City: unknown
Region: unknown
Country: China
Internet Service Provider: unknown
Hostname: unknown
Organization: unknown
Usage Type: unknown
| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.80.139.186 | attackbotsspam | Unauthorized connection attempt detected from IP address 112.80.139.186 to port 8118 [J] |
2020-03-02 16:46:43 |
| 112.80.139.72 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5430ed179f239666 | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-12 00:47:55 |
| 112.80.139.237 | attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5415a92e09326bf6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: d.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 06:55:56 |
| 112.80.139.252 | attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 5413c84ba8846d04 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.066704189 Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 02:00:28 |
| 112.80.139.3 | attack | The IP has triggered Cloudflare WAF. CF-Ray: 5410ce0509096bc6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 00:41:24 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 112.80.139.59
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23345
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;112.80.139.59. IN A
;; AUTHORITY SECTION:
. 371 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022030102 1800 900 604800 86400
;; Query time: 181 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 02 12:26:38 CST 2022
;; MSG SIZE rcvd: 106Host 59.139.80.112.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 59.139.80.112.in-addr.arpa: NXDOMAIN| IP | Type | Details | Datetime |
|---|---|---|---|
| 176.113.115.50 | attackspambots | ET DROP Dshield Block Listed Source group 1 - port: 3396 proto: TCP cat: Misc Attack |
2020-03-28 19:59:03 |
| 185.176.27.14 | attackbotsspam | 03/28/2020-07:34:29.938891 185.176.27.14 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-28 19:54:42 |
| 1.34.213.33 | attackbotsspam | 445/tcp 1433/tcp... [2020-02-14/03-28]4pkt,2pt.(tcp) |
2020-03-28 19:45:36 |
| 185.175.93.104 | attackbots | 03/28/2020-06:59:59.357904 185.175.93.104 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-28 19:55:30 |
| 115.152.253.34 | attackspam | Unauthorized connection attempt detected from IP address 115.152.253.34 to port 1433 [T] |
2020-03-28 20:02:55 |
| 45.55.65.92 | attackspam | Port 12930 scan denied |
2020-03-28 19:42:37 |
| 31.210.177.57 | attack | HH |
2020-03-28 19:25:45 |
| 185.176.27.34 | attackspam | 03/28/2020-07:47:18.847796 185.176.27.34 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-28 19:53:27 |
| 185.176.27.162 | attackspambots | 03/28/2020-07:38:36.361162 185.176.27.162 Protocol: 6 ET SCAN NMAP -sS window 1024 |
2020-03-28 19:52:07 |
| 157.230.31.236 | attackbots | Port 8965 scan denied |
2020-03-28 19:22:17 |
| 89.248.160.150 | attackbots | 89.248.160.150 was recorded 20 times by 11 hosts attempting to connect to the following ports: 1070,1044,1066. Incident counter (4h, 24h, all-time): 20, 103, 8966 |
2020-03-28 20:07:22 |
| 45.141.84.17 | attackspambots | Mar 28 11:48:55 debian-2gb-nbg1-2 kernel: \[7651602.010796\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.141.84.17 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=41902 PROTO=TCP SPT=54191 DPT=7313 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-28 19:41:48 |
| 223.71.167.165 | attack | 223.71.167.165 was recorded 16 times by 5 hosts attempting to connect to the following ports: 6000,23424,69,27017,27018,4911,3351,5353,8003,626,9333,8000,34568,7000,8112. Incident counter (4h, 24h, all-time): 16, 78, 11078 |
2020-03-28 19:45:59 |
| 115.238.107.211 | attack | Mar 28 09:01:15 XXXXXX sshd[11573]: Invalid user hpq from 115.238.107.211 port 50162 |
2020-03-28 19:27:03 |
| 89.248.172.85 | attackspambots | 03/28/2020-07:05:27.149011 89.248.172.85 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2020-03-28 20:06:14 |