Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Jinan

Region: Shandong

Country: China

Internet Service Provider: ChinaNet Shandong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbotsspam
The IP has triggered Cloudflare WAF. CF-Ray: 540fffae4c2de7b1 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 9_1 like Mac OS X) AppleWebKit/601.1.46 (KHTML, like Gecko) Version/9.0 Mobile/13B143 Safari/601.1 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 03:55:55
Comments on same subnet:
IP Type Details Datetime
113.128.104.51 attack
Unauthorized connection attempt detected from IP address 113.128.104.51 to port 8118
2020-06-22 06:15:00
113.128.104.216 attackspam
Unauthorized connection attempt detected from IP address 113.128.104.216 to port 123
2020-06-13 07:52:15
113.128.104.123 attack
Fail2Ban Ban Triggered
2020-04-24 13:01:10
113.128.104.207 attack
113.128.104.207 - - \[27/Feb/2020:16:27:04 +0200\] "CONNECT www.ipip.net:443 HTTP/1.1" 403 202 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"
2020-02-27 23:33:39
113.128.104.219 attack
Fail2Ban Ban Triggered
2020-02-22 04:16:32
113.128.104.46 attack
Unauthorized connection attempt detected from IP address 113.128.104.46 to port 80
2020-02-16 02:11:34
113.128.104.238 attackspambots
The IP has triggered Cloudflare WAF. CF-Ray: 563f3129cef198e7 | WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2020-02-13 01:46:19
113.128.104.89 attack
Unauthorized connection attempt detected from IP address 113.128.104.89 to port 9999 [T]
2020-01-29 10:05:35
113.128.104.234 attackspam
Unauthorized connection attempt detected from IP address 113.128.104.234 to port 8123 [J]
2020-01-29 08:18:18
113.128.104.131 attackspambots
Unauthorized connection attempt detected from IP address 113.128.104.131 to port 1080 [J]
2020-01-29 02:17:51
113.128.104.158 attackspambots
Unauthorized connection attempt detected from IP address 113.128.104.158 to port 6666 [T]
2020-01-27 16:06:48
113.128.104.22 attackspambots
Unauthorized connection attempt detected from IP address 113.128.104.22 to port 8081 [J]
2020-01-27 00:48:55
113.128.104.228 attackspam
Unauthorized connection attempt detected from IP address 113.128.104.228 to port 8888 [J]
2020-01-22 08:57:44
113.128.104.3 attackbots
Unauthorized connection attempt detected from IP address 113.128.104.3 to port 999 [T]
2020-01-20 18:23:28
113.128.104.121 attackspambots
Unauthorized connection attempt detected from IP address 113.128.104.121 to port 9000 [T]
2020-01-19 16:33:02
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.128.104.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39825
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.128.104.2.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 03:55:52 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 2.104.128.113.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.104.128.113.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
119.29.162.17 attackbots
Jan 10 07:22:08 mockhub sshd[31474]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.29.162.17
Jan 10 07:22:10 mockhub sshd[31474]: Failed password for invalid user capensis from 119.29.162.17 port 40257 ssh2
...
2020-01-11 04:02:32
180.107.82.50 attackspambots
Port scan on 1 port(s): 21
2020-01-11 04:24:37
194.1.193.66 attackspambots
Jan 10 13:51:49 grey postfix/smtpd\[15229\]: NOQUEUE: reject: RCPT from askad-66.askad.net\[194.1.193.66\]: 554 5.7.1 Service unavailable\; Client host \[194.1.193.66\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[194.1.193.66\]\; from=\ to=\ proto=ESMTP helo=\
...
2020-01-11 04:31:27
96.114.71.146 attack
