbl.sorbs.net as 127.0.0.6
Sep  7 11:39:12 h2421860 postfix/dnsblog[10876]: addr 90.148.170.179 listed by domain b.barracudacentral.org as 127.0.0.2
Sep  7 11:39:14 h2421860 postfix/dnsblog[10875]: addr 90.148.170.179 listed by domain bl.spamcop.net as 127.0.0.2
Sep  7 11:39:18 h2421860 postfix/postscreen[10871]:........
-------------------------------
2019-09-08 00:17:37
40.73.78.233 attackbots
Automatic report - Banned IP Access
2019-09-07 23:19:47
61.1.34.158 attackspambots
Unauthorised access (Sep  7) SRC=61.1.34.158 LEN=44 PREC=0x20 TTL=239 ID=52210 TCP DPT=445 WINDOW=1024 SYN
2019-09-08 00:11:36
132.145.162.191 attackspambots
Automatic report - SSH Brute-Force Attack
2019-09-08 00:01:46
143.192.97.178 attackspam
Sep  7 17:52:53 core sshd[11077]: Invalid user david from 143.192.97.178 port 30888
Sep  7 17:52:55 core sshd[11077]: Failed password for invalid user david from 143.192.97.178 port 30888 ssh2
...
2019-09-07 23:53:42
41.227.18.113 attack
Sep  7 10:47:14 MK-Soft-VM3 sshd\[2413\]: Invalid user hduser from 41.227.18.113 port 52866
Sep  7 10:47:14 MK-Soft-VM3 sshd\[2413\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.227.18.113
Sep  7 10:47:16 MK-Soft-VM3 sshd\[2413\]: Failed password for invalid user hduser from 41.227.18.113 port 52866 ssh2
...
2019-09-07 23:18:37
40.78.83.43 attackbots
Sep  7 14:07:14 game-panel sshd[15306]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.78.83.43
Sep  7 14:07:16 game-panel sshd[15306]: Failed password for invalid user mcserver123 from 40.78.83.43 port 28928 ssh2
Sep  7 14:12:36 game-panel sshd[15578]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.78.83.43
2019-09-07 23:19:13
46.8.243.235 attackbotsspam
Chat Spam
2019-09-07 23:46:54
112.215.113.10 attack
Sep  7 17:01:29 dev0-dcfr-rnet sshd[17697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.113.10
Sep  7 17:01:32 dev0-dcfr-rnet sshd[17697]: Failed password for invalid user postgres from 112.215.113.10 port 48562 ssh2
Sep  7 17:07:22 dev0-dcfr-rnet sshd[17713]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.215.113.10
2019-09-07 23:12:42
80.91.125.167 attackspam
port scan and connect, tcp 8080 (http-proxy)
2019-09-07 23:15:19
46.159.130.213 attackspam
Automatic report - Port Scan Attack
2019-09-08 00:18:34

Recently Reported IPs

65.102.109.65 108.209.101.100 115.211.198.55 182.47.78.37
111.224.221.199 213.26.211.77 60.43.214.133 117.241.198.165
110.177.79.43 81.106.137.148 9.208.223.10 110.177.73.123
110.80.152.253 25.23.45.59 27.171.155.186 199.231.201.15
62.171.0.134 152.110.165.206 106.45.1.129 101.108.103.77