Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Guangxi Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 543117ceb89d9851 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.096783921 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 01:30:31
Comments on same subnet:
IP Type Details Datetime
116.252.0.186 attackbots
Unauthorized connection attempt detected from IP address 116.252.0.186 to port 8118
2020-06-22 06:13:50
116.252.0.38 attack
Unauthorized connection attempt detected from IP address 116.252.0.38 to port 999
2020-05-30 04:25:31
116.252.0.220 attackbotsspam
Fail2Ban Ban Triggered
2020-04-05 19:47:08
116.252.0.81 attackspambots
Unauthorized connection attempt detected from IP address 116.252.0.81 to port 8118 [J]
2020-03-02 21:33:58
116.252.0.76 attackbots
Unauthorized connection attempt detected from IP address 116.252.0.76 to port 8118 [J]
2020-03-02 21:02:18
116.252.0.3 attackspam
Unauthorized connection attempt detected from IP address 116.252.0.3 to port 8118 [J]
2020-03-02 20:00:43
116.252.0.58 attack
Unauthorized connection attempt detected from IP address 116.252.0.58 to port 8118 [J]
2020-03-02 18:07:31
116.252.0.26 attackbotsspam
Unauthorized connection attempt detected from IP address 116.252.0.26 to port 8082 [J]
2020-03-02 16:11:31
116.252.0.73 attack
Unauthorized connection attempt detected from IP address 116.252.0.73 to port 3128 [J]
2020-02-04 01:38:25
116.252.0.249 attackspambots
Unauthorized connection attempt detected from IP address 116.252.0.249 to port 80 [T]
2020-01-30 15:15:36
116.252.0.53 attack
Unauthorized connection attempt detected from IP address 116.252.0.53 to port 3128 [T]
2020-01-29 17:18:29
116.252.0.63 attackspam
Unauthorized connection attempt detected from IP address 116.252.0.63 to port 1080 [J]
2020-01-29 10:28:42
116.252.0.86 attackspambots
Unauthorized connection attempt detected from IP address 116.252.0.86 to port 8888 [J]
2020-01-29 09:46:06
116.252.0.203 attackspambots
Unauthorized connection attempt detected from IP address 116.252.0.203 to port 8081 [J]
2020-01-29 09:45:49
116.252.0.5 attackspambots
Unauthorized connection attempt detected from IP address 116.252.0.5 to port 3389 [T]
2020-01-29 08:17:51
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.252.0.106
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 42934
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.252.0.106.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 138 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 01:30:25 CST 2019
;; MSG SIZE  rcvd: 117
Host info
Host 106.0.252.116.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
;; Got SERVFAIL reply from 100.100.2.136, trying next server
;; Got SERVFAIL reply from 100.100.2.138, trying next server
Server:		100.100.2.138
Address:	100.100.2.138#53

