Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
124.89.89.152 attackspam
Unauthorized connection attempt detected from IP address 124.89.89.152 to port 6666 [J]
2020-01-31 05:33:30
124.89.89.154 attackspambots
Unauthorized connection attempt detected from IP address 124.89.89.154 to port 8118 [T]
2020-01-27 15:11:08
124.89.89.155 attack
Unauthorized connection attempt detected from IP address 124.89.89.155 to port 8118 [J]
2020-01-22 07:43:56
124.89.89.150 attackbots
Unauthorized connection attempt detected from IP address 124.89.89.150 to port 8123 [J]
2020-01-16 06:34:31
124.89.89.156 attack
Unauthorized connection attempt detected from IP address 124.89.89.156 to port 8080
2019-12-31 07:33:46
124.89.89.152 attackspam
Unauthorized connection attempt detected from IP address 124.89.89.152 to port 8080
2019-12-31 07:10:38
124.89.89.154 attack
The IP has triggered Cloudflare WAF. CF-Ray: 543425a4a8fce4e6 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: disqus.skk.moe | User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 05:37:56
124.89.89.157 attack
The IP has triggered Cloudflare WAF. CF-Ray: 54330ae55a4b7884 | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 05:37:29
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.89.89.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36425
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;124.89.89.148.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030801 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 00:36:18 CST 2022
;; MSG SIZE  rcvd: 106
Host info
Host 148.89.89.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.89.89.124.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
95.78.113.84 attack
proto=tcp  .  spt=47034  .  dpt=25  .     (listed on Blocklist de  Aug 13)     (714)
2019-08-14 10:05:32
191.102.116.231 attack
Sending SPAM email
2019-08-14 10:17:51
51.77.193.218 attackbotsspam
Aug 14 03:55:19 meumeu sshd[27760]: error: maximum authentication attempts exceeded for root from 51.77.193.218 port 42886 ssh2 [preauth]
Aug 14 03:55:23 meumeu sshd[27763]: error: maximum authentication attempts exceeded for root from 51.77.193.218 port 44284 ssh2 [preauth]
...
2019-08-14 10:00:37
147.135.161.142 attack
Aug 14 04:19:27 SilenceServices sshd[13046]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.161.142
Aug 14 04:19:28 SilenceServices sshd[13046]: Failed password for invalid user watcher from 147.135.161.142 port 39388 ssh2
Aug 14 04:24:06 SilenceServices sshd[16789]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=147.135.161.142
2019-08-14 10:37:02
82.221.128.73 attackspambots
MultiHost/MultiPort Probe, Scan, Hack -
2019-08-14 10:38:27
131.161.35.18 attackbotsspam
proto=tcp  .  spt=48612  .  dpt=25  .     (listed on Blocklist de  Aug 13)     (715)
2019-08-14 10:04:44
51.38.156.230 attack
Aug 13 20:07:09 mxgate1 postfix/postscreen[31443]: CONNECT from [51.38.156.230]:56590 to [176.31.12.44]:25
Aug 13 20:07:09 mxgate1 postfix/dnsblog[31448]: addr 51.38.156.230 listed by domain zen.spamhaus.org as 127.0.0.3
Aug 13 20:07:09 mxgate1 postfix/dnsblog[31444]: addr 51.38.156.230 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Aug 13 20:07:09 mxgate1 postfix/dnsblog[31445]: addr 51.38.156.230 listed by domain b.barracudacentral.org as 127.0.0.2
Aug 13 20:07:15 mxgate1 postfix/postscreen[31443]: DNSBL rank 4 for [51.38.156.230]:56590
Aug x@x
Aug 13 20:07:15 mxgate1 postfix/postscreen[31443]: DISCONNECT [51.38.156.230]:56590


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=51.38.156.230
2019-08-14 10:04:25
122.118.115.27 attack
Aug 11 18:07:09 localhost kernel: [16805422.422958] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=122.118.115.27 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=3633 PROTO=TCP SPT=27270 DPT=37215 WINDOW=17067 RES=0x00 SYN URGP=0 
Aug 11 18:07:09 localhost kernel: [16805422.422988] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=122.118.115.27 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=3633 PROTO=TCP SPT=27270 DPT=37215 SEQ=758669438 ACK=0 WINDOW=17067 RES=0x00 SYN URGP=0 
Aug 13 14:15:14 localhost kernel: [16964307.498816] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=122.118.115.27 DST=[mungedIP2] LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=12068 PROTO=TCP SPT=27270 DPT=37215 WINDOW=17067 RES=0x00 SYN URGP=0 
Aug 13 14:15:14 localhost kernel: [16964307.498842] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=122.118.115.27 DST=[mungedIP2] LEN=40 TOS=0
2019-08-14 10:14:16
167.71.35.63 attackspam
Invalid user webplace from 167.71.35.63 port 48650
2019-08-14 10:29:36
93.117.46.221 attackspambots
Automatic report - Port Scan Attack
2019-08-14 10:05:03
54.39.196.199 attackbotsspam
Aug 13 20:14:46 bouncer sshd\[2891\]: Invalid user hr from 54.39.196.199 port 37462
Aug 13 20:14:46 bouncer sshd\[2891\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.39.196.199 
Aug 13 20:14:48 bouncer sshd\[2891\]: Failed password for invalid user hr from 54.39.196.199 port 37462 ssh2
...
2019-08-14 10:35:08
68.183.24.254 attackbots
Invalid user secretar from 68.183.24.254 port 49284
2019-08-14 10:21:19
220.135.36.195 attackbotsspam
Aug 14 03:51:06 ubuntu-2gb-nbg1-dc3-1 sshd[7089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.135.36.195
Aug 14 03:51:07 ubuntu-2gb-nbg1-dc3-1 sshd[7089]: Failed password for invalid user gopher from 220.135.36.195 port 60656 ssh2
...
2019-08-14 10:26:23
118.98.121.198 attackbotsspam
Aug 14 01:39:18 ArkNodeAT sshd\[25130\]: Invalid user it2 from 118.98.121.198
Aug 14 01:39:18 ArkNodeAT sshd\[25130\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.98.121.198
Aug 14 01:39:20 ArkNodeAT sshd\[25130\]: Failed password for invalid user it2 from 118.98.121.198 port 59197 ssh2
2019-08-14 10:22:19
89.102.198.78 attackspam
proto=tcp  .  spt=56141  .  dpt=25  .     (listed on Blocklist de  Aug 13)     (710)
2019-08-14 10:14:39

Recently Reported IPs

124.89.86.248 124.89.86.9 117.64.226.174 124.89.91.57
124.89.90.60 124.89.97.35 124.89.88.194 124.89.86.39
124.89.97.36 124.89.97.40 124.89.97.38 124.89.97.42
124.89.97.44 124.9.13.158 124.9.192.215 124.9.128.18
124.9.192.63 117.64.226.220 124.9.198.124 124.9.200.185