Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom Zhejiang Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
Type Details Datetime
attackbots
The IP has triggered Cloudflare WAF. CF-Ray: 5433fc593db0285c | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: SJC. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).
2019-12-12 05:37:13
Comments on same subnet:
IP Type Details Datetime
124.90.55.101 attackspam
Unauthorized connection attempt detected from IP address 124.90.55.101 to port 8118 [J]
2020-01-19 16:02:36
124.90.55.88 attackbots
Unauthorized connection attempt detected from IP address 124.90.55.88 to port 80 [J]
2020-01-14 15:18:47
124.90.55.178 attack
Unauthorized connection attempt detected from IP address 124.90.55.178 to port 3129 [T]
2020-01-07 01:17:20
124.90.55.150 attack
Unauthorized connection attempt detected from IP address 124.90.55.150 to port 8118
2020-01-04 08:00:11
124.90.55.179 attack
Fail2Ban Ban Triggered
2019-12-29 14:05:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 124.90.55.2
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5604
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;124.90.55.2.			IN	A

;; AUTHORITY SECTION:
.			285	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400

;; Query time: 106 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 05:37:10 CST 2019
;; MSG SIZE  rcvd: 115
Host info
Host 2.55.90.124.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 2.55.90.124.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
181.49.254.230 attackspam
Nov  6 17:17:51 server sshd\[17819\]: Invalid user dvr from 181.49.254.230
Nov  6 17:17:51 server sshd\[17819\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.254.230 
Nov  6 17:17:53 server sshd\[17819\]: Failed password for invalid user dvr from 181.49.254.230 port 37236 ssh2
Nov  6 17:35:52 server sshd\[23014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.49.254.230  user=root
Nov  6 17:35:54 server sshd\[23014\]: Failed password for root from 181.49.254.230 port 34320 ssh2
...
2019-11-07 03:24:29
192.243.215.42 attack
Nov  6 10:09:40 ny01 sshd[27862]: Failed password for root from 192.243.215.42 port 39940 ssh2
Nov  6 10:13:55 ny01 sshd[28241]: Failed password for root from 192.243.215.42 port 50710 ssh2
2019-11-07 03:14:09
165.227.122.251 attackbotsspam
2019-11-06T16:12:26.554732abusebot-5.cloudsearch.cf sshd\[9219\]: Invalid user gong from 165.227.122.251 port 37658
2019-11-07 03:19:15
46.101.163.220 attackspam
2019-11-06T18:05:28.574365abusebot-8.cloudsearch.cf sshd\[30521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=server.herojus.lt  user=ftp
2019-11-07 03:09:03
67.205.139.165 attackbotsspam
Nov  6 17:48:55 server sshd\[26342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165  user=root
Nov  6 17:48:57 server sshd\[26342\]: Failed password for root from 67.205.139.165 port 57486 ssh2
Nov  6 18:00:11 server sshd\[29550\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165  user=root
Nov  6 18:00:13 server sshd\[29550\]: Failed password for root from 67.205.139.165 port 51886 ssh2
Nov  6 18:03:49 server sshd\[30188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.205.139.165  user=root
...
2019-11-07 03:06:42
194.55.187.3 attackspambots
Unauthorised access (Nov  6) SRC=194.55.187.3 LEN=40 TTL=241 ID=54321 TCP DPT=21 WINDOW=65535 SYN 
Unauthorised access (Nov  5) SRC=194.55.187.3 LEN=40 TTL=237 ID=54321 TCP DPT=3306 WINDOW=65535 SYN
2019-11-07 03:17:26
85.144.226.170 attackspambots
Nov  6 09:12:35 web1 sshd\[6295\]: Invalid user web from 85.144.226.170
Nov  6 09:12:35 web1 sshd\[6295\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.144.226.170
Nov  6 09:12:37 web1 sshd\[6295\]: Failed password for invalid user web from 85.144.226.170 port 53932 ssh2
Nov  6 09:16:37 web1 sshd\[6670\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=85.144.226.170  user=root
Nov  6 09:16:39 web1 sshd\[6670\]: Failed password for root from 85.144.226.170 port 35226 ssh2
2019-11-07 03:18:42
142.116.195.135 attack
none
2019-11-07 02:48:29
178.40.58.78 attackspam
$f2bV_matches
2019-11-07 02:56:04
89.222.217.9 attackspam
Chat Spam
2019-11-07 03:13:00
81.22.45.116 attackspambots
Nov  6 19:42:01 h2177944 kernel: \[5941350.947912\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=28786 PROTO=TCP SPT=43285 DPT=49874 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 20:03:03 h2177944 kernel: \[5942612.992724\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=249 ID=63310 PROTO=TCP SPT=43285 DPT=49972 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 20:05:01 h2177944 kernel: \[5942731.269235\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=39299 PROTO=TCP SPT=43285 DPT=49693 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 20:06:06 h2177944 kernel: \[5942796.185831\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=248 ID=10699 PROTO=TCP SPT=43285 DPT=49881 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  6 20:09:23 h2177944 kernel: \[5942993.266180\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=81.22.45.116 DST=85.214.117.9
2019-11-07 03:22:26
217.112.128.143 attackbots
Postfix DNSBL listed. Trying to send SPAM.
2019-11-07 03:07:25
94.232.1.39 attackbotsspam
Chat Spam
2019-11-07 03:13:56
178.195.6.95 attackspam
Web App Attack
2019-11-07 02:53:02
185.74.4.189 attackspambots
Nov  6 07:06:52 eddieflores sshd\[13498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.189  user=root
Nov  6 07:06:54 eddieflores sshd\[13498\]: Failed password for root from 185.74.4.189 port 36340 ssh2
Nov  6 07:11:12 eddieflores sshd\[13915\]: Invalid user foxi from 185.74.4.189
Nov  6 07:11:12 eddieflores sshd\[13915\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.74.4.189
Nov  6 07:11:14 eddieflores sshd\[13915\]: Failed password for invalid user foxi from 185.74.4.189 port 45068 ssh2
2019-11-07 02:54:59

Recently Reported IPs

43.223.167.12 111.206.221.81 111.206.221.72 27.114.228.210
110.80.155.6 106.45.1.223 106.45.1.48 106.45.1.1
106.39.246.137 59.173.152.101 49.7.4.134 47.74.155.28
42.120.160.121 1.202.114.168 223.166.74.6 223.104.91.152
222.82.56.201 222.82.54.160 221.213.75.209 221.13.12.182