** server can't find 106.0.252.116.in-addr.arpa: SERVFAIL

Related IP info:
Related comments:
IP Type Details Datetime
211.43.13.243 attack
Jul  4 19:14:24 webhost01 sshd[30158]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.43.13.243
Jul  4 19:14:26 webhost01 sshd[30158]: Failed password for invalid user bem from 211.43.13.243 port 39320 ssh2
...
2020-07-04 20:18:01
122.51.254.9 attack
Jul  4 08:11:54 ny01 sshd[18208]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.254.9
Jul  4 08:11:56 ny01 sshd[18208]: Failed password for invalid user test from 122.51.254.9 port 59662 ssh2
Jul  4 08:21:15 ny01 sshd[19317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.254.9
2020-07-04 20:27:50
91.212.38.68 attack
2020-07-04T05:03:43.272445morrigan.ad5gb.com sshd[1345241]: Invalid user josephine from 91.212.38.68 port 51282
2020-07-04T05:03:45.041926morrigan.ad5gb.com sshd[1345241]: Failed password for invalid user josephine from 91.212.38.68 port 51282 ssh2
2020-07-04 20:12:42
218.92.0.148 attackbots
Jul  4 08:44:34 ny01 sshd[22771]: Failed password for root from 218.92.0.148 port 24130 ssh2
Jul  4 08:44:46 ny01 sshd[22790]: Failed password for root from 218.92.0.148 port 17522 ssh2
2020-07-04 20:46:23
116.253.209.14 attackbots
proto=tcp  .  spt=37532  .  dpt=25  .     Listed on    abuseat-org plus zen-spamhaus and rbldns-ru     (155)
2020-07-04 20:37:48
12.171.245.139 attack
Port 22 Scan, PTR: None
2020-07-04 20:34:04
36.103.245.30 attackbotsspam
Jul  4 18:02:16 dhoomketu sshd[1272427]: Failed password for root from 36.103.245.30 port 42360 ssh2
Jul  4 18:04:47 dhoomketu sshd[1272437]: Invalid user zabbix from 36.103.245.30 port 45492
Jul  4 18:04:47 dhoomketu sshd[1272437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.103.245.30 
Jul  4 18:04:47 dhoomketu sshd[1272437]: Invalid user zabbix from 36.103.245.30 port 45492
Jul  4 18:04:49 dhoomketu sshd[1272437]: Failed password for invalid user zabbix from 36.103.245.30 port 45492 ssh2
...
2020-07-04 20:44:05
167.172.153.137 attackspambots
Jul  4 17:14:09 gw1 sshd[22621]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.172.153.137
Jul  4 17:14:12 gw1 sshd[22621]: Failed password for invalid user jcq from 167.172.153.137 port 55480 ssh2
...
2020-07-04 20:35:09
112.78.183.21 attack
$f2bV_matches
2020-07-04 20:38:19
49.232.48.129 attack
Jul  4 14:14:21 vpn01 sshd[27400]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.48.129
Jul  4 14:14:22 vpn01 sshd[27400]: Failed password for invalid user amt from 49.232.48.129 port 54570 ssh2
...
2020-07-04 20:22:53
51.79.55.141 attack
2020-07-04T12:14:26.881185server.espacesoutien.com sshd[9038]: Invalid user oracle from 51.79.55.141 port 37568
2020-07-04T12:14:26.891259server.espacesoutien.com sshd[9038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.79.55.141
2020-07-04T12:14:26.881185server.espacesoutien.com sshd[9038]: Invalid user oracle from 51.79.55.141 port 37568
2020-07-04T12:14:28.506002server.espacesoutien.com sshd[9038]: Failed password for invalid user oracle from 51.79.55.141 port 37568 ssh2
...
2020-07-04 20:16:57
148.240.94.9 attack
proto=tcp  .  spt=56159  .  dpt=25  .     Found on   Blocklist de       (157)
2020-07-04 20:32:27
93.99.138.88 attackbots
$f2bV_matches
2020-07-04 20:13:37
222.186.175.216 attackspambots
Jul  4 14:37:49 PorscheCustomer sshd[31709]: Failed password for root from 222.186.175.216 port 12618 ssh2
Jul  4 14:37:53 PorscheCustomer sshd[31709]: Failed password for root from 222.186.175.216 port 12618 ssh2
Jul  4 14:37:56 PorscheCustomer sshd[31709]: Failed password for root from 222.186.175.216 port 12618 ssh2
Jul  4 14:38:02 PorscheCustomer sshd[31709]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 12618 ssh2 [preauth]
...
2020-07-04 20:42:04
62.234.137.26 attack
2020-07-04 14:14:09,410 fail2ban.actions: WARNING [ssh] Ban 62.234.137.26
2020-07-04 20:40:13

Recently Reported IPs

42.120.160.50 34.83.49.114 2001:da8:20b:200:100::b3 27.211.183.0
14.152.92.108 69.178.87.127 1.202.112.184 223.91.86.147
222.94.140.124 82.140.63.214 111.117.60.88 222.82.60.45
222.79.48.170 221.234.239.45 58.174.13.136 136.160.116.113
221.13.12.37 220.250.63.137 253.63.71.78 86.95.16.38