116.249.34.21 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.249.34.205	attackspam	Unauthorized connection attempt detected from IP address 116.249.34.205 to port 2053	2019-12-31 06:29:46
116.249.34.71	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5415f7a8de7ee801 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: disqus.skk.moe \| User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 02:18:33

Type

Details

Datetime

116.249.34.205

attackspam

Unauthorized connection attempt detected from IP address 116.249.34.205 to port 2053

2019-12-31 06:29:46

116.249.34.71

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 5415f7a8de7ee801 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.067805899 Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 02:18:33

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.249.34.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27985
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.249.34.21.			IN	A

;; AUTHORITY SECTION:
.			279	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022601 1800 900 604800 86400

;; Query time: 70 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 11:15:06 CST 2022
;; MSG SIZE  rcvd: 106

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 116.249.34.21.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
189.207.108.136	attack	Automatic report - Port Scan Attack	2020-09-03 02:11:51
89.122.24.170	attackspambots	TCP (SYN) 89.122.24.170:29443 -> port 23, len 44	2020-09-03 02:16:30
77.68.20.116	attackspambots	Brute forcing email accounts	2020-09-03 02:23:04
94.102.51.33	attack	TCP ports : 1723 / 2000 / 2828 / 8270 / 8291 / 8292 / 8293 / 8294 / 8295 / 8296 / 8299 / 8728 / 8729	2020-09-03 02:35:00
52.168.54.220	attack	𝐄𝐚𝐬𝐲 𝐑𝐞𝐚𝐝𝐢𝐧𝐠 𝐖𝐢𝐭𝐡 𝐌𝐚𝐱𝐢𝐦𝐮𝐦 𝐂𝐥𝐚𝐫𝐢𝐭𝐲	2020-09-03 02:42:28
188.165.24.200	attack	Invalid user r from 188.165.24.200 port 47890	2020-09-03 02:43:45
5.62.60.54	attackspam	(From kelli.fawcett@googlemail.com) Wanna promote your business on 1000's of Advertising sites monthly? One tiny investment every month will get you virtually endless traffic to your site forever! Take a look at: https://bit.ly/free-traffic-always	2020-09-03 02:40:59
112.85.42.87	attack	Sep 2 18:01:37 ip-172-31-42-142 sshd\[5571\]: Failed password for root from 112.85.42.87 port 50882 ssh2\ Sep 2 18:02:37 ip-172-31-42-142 sshd\[5574\]: Failed password for root from 112.85.42.87 port 52532 ssh2\ Sep 2 18:03:41 ip-172-31-42-142 sshd\[5577\]: Failed password for root from 112.85.42.87 port 13535 ssh2\ Sep 2 18:04:44 ip-172-31-42-142 sshd\[5579\]: Failed password for root from 112.85.42.87 port 16489 ssh2\ Sep 2 18:05:52 ip-172-31-42-142 sshd\[5587\]: Failed password for root from 112.85.42.87 port 12400 ssh2\	2020-09-03 02:13:28
191.220.176.42	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-03 02:22:31
118.25.74.199	attackspam	(sshd) Failed SSH login from 118.25.74.199 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 2 14:09:28 server2 sshd[2274]: Invalid user r from 118.25.74.199 Sep 2 14:09:28 server2 sshd[2274]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.74.199 Sep 2 14:09:30 server2 sshd[2274]: Failed password for invalid user r from 118.25.74.199 port 36960 ssh2 Sep 2 14:12:40 server2 sshd[4661]: Invalid user zt from 118.25.74.199 Sep 2 14:12:40 server2 sshd[4661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.74.199	2020-09-03 02:31:52
185.172.110.223	attackbots	Port scan denied	2020-09-03 02:44:07
185.30.146.170	attackbots	Port probing on unauthorized port 23	2020-09-03 02:29:55
40.127.64.87	attackbotsspam	Fail2Ban Ban Triggered	2020-09-03 02:14:05
178.155.5.209	attackbots	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-09-03 02:39:53
141.149.36.27	attackbotsspam	TCP (SYN) 141.149.36.27:39392 -> port 23, len 44	2020-09-03 02:30:31

Recently Reported IPs

116.203.38.78	116.249.238.78	116.25.135.100	116.249.34.220
116.249.62.200	116.25.225.54	116.25.226.22	116.249.62.85
116.249.238.235	116.249.23.71	116.249.62.47	116.25.248.153
116.25.94.35	116.251.206.220	116.25.224.157	116.254.117.178
116.251.204.217	116.253.196.105	116.255.144.98	116.252.46.64