Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Hainan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 8000 [J]
2020-01-27 15:15:57
attackbotsspam
Unauthorized connection attempt detected from IP address 112.66.99.6 to port 3128
2019-12-31 07:42:24
Comments on same subnet:
IP Type Details Datetime
112.66.99.159 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.159 to port 802 [T]
2020-01-10 09:23:22
112.66.99.167 attackspam
Unauthorized connection attempt detected from IP address 112.66.99.167 to port 8899
2020-01-04 08:33:51
112.66.99.25 attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.25 to port 8090
2020-01-01 21:33:22
112.66.99.1 attackspambots
Unauthorized connection attempt detected from IP address 112.66.99.1 to port 2095
2019-12-31 08:33:07
112.66.99.211 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5430c47bb86fe825 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 06:48:59
112.66.99.155 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 540f7b87ae62e4fe | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.064213590 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:35:16
112.66.99.74 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 5414bd353ee5eb45 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 01:09:41
112.66.99.63 attack
The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)
2019-11-19 04:18:55
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.66.99.6
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 38785
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;112.66.99.6.			IN	A

;; AUTHORITY SECTION:
.			546	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019123001 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Dec 31 07:42:21 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 6.99.66.112.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 6.99.66.112.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
185.200.118.72 attack
MultiHost/MultiPort Probe, Scan, Hack -
2019-12-09 00:28:18
84.237.187.217 attack
Unauthorized connection attempt detected from IP address 84.237.187.217 to port 445
2019-12-09 00:50:56
165.227.93.39 attack
Dec  8 06:43:41 eddieflores sshd\[15066\]: Invalid user minjares from 165.227.93.39
Dec  8 06:43:41 eddieflores sshd\[15066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server5.mobiticket.co.ke
Dec  8 06:43:43 eddieflores sshd\[15066\]: Failed password for invalid user minjares from 165.227.93.39 port 60378 ssh2
Dec  8 06:49:10 eddieflores sshd\[15670\]: Invalid user ftpuser from 165.227.93.39
Dec  8 06:49:10 eddieflores sshd\[15670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server5.mobiticket.co.ke
2019-12-09 00:51:27
132.148.141.147 attackbotsspam
Automatic report - XMLRPC Attack
2019-12-09 00:38:45
153.254.113.26 attackbots
Dec  8 16:09:38 ws25vmsma01 sshd[231611]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.254.113.26
Dec  8 16:09:40 ws25vmsma01 sshd[231611]: Failed password for invalid user whdgus from 153.254.113.26 port 54570 ssh2
...
2019-12-09 00:11:59
223.99.63.5 attackspambots
19/12/8@09:55:17: FAIL: IoT-Telnet address from=223.99.63.5
...
2019-12-09 00:52:33
178.128.22.249 attackbots
Dec  8 17:27:18 andromeda sshd\[28321\]: Invalid user fike from 178.128.22.249 port 45213
Dec  8 17:27:18 andromeda sshd\[28321\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.22.249
Dec  8 17:27:20 andromeda sshd\[28321\]: Failed password for invalid user fike from 178.128.22.249 port 45213 ssh2
2019-12-09 00:46:31
190.109.64.92 attackbotsspam
Automatic report - Port Scan Attack
2019-12-09 00:44:13
197.254.48.74 attack
Unauthorized connection attempt detected from IP address 197.254.48.74 to port 445
2019-12-09 00:17:26
128.199.88.11 attack
2019-12-08T16:32:33.808455abusebot-2.cloudsearch.cf sshd\[29392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.88.11  user=root
2019-12-09 00:39:07
35.193.38.118 attack
schuetzenmusikanten.de 35.193.38.118 [08/Dec/2019:15:55:42 +0100] "POST /wp-login.php HTTP/1.1" 200 6346 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
schuetzenmusikanten.de 35.193.38.118 [08/Dec/2019:15:55:47 +0100] "POST /wp-login.php HTTP/1.1" 200 6315 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
2019-12-09 00:21:30
51.254.204.190 attackbots
SSH brutforce
2019-12-09 00:17:08
218.92.0.157 attackbotsspam
Dec  8 17:24:09 mail sshd\[11524\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157  user=root
Dec  8 17:24:11 mail sshd\[11524\]: Failed password for root from 218.92.0.157 port 19239 ssh2
Dec  8 17:24:29 mail sshd\[11541\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.157  user=root
...
2019-12-09 00:31:40
190.92.48.27 attackbots
Automatically reported by fail2ban report script (powermetal_old)
2019-12-09 00:44:46
183.238.233.110 attackbotsspam
2019-12-08T16:40:04.419503abusebot-7.cloudsearch.cf sshd\[27544\]: Invalid user stolz from 183.238.233.110 port 60416
2019-12-09 00:45:20

Recently Reported IPs

221.213.75.14 221.13.12.125 221.13.12.61 221.1.70.189
220.250.63.73 220.250.63.63 219.143.174.202 219.136.222.79
210.74.15.139 180.180.44.170 180.167.37.166 180.137.9.252
171.36.134.182 171.36.130.39 145.255.3.17 134.175.102.60
124.235.138.3 124.193.191.52 166.249.30.65 124.156.192.62