116.136.21.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:15:13

Comments on same subnet:

IP	Type	Details	Datetime
116.136.21.84	attackspambots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:56:11
116.136.21.92	attackbots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:12:22
116.136.21.145	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f438a4a0a98bd \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; PE-TL20 Build/HuaweiPE-TL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:19:30

Type

Details

Datetime

116.136.21.84

attackspambots

Fail2Ban - FTP Abuse Attempt

2020-01-08 20:56:11

116.136.21.92

attackbots

Fail2Ban - FTP Abuse Attempt

2020-01-08 20:12:22

116.136.21.145

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 540f438a4a0a98bd | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; PE-TL20 Build/HuaweiPE-TL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:19:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.136.21.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.136.21.12.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 303 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 20:15:09 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 12.21.136.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.21.136.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.244.76.245	attackspambots	Helo	2020-09-06 14:42:04
51.91.132.52	attackbots	failed attempts to inject php and access /.env	2020-09-06 14:12:24
167.248.133.24	attackspambots	TCP (SYN) 167.248.133.24:36588 -> port 443, len 44	2020-09-06 14:24:13
49.207.200.230	attackspambots	Attempts against non-existent wp-login	2020-09-06 14:03:16
104.244.79.241	attackspambots	Sep 6 05:29:14 l02a sshd[21136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.241 user=root Sep 6 05:29:16 l02a sshd[21136]: Failed password for root from 104.244.79.241 port 55956 ssh2 Sep 6 05:29:19 l02a sshd[21136]: Failed password for root from 104.244.79.241 port 55956 ssh2 Sep 6 05:29:14 l02a sshd[21136]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.244.79.241 user=root Sep 6 05:29:16 l02a sshd[21136]: Failed password for root from 104.244.79.241 port 55956 ssh2 Sep 6 05:29:19 l02a sshd[21136]: Failed password for root from 104.244.79.241 port 55956 ssh2	2020-09-06 14:33:28
5.188.84.119	attackspam	0,27-01/02 [bc01/m11] PostRequest-Spammer scoring: maputo01_x2b	2020-09-06 14:12:51
222.186.169.192	attack	Sep 6 08:39:17 jane sshd[19615]: Failed password for root from 222.186.169.192 port 45122 ssh2 Sep 6 08:39:19 jane sshd[19615]: Failed password for root from 222.186.169.192 port 45122 ssh2 ...	2020-09-06 14:41:11
154.220.96.130	attackbots	2020-09-05T15:41:31.859573correo.[domain] sshd[24744]: Failed password for root from 154.220.96.130 port 41072 ssh2 2020-09-05T15:41:34.499858correo.[domain] sshd[24744]: Failed password for root from 154.220.96.130 port 41072 ssh2 2020-09-05T15:41:36.083539correo.[domain] sshd[24744]: Failed password for root from 154.220.96.130 port 41072 ssh2 ...	2020-09-06 14:23:26
61.144.97.94	attackbots	Lines containing failures of 61.144.97.94 Aug 30 18:29:04 metroid sshd[30822]: refused connect from 61.144.97.94 (61.144.97.94) Aug 30 21:50:04 metroid sshd[15525]: refused connect from 61.144.97.94 (61.144.97.94) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=61.144.97.94	2020-09-06 14:19:23
45.95.168.190	attackbotsspam	$f2bV_matches	2020-09-06 14:47:28
81.213.219.171	attackspam	Automatic report - Port Scan Attack	2020-09-06 14:13:27
104.206.119.2	attackspam	Aug 31 06:40:58 mxgate1 postfix/postscreen[24409]: CONNECT from [104.206.119.2]:60811 to [176.31.12.44]:25 Aug 31 06:41:04 mxgate1 postfix/postscreen[24409]: PASS NEW [104.206.119.2]:60811 Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: warning: hostname iseedragon.com does not resolve to address 104.206.119.2: Name or service not known Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: connect from unknown[104.206.119.2] Aug 31 06:41:04 mxgate1 postfix/smtpd[24410]: DEA36A03F4: client=unknown[104.206.119.2] Aug 31 06:41:08 mxgate1 postfix/smtpd[24410]: disconnect from unknown[104.206.119.2] ehlo=1 mail=1 rcpt=1 data=1 quhostname=1 commands=5 Aug 31 06:41:08 mxgate1 postfix/postscreen[24409]: CONNECT from [104.206.119.2]:51121 to [176.31.12.44]:25 Aug 31 06:41:08 mxgate1 postfix/postscreen[24409]: PASS OLD [104.206.119.2]:51121 Aug 31 06:41:08 mxgate1 postfix/smtpd[24410]: warning: hostname iseedragon.com does not resolve to address 104.206.119.2: Name or service not known Aug........ -------------------------------	2020-09-06 14:44:41
194.15.36.104	attackbotsspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-06T06:18:57Z and 2020-09-06T06:19:42Z	2020-09-06 14:28:51
185.147.212.8	attack	[2020-09-06 01:09:24] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:50569' - Wrong password [2020-09-06 01:09:24] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T01:09:24.098-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1891",SessionID="0x7f2ddc2f61d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8/50569",Challenge="7d581d7c",ReceivedChallenge="7d581d7c",ReceivedHash="1d203f2823f4ee100d9bfe87d4c6d4e8" [2020-09-06 01:16:07] NOTICE[1194] chan_sip.c: Registration from '' failed for '185.147.212.8:54471' - Wrong password [2020-09-06 01:16:07] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-06T01:16:07.599-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1696",SessionID="0x7f2ddc2f61d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.212.8 ...	2020-09-06 14:25:14
194.61.24.102	attack	SQL Injection Attempts	2020-09-06 14:36:36

Recently Reported IPs

96.47.10.53	171.237.147.181	177.139.194.62	106.39.177.175
180.241.46.62	220.173.123.58	123.21.77.90	14.177.176.175
171.7.234.116	80.66.81.86	115.164.43.57	209.190.108.157
114.67.110.227	196.18.56.152	117.42.105.165	215.59.60.74
2.66.169.187	57.115.159.152	173.87.16.186	156.122.208.75