(sshd) Failed SSH login from 96.114.71.146 (US/United States/California/Lodi/-/[AS7922 Comcast Cable Communications, LLC]): 1 in the last 3600 secs
2020-01-11 03:54:58
40.77.167.3 attack
Automatic report - Banned IP Access
2020-01-11 04:12:12
222.186.180.130 attackbots
SSH Brute Force, server-1 sshd[12424]: Failed password for root from 222.186.180.130 port 51945 ssh2
2020-01-11 04:05:49
140.237.191.252 attackspam
2020-01-10 06:51:53 dovecot_login authenticator failed for (gknuu) [140.237.191.252]:49822 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=gaoxiaohai@lerctr.org)
2020-01-10 06:52:00 dovecot_login authenticator failed for (snbyi) [140.237.191.252]:49822 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=gaoxiaohai@lerctr.org)
2020-01-10 06:52:13 dovecot_login authenticator failed for (zoewc) [140.237.191.252]:49822 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=gaoxiaohai@lerctr.org)
...
2020-01-11 04:15:25
177.139.177.94 attack
Jan 10 05:41:18 web9 sshd\[23773\]: Invalid user txk from 177.139.177.94
Jan 10 05:41:18 web9 sshd\[23773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.177.94
Jan 10 05:41:19 web9 sshd\[23773\]: Failed password for invalid user txk from 177.139.177.94 port 51004 ssh2
Jan 10 05:45:12 web9 sshd\[24494\]: Invalid user oracle from 177.139.177.94
Jan 10 05:45:12 web9 sshd\[24494\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.139.177.94
2020-01-11 04:06:30
45.224.86.24 attackspam
Jan 10 13:52:26 grey postfix/smtpd\[30258\]: NOQUEUE: reject: RCPT from unknown\[45.224.86.24\]: 554 5.7.1 Service unavailable\; Client host \[45.224.86.24\] blocked using bl.spamcop.net\; Blocked - see https://www.spamcop.net/bl.shtml\?45.224.86.24\; from=\ to=\ proto=ESMTP helo=\<\[45.224.86.24\]\>
...
2020-01-11 04:06:48
211.26.123.219 attackbots
Jan 10 16:55:53 srv1-bit sshd[13170]: Invalid user pi from 211.26.123.219 port 36862
Jan 10 16:55:53 srv1-bit sshd[13168]: Invalid user pi from 211.26.123.219 port 36858
...
2020-01-11 04:01:34
104.200.137.189 attackbots
$f2bV_matches
2020-01-11 04:19:28
125.64.94.221 attack
Multiport scan 98 ports : 21 26 35 102 389 497 502 513 783 789 999 1041 1434 1503 1688 1830 1911 1967 2001 2002 2055 2080 2096 2152 2181 2252 2332 2406 2427 3097 3299 3333 3388 3529 3872 4045 4155 4842 4911 5000 5009 5050 5280 5550 5800 5820 6000 6001 6080 6432 6697 7187 7547 7780 8003 8004 8008 8060 8081 8085 8159 8480 8884 8889 8983 9200 9333 9444 9527 9600 9876 9997 10001 10005 10080 15002 16992 20000 25000 25020 25565 27015 28006 31337 31416 32751 32755 32761 32763 32772 32777 32785 32791 32797 34012 50000 50030 61616
2020-01-11 04:07:09
113.23.42.31 attackspam
Jan 10 13:51:53 grey postfix/smtpd\[26110\]: NOQUEUE: reject: RCPT from unknown\[113.23.42.31\]: 554 5.7.1 Service unavailable\; Client host \[113.23.42.31\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[113.23.42.31\]\; from=\ to=\ proto=ESMTP helo=\<\[113.23.42.31\]\>
...
2020-01-11 04:29:10
185.239.238.129 attackspambots
Jan 10 21:03:58 icinga sshd[12233]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.239.238.129
Jan 10 21:04:00 icinga sshd[12233]: Failed password for invalid user adolf from 185.239.238.129 port 44870 ssh2
...
2020-01-11 04:28:14
128.199.95.163 attack
SASL PLAIN auth failed: ruser=...
2020-01-11 03:54:32

Recently Reported IPs

5.86.107.145 111.175.57.83 111.11.6.20 110.177.78.220
203.48.39.243 88.169.32.98 122.14.184.44 106.11.159.142
3.23.205.15 132.227.178.1 176.17.95.98 91.188.223.132
176.53.37.231 191.186.193.165 29.236.11.40 60.13.7.59
84.136.53.155 141.83.145.97 42.200.180.209 88.90.240.162