116.136.21.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:15:13

Comments on same subnet:

IP	Type	Details	Datetime
116.136.21.84	attackspambots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:56:11
116.136.21.92	attackbots	Fail2Ban - FTP Abuse Attempt	2020-01-08 20:12:22
116.136.21.145	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 540f438a4a0a98bd \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; PE-TL20 Build/HuaweiPE-TL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:19:30

Type

Details

Datetime

116.136.21.84

attackspambots

Fail2Ban - FTP Abuse Attempt

2020-01-08 20:56:11

116.136.21.92

attackbots

Fail2Ban - FTP Abuse Attempt

2020-01-08 20:12:22

116.136.21.145

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 540f438a4a0a98bd | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; PE-TL20 Build/HuaweiPE-TL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:19:30

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.136.21.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.136.21.12.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 303 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 20:15:09 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 12.21.136.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.21.136.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
121.34.49.66	attack	Unauthorized connection attempt from IP address 121.34.49.66 on Port 445(SMB)	2020-09-01 00:51:38
190.45.197.236	attackspambots	2020-08-31 07:18:59.810139-0500 localhost smtpd[76676]: NOQUEUE: reject: RCPT from pc-236-197-45-190.cm.vtr.net[190.45.197.236]: 554 5.7.1 Service unavailable; Client host [190.45.197.236] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.45.197.236; from= to= proto=ESMTP helo=	2020-09-01 00:59:31
122.51.186.86	attackspam	2020-08-31T22:05:05.886312hostname sshd[49305]: Invalid user git from 122.51.186.86 port 60526 2020-08-31T22:05:07.964625hostname sshd[49305]: Failed password for invalid user git from 122.51.186.86 port 60526 ssh2 2020-08-31T22:10:14.555269hostname sshd[49927]: Invalid user ubuntu from 122.51.186.86 port 52004 ...	2020-09-01 01:26:46
52.138.26.98	attackspambots	SSH Brute Force	2020-09-01 01:26:22
222.212.158.94	attack	Unauthorized connection attempt from IP address 222.212.158.94 on Port 445(SMB)	2020-09-01 01:06:58
49.231.166.197	attackbots	Aug 31 14:29:40 h2779839 sshd[27074]: Invalid user ts from 49.231.166.197 port 33368 Aug 31 14:29:40 h2779839 sshd[27074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197 Aug 31 14:29:40 h2779839 sshd[27074]: Invalid user ts from 49.231.166.197 port 33368 Aug 31 14:29:43 h2779839 sshd[27074]: Failed password for invalid user ts from 49.231.166.197 port 33368 ssh2 Aug 31 14:31:29 h2779839 sshd[27111]: Invalid user admin from 49.231.166.197 port 57828 Aug 31 14:31:29 h2779839 sshd[27111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197 Aug 31 14:31:29 h2779839 sshd[27111]: Invalid user admin from 49.231.166.197 port 57828 Aug 31 14:31:31 h2779839 sshd[27111]: Failed password for invalid user admin from 49.231.166.197 port 57828 ssh2 Aug 31 14:33:23 h2779839 sshd[27115]: Invalid user sakura from 49.231.166.197 port 54050 ...	2020-09-01 00:39:29
45.201.192.198	attackbotsspam	20/8/31@08:33:05: FAIL: Alarm-Intrusion address from=45.201.192.198 ...	2020-09-01 00:58:29
51.89.102.190	attackspambots	2020-08-31 10:02:57.184806-0500 localhost smtpd[89098]: NOQUEUE: reject: RCPT from unknown[51.89.102.190]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.89.102.190]; from= to= proto=ESMTP helo=	2020-09-01 00:57:55
54.163.214.49	attack	port	2020-09-01 01:10:20
218.75.38.210	attackbots	Aug 31 18:10:07 dev postfix/anvil\[19834\]: statistics: max connection rate 1/60s for \(smtp:218.75.38.210\) at Aug 31 18:01:47 ...	2020-09-01 01:08:01
59.33.171.233	attackbots	bruteforce detected	2020-09-01 00:54:58
174.138.48.152	attackspam	Bruteforce detected by fail2ban	2020-09-01 00:42:47
139.99.141.237	attack	Fail2Ban Ban Triggered	2020-09-01 00:44:29
82.61.60.195	attack	Unauthorised access (Aug 31) SRC=82.61.60.195 LEN=44 TTL=48 ID=58571 TCP DPT=23 WINDOW=22328 SYN	2020-09-01 00:48:44
115.84.92.29	attackspambots	(imapd) Failed IMAP login from 115.84.92.29 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 31 17:02:42 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=115.84.92.29, lip=5.63.12.44, session=	2020-09-01 01:02:11

Recently Reported IPs

96.47.10.53	171.237.147.181	177.139.194.62	106.39.177.175
180.241.46.62	220.173.123.58	123.21.77.90	14.177.176.175
171.7.234.116	80.66.81.86	115.164.43.57	209.190.108.157
114.67.110.227	196.18.56.152	117.42.105.165	215.59.60.74
2.66.169.187	57.115.159.152	173.87.16.186	156.122.208.75