113.128.104.234

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Shandong Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Unauthorized connection attempt detected from IP address 113.128.104.234 to port 8123 [J]	2020-01-29 08:18:18

Comments on same subnet:

IP	Type	Details	Datetime
113.128.104.51	attack	Unauthorized connection attempt detected from IP address 113.128.104.51 to port 8118	2020-06-22 06:15:00
113.128.104.216	attackspam	Unauthorized connection attempt detected from IP address 113.128.104.216 to port 123	2020-06-13 07:52:15
113.128.104.123	attack	Fail2Ban Ban Triggered	2020-04-24 13:01:10
113.128.104.207	attack	113.128.104.207 - - \[27/Feb/2020:16:27:04 +0200\] "CONNECT www.ipip.net:443 HTTP/1.1" 403 202 "-" "PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3"	2020-02-27 23:33:39
113.128.104.219	attack	Fail2Ban Ban Triggered	2020-02-22 04:16:32
113.128.104.46	attack	Unauthorized connection attempt detected from IP address 113.128.104.46 to port 80	2020-02-16 02:11:34
113.128.104.238	attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 563f3129cef198e7 \| WAF_Rule_ID: a75424b44a1e4f27881d03344a122815 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.062334851 Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-02-13 01:46:19
113.128.104.89	attack	Unauthorized connection attempt detected from IP address 113.128.104.89 to port 9999 [T]	2020-01-29 10:05:35
113.128.104.131	attackspambots	Unauthorized connection attempt detected from IP address 113.128.104.131 to port 1080 [J]	2020-01-29 02:17:51
113.128.104.158	attackspambots	Unauthorized connection attempt detected from IP address 113.128.104.158 to port 6666 [T]	2020-01-27 16:06:48
113.128.104.22	attackspambots	Unauthorized connection attempt detected from IP address 113.128.104.22 to port 8081 [J]	2020-01-27 00:48:55
113.128.104.228	attackspam	Unauthorized connection attempt detected from IP address 113.128.104.228 to port 8888 [J]	2020-01-22 08:57:44
113.128.104.3	attackbots	Unauthorized connection attempt detected from IP address 113.128.104.3 to port 999 [T]	2020-01-20 18:23:28
113.128.104.121	attackspambots	Unauthorized connection attempt detected from IP address 113.128.104.121 to port 9000 [T]	2020-01-19 16:33:02
113.128.104.165	attack	Unauthorized connection attempt detected from IP address 113.128.104.165 to port 8000 [T]	2020-01-10 09:20:36

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.128.104.234
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19562
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.128.104.234.		IN	A

;; AUTHORITY SECTION:
.			133	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012802 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 29 08:18:15 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 234.104.128.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 234.104.128.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
77.247.109.33	attackbots	\[2019-07-29 10:44:40\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T10:44:40.391+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="236462233-179160195-794217650",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/77.247.109.33/61964",Challenge="1564389880/6975f405170fa91248732d94ac714ae1",Response="34d1a18f0059f1a64d2fc5569c54ab43",ExpectedResponse="" \[2019-07-29 10:44:40\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-29T10:44:40.434+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="236462233-179160195-794217650",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/77.247.109.33/61964",Challenge="1564389880/6975f405170fa91248732d94ac714ae1",Response="7d2831d3f6dd082132078b68383b519d",ExpectedResponse="" \[2019-07-29 10:44:40\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponse	2019-07-30 00:08:45
18.229.109.44	attackbots	Automatic report - Banned IP Access	2019-07-29 23:41:27
196.1.99.12	attackspambots	Jul 29 14:27:44 *** sshd[17753]: User root from 196.1.99.12 not allowed because not listed in AllowUsers	2019-07-29 23:44:01
80.11.44.112	attack	$f2bV_matches	2019-07-29 23:27:24
60.29.241.2	attackspambots	Jul 29 11:20:24 localhost sshd\[19651\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 user=root Jul 29 11:20:26 localhost sshd\[19651\]: Failed password for root from 60.29.241.2 port 45373 ssh2 Jul 29 11:25:38 localhost sshd\[20232\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=60.29.241.2 user=root	2019-07-29 23:06:41
115.79.88.79	attackspam	Honeypot hit.	2019-07-29 23:52:21
183.82.121.34	attack	Jul 29 08:37:00 v22018076622670303 sshd\[30473\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root Jul 29 08:37:02 v22018076622670303 sshd\[30473\]: Failed password for root from 183.82.121.34 port 52986 ssh2 Jul 29 08:41:55 v22018076622670303 sshd\[30542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=183.82.121.34 user=root ...	2019-07-29 23:23:06
138.68.186.24	attackspambots	2019-07-29T13:59:20.502825abusebot-2.cloudsearch.cf sshd\[1143\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.186.24 user=root	2019-07-29 23:17:45
68.183.219.43	attackbots	Jul 29 10:18:57 OPSO sshd\[20228\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root Jul 29 10:18:59 OPSO sshd\[20228\]: Failed password for root from 68.183.219.43 port 54282 ssh2 Jul 29 10:23:16 OPSO sshd\[20910\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root Jul 29 10:23:18 OPSO sshd\[20910\]: Failed password for root from 68.183.219.43 port 48644 ssh2 Jul 29 10:27:28 OPSO sshd\[21446\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.219.43 user=root	2019-07-29 23:16:28
31.172.80.89	attackspambots	Jul 29 06:40:39 thevastnessof sshd[4055]: Failed password for root from 31.172.80.89 port 53729 ssh2 ...	2019-07-30 00:07:24
13.92.172.177	attackspam	SSH/22 MH Probe, BF, Hack -	2019-07-29 23:01:44
165.22.171.229	attackbots	Jul 29 08:27:55 polaris sshd[24651]: Failed password for r.r from 165.22.171.229 port 40218 ssh2 Jul 29 08:27:57 polaris sshd[24657]: Invalid user admin from 165.22.171.229 Jul 29 08:27:59 polaris sshd[24657]: Failed password for invalid user admin from 165.22.171.229 port 46812 ssh2 Jul 29 08:28:00 polaris sshd[24667]: Invalid user admin from 165.22.171.229 Jul 29 08:28:02 polaris sshd[24667]: Failed password for invalid user admin from 165.22.171.229 port 53244 ssh2 Jul 29 08:28:04 polaris sshd[24675]: Invalid user user from 165.22.171.229 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=165.22.171.229	2019-07-29 23:28:34
195.206.107.154	attack	hacking sip server	2019-07-30 00:00:34
68.183.83.82	attackbotsspam	Triggered by Fail2Ban at Vostok web server	2019-07-29 23:02:59
201.46.59.202	attackbots	failed_logins	2019-07-29 23:39:39

Recently Reported IPs

42.119.33.123	36.32.3.64	36.32.3.9	240.98.225.69
36.124.163.98	10.162.87.44	161.214.57.243	134.59.88.226
210.186.142.158	124.3.146.130	143.98.100.135	209.141.40.127
169.45.130.51	175.155.246.166	1.142.61.245	89.201.12.93
195.222.156.165	210.33.128.202	203.209.28.182	59.155.246.248