City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom Guizhou Province Network
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attack | The IP has triggered Cloudflare WAF. CF-Ray: 5432bc20ef9be50a | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: ip.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-12 06:59:12 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.13.12.79 | attack | Unauthorized connection attempt detected from IP address 221.13.12.79 to port 123 |
2020-06-13 06:05:18 |
| 221.13.12.19 | attack | Web Server Scan. RayID: 592aa77abd9b0256, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN |
2020-05-21 03:47:26 |
| 221.13.12.222 | attackspam | China's GFW probe |
2020-05-15 17:35:44 |
| 221.13.12.235 | attack | Unauthorized connection attempt detected from IP address 221.13.12.235 to port 992 [T] |
2020-04-15 02:25:36 |
| 221.13.12.179 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.179 to port 3389 [J] |
2020-03-03 02:05:51 |
| 221.13.12.142 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.142 to port 8899 [J] |
2020-03-02 20:47:11 |
| 221.13.12.187 | attack | Unauthorized connection attempt detected from IP address 221.13.12.187 to port 22 [J] |
2020-03-02 19:21:12 |
| 221.13.12.104 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.104 to port 22 [J] |
2020-03-02 17:29:07 |
| 221.13.12.65 | attack | Unauthorized connection attempt detected from IP address 221.13.12.65 to port 8081 [J] |
2020-03-02 16:58:59 |
| 221.13.12.133 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.133 to port 8082 [J] |
2020-03-02 16:29:37 |
| 221.13.12.98 | attack | Unauthorized connection attempt detected from IP address 221.13.12.98 to port 8118 [J] |
2020-03-02 14:47:39 |
| 221.13.12.91 | attack | Unauthorized connection attempt detected from IP address 221.13.12.91 to port 8000 [J] |
2020-03-02 14:14:42 |
| 221.13.12.97 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.97 to port 8443 [J] |
2020-02-05 09:04:55 |
| 221.13.12.118 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.118 to port 443 [J] |
2020-01-31 22:42:35 |
| 221.13.12.224 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.224 to port 9011 [T] |
2020-01-29 10:16:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.13.12.161
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50162
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.13.12.161. IN A
;; AUTHORITY SECTION:
. 418 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019121101 1800 900 604800 86400
;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Dec 12 06:59:09 CST 2019
;; MSG SIZE rcvd: 117Host 161.12.13.221.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 161.12.13.221.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 59.145.221.103 | attackspambots | Dec 21 07:17:56 server sshd\[25654\]: Failed password for invalid user cadiente from 59.145.221.103 port 55398 ssh2 Dec 21 19:58:32 server sshd\[3540\]: Invalid user tang from 59.145.221.103 Dec 21 19:58:32 server sshd\[3540\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.145.221.103 Dec 21 19:58:34 server sshd\[3540\]: Failed password for invalid user tang from 59.145.221.103 port 38493 ssh2 Dec 21 20:20:01 server sshd\[9393\]: Invalid user hung from 59.145.221.103 Dec 21 20:20:01 server sshd\[9393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.145.221.103 ... |
2019-12-22 03:29:31 |
| 157.245.207.46 | attackbots | $f2bV_matches |
2019-12-22 03:37:27 |
| 117.50.13.29 | attackbotsspam | Dec 21 20:07:03 server sshd\[6087\]: Invalid user user from 117.50.13.29 Dec 21 20:07:03 server sshd\[6087\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29 Dec 21 20:07:05 server sshd\[6087\]: Failed password for invalid user user from 117.50.13.29 port 59346 ssh2 Dec 21 20:33:29 server sshd\[13063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.13.29 user=root Dec 21 20:33:31 server sshd\[13063\]: Failed password for root from 117.50.13.29 port 55616 ssh2 ... |
2019-12-22 03:19:23 |
| 81.22.45.253 | attackbots | Dec 21 19:50:17 mc1 kernel: \[1113027.705278\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=51105 PROTO=TCP SPT=57661 DPT=1330 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 19:53:39 mc1 kernel: \[1113228.803870\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=53864 PROTO=TCP SPT=57661 DPT=500 WINDOW=1024 RES=0x00 SYN URGP=0 Dec 21 19:54:10 mc1 kernel: \[1113260.347385\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.253 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=495 PROTO=TCP SPT=57661 DPT=45803 WINDOW=1024 RES=0x00 SYN URGP=0 ... |
2019-12-22 03:26:46 |
| 186.122.147.189 | attackspambots | Dec 21 14:41:33 XXX sshd[64211]: Invalid user awana from 186.122.147.189 port 33356 |
2019-12-22 03:17:49 |
| 81.142.80.97 | attackbots | Dec 21 16:11:07 localhost sshd\[30608\]: Invalid user test from 81.142.80.97 port 46351 Dec 21 16:11:07 localhost sshd\[30608\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.142.80.97 Dec 21 16:11:09 localhost sshd\[30608\]: Failed password for invalid user test from 81.142.80.97 port 46351 ssh2 ... |
2019-12-22 03:43:59 |
| 14.169.109.18 | attackspam | Brute force attempt |
2019-12-22 03:36:31 |
| 83.4.82.24 | attack | Automatic report - Port Scan Attack |
2019-12-22 03:49:19 |
| 134.209.127.138 | attackspambots | WordPress (CMS) attack attempts. Date: 2019 Dec 21. 15:48:56 Source IP: 134.209.127.138 Portion of the log(s): 134.209.127.138 - [21/Dec/2019:15:48:55 +0100] "POST /wp-login.php HTTP/1.1" 200 2393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.127.138 - [21/Dec/2019:15:48:54 +0100] "POST /wp-login.php HTTP/1.1" 200 2392 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.127.138 - [21/Dec/2019:15:48:53 +0100] "POST /wp-login.php HTTP/1.1" 200 2389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.127.138 - [21/Dec/2019:15:48:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2399 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 134.209.127.138 - [21/Dec/2019:15:48:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2389 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" .... |
2019-12-22 03:50:58 |
| 200.209.174.76 | attackbots | Dec 21 18:46:20 ns41 sshd[6676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.209.174.76 |
2019-12-22 03:35:16 |
| 103.249.100.48 | attack | Dec 21 20:35:33 server sshd\[13830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.100.48 user=root Dec 21 20:35:36 server sshd\[13830\]: Failed password for root from 103.249.100.48 port 53284 ssh2 Dec 21 20:55:05 server sshd\[18510\]: Invalid user backup from 103.249.100.48 Dec 21 20:55:05 server sshd\[18510\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.249.100.48 Dec 21 20:55:07 server sshd\[18510\]: Failed password for invalid user backup from 103.249.100.48 port 40036 ssh2 ... |
2019-12-22 03:10:53 |
| 211.220.27.191 | attackspambots | Dec 21 19:43:55 MK-Soft-VM5 sshd[31259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.220.27.191 Dec 21 19:43:57 MK-Soft-VM5 sshd[31259]: Failed password for invalid user abcdefghijkl from 211.220.27.191 port 38438 ssh