Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Hainan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.1 to port 2095
2019-12-31 08:33:07
Comments on same subnet:
IP Type Details Datetime
112.66.99.6 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 8000 [J]
2020-01-27 15:15:57
112.66.99.159 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.159 to port 802 [T]
2020-01-10 09:23:22
112.66.99.167 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.167 to port 8899
2020-01-04 08:33:51
112.66.99.25 attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.25 to port 8090
2020-01-01 21:33:22
112.66.99.6 attackbotsspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 3128
2019-12-31 07:42:24
112.66.99.211 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430c47bb86fe825 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 06:48:59
112.66.99.155 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7b87ae62e4fe | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:35:16
112.66.99.74 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5414bd353ee5eb45 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:09:41
112.66.99.63 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:18:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.99.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 35192
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.66.99.1.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 51 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 08:33:04 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 1.99.66.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.99.66.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
222.186.175.169 attackspam
Jul 13 13:47:07 minden010 sshd[5746]: Failed password for root from 222.186.175.169 port 19690 ssh2
Jul 13 13:47:11 minden010 sshd[5746]: Failed password for root from 222.186.175.169 port 19690 ssh2
Jul 13 13:47:14 minden010 sshd[5746]: Failed password for root from 222.186.175.169 port 19690 ssh2
Jul 13 13:47:17 minden010 sshd[5746]: Failed password for root from 222.186.175.169 port 19690 ssh2
...
2020-07-13 19:51:37
41.68.231.156 attack
BURG,WP GET /wp-login.php
2020-07-13 20:11:50
51.68.198.113 attackspam
Jul 13 12:36:21 raspberrypi sshd[21729]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.198.113 
Jul 13 12:36:23 raspberrypi sshd[21729]: Failed password for invalid user jupyter from 51.68.198.113 port 44258 ssh2
...
2020-07-13 20:07:24
134.209.155.213 attack
134.209.155.213 - - [13/Jul/2020:07:02:43 +0200] "POST /xmlrpc.php HTTP/1.1" 403 14999 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
134.209.155.213 - - [13/Jul/2020:07:27:00 +0200] "POST /xmlrpc.php HTTP/1.1" 403 21861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-07-13 19:58:30
43.226.45.253 attackbotsspam
Icarus honeypot on github
2020-07-13 20:14:46
51.195.139.140 attack
Jul 13 12:29:30 inter-technics sshd[29615]: Invalid user shaohong from 51.195.139.140 port 46378
Jul 13 12:29:30 inter-technics sshd[29615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.195.139.140
Jul 13 12:29:30 inter-technics sshd[29615]: Invalid user shaohong from 51.195.139.140 port 46378
Jul 13 12:29:32 inter-technics sshd[29615]: Failed password for invalid user shaohong from 51.195.139.140 port 46378 ssh2
Jul 13 12:34:48 inter-technics sshd[29973]: Invalid user jaqueline from 51.195.139.140 port 42568
...
2020-07-13 19:55:11
156.96.56.221 attack
SASL broute force
2020-07-13 19:58:15
220.134.206.170 attackbots
Port probing on unauthorized port 81
2020-07-13 19:40:47
61.177.172.159 attackspam
2020-07-13T07:37:15.440367na-vps210223 sshd[21399]: Failed password for root from 61.177.172.159 port 12114 ssh2
2020-07-13T07:37:18.699498na-vps210223 sshd[21399]: Failed password for root from 61.177.172.159 port 12114 ssh2
2020-07-13T07:37:22.039005na-vps210223 sshd[21399]: Failed password for root from 61.177.172.159 port 12114 ssh2
2020-07-13T07:37:22.039942na-vps210223 sshd[21399]: error: maximum authentication attempts exceeded for root from 61.177.172.159 port 12114 ssh2 [preauth]
2020-07-13T07:37:22.039968na-vps210223 sshd[21399]: Disconnecting: Too many authentication failures [preauth]
...
2020-07-13 19:50:54
174.219.15.60 attackspam
Brute forcing email accounts
2020-07-13 20:17:07
194.26.29.110 attackspambots
Jul 13 13:41:28 debian-2gb-nbg1-2 kernel: \[16899062.388225\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=194.26.29.110 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=46938 PROTO=TCP SPT=40273 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0
2020-07-13 20:06:12
42.51.34.155 attack
C2,WP GET /wp-login.php
2020-07-13 20:04:57
36.92.125.163 attack
Port Scan
...
2020-07-13 19:44:12
138.97.23.190 attackbotsspam
Jul 13 11:59:30 cp sshd[20647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.97.23.190
2020-07-13 19:53:40
83.8.228.21 attackspam
83.8.228.21 - - [13/Jul/2020:04:47:38 +0100] "POST /xmlrpc.php HTTP/1.1" 200 239 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
83.8.228.21 - - [13/Jul/2020:04:47:40 +0100] "POST /xmlrpc.php HTTP/1.1" 200 239 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
83.8.228.21 - - [13/Jul/2020:04:47:42 +0100] "POST /xmlrpc.php HTTP/1.1" 200 239 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.109 Safari/537.36"
...
2020-07-13 19:41:47

Recently Reported IPs

65.102.109.65 108.209.101.100 115.211.198.55 182.47.78.37
111.224.221.199 213.26.211.77 60.43.214.133 117.241.198.165
110.177.79.43 81.106.137.148 9.208.223.10 110.177.73.123
110.80.152.253 25.23.45.59 27.171.155.186 199.231.201.15
62.171.0.134 152.110.165.206 106.45.1.129 101.108.103.77