Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackspambots
Fail2Ban - FTP Abuse Attempt
2020-01-08 20:15:13
Comments on same subnet:
IP Type Details Datetime
116.136.21.84 attackspambots
Fail2Ban - FTP Abuse Attempt
2020-01-08 20:56:11
116.136.21.92 attackbots
Fail2Ban - FTP Abuse Attempt
2020-01-08 20:12:22
116.136.21.145 attackspam
The IP has triggered Cloudflare WAF. CF-Ray: 540f438a4a0a98bd | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 4.4.2; PE-TL20 Build/HuaweiPE-TL20) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/30.0.0.0 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-08 02:19:30
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.136.21.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 17382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.136.21.12.			IN	A

;; AUTHORITY SECTION:
.			260	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010800 1800 900 604800 86400

;; Query time: 303 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jan 08 20:15:09 CST 2020
;; MSG SIZE  rcvd: 117
Host info
Host 12.21.136.116.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 12.21.136.116.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
121.34.49.66 attack
Unauthorized connection attempt from IP address 121.34.49.66 on Port 445(SMB)
2020-09-01 00:51:38
190.45.197.236 attackspambots
2020-08-31 07:18:59.810139-0500  localhost smtpd[76676]: NOQUEUE: reject: RCPT from pc-236-197-45-190.cm.vtr.net[190.45.197.236]: 554 5.7.1 Service unavailable; Client host [190.45.197.236] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/190.45.197.236; from= to= proto=ESMTP helo=
2020-09-01 00:59:31
122.51.186.86 attackspam
2020-08-31T22:05:05.886312hostname sshd[49305]: Invalid user git from 122.51.186.86 port 60526
2020-08-31T22:05:07.964625hostname sshd[49305]: Failed password for invalid user git from 122.51.186.86 port 60526 ssh2
2020-08-31T22:10:14.555269hostname sshd[49927]: Invalid user ubuntu from 122.51.186.86 port 52004
...
2020-09-01 01:26:46
52.138.26.98 attackspambots
SSH Brute Force
2020-09-01 01:26:22
222.212.158.94 attack
Unauthorized connection attempt from IP address 222.212.158.94 on Port 445(SMB)
2020-09-01 01:06:58
49.231.166.197 attackbots
Aug 31 14:29:40 h2779839 sshd[27074]: Invalid user ts from 49.231.166.197 port 33368
Aug 31 14:29:40 h2779839 sshd[27074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197
Aug 31 14:29:40 h2779839 sshd[27074]: Invalid user ts from 49.231.166.197 port 33368
Aug 31 14:29:43 h2779839 sshd[27074]: Failed password for invalid user ts from 49.231.166.197 port 33368 ssh2
Aug 31 14:31:29 h2779839 sshd[27111]: Invalid user admin from 49.231.166.197 port 57828
Aug 31 14:31:29 h2779839 sshd[27111]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.231.166.197
Aug 31 14:31:29 h2779839 sshd[27111]: Invalid user admin from 49.231.166.197 port 57828
Aug 31 14:31:31 h2779839 sshd[27111]: Failed password for invalid user admin from 49.231.166.197 port 57828 ssh2
Aug 31 14:33:23 h2779839 sshd[27115]: Invalid user sakura from 49.231.166.197 port 54050
...
2020-09-01 00:39:29
45.201.192.198 attackbotsspam
20/8/31@08:33:05: FAIL: Alarm-Intrusion address from=45.201.192.198
...
2020-09-01 00:58:29
51.89.102.190 attackspambots
2020-08-31 10:02:57.184806-0500  localhost smtpd[89098]: NOQUEUE: reject: RCPT from unknown[51.89.102.190]: 450 4.7.25 Client host rejected: cannot find your hostname, [51.89.102.190]; from= to= proto=ESMTP helo=
2020-09-01 00:57:55
54.163.214.49 attack
port
2020-09-01 01:10:20
218.75.38.210 attackbots
Aug 31 18:10:07 dev postfix/anvil\[19834\]: statistics: max connection rate 1/60s for \(smtp:218.75.38.210\) at Aug 31 18:01:47
...
2020-09-01 01:08:01
59.33.171.233 attackbots
bruteforce detected
2020-09-01 00:54:58
174.138.48.152 attackspam
Bruteforce detected by fail2ban
2020-09-01 00:42:47
139.99.141.237 attack
Fail2Ban Ban Triggered
2020-09-01 00:44:29
82.61.60.195 attack
Unauthorised access (Aug 31) SRC=82.61.60.195 LEN=44 TTL=48 ID=58571 TCP DPT=23 WINDOW=22328 SYN
2020-09-01 00:48:44
115.84.92.29 attackspambots
(imapd) Failed IMAP login from 115.84.92.29 (LA/Laos/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 31 17:02:42 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=115.84.92.29, lip=5.63.12.44, session=
2020-09-01 01:02:11

Recently Reported IPs

96.47.10.53 171.237.147.181 177.139.194.62 106.39.177.175
180.241.46.62 220.173.123.58 123.21.77.90 14.177.176.175
171.7.234.116 80.66.81.86 115.164.43.57 209.190.108.157
114.67.110.227 196.18.56.152 117.42.105.165 215.59.60.74
2.66.169.187 57.115.159.152 173.87.16.186 156.122.208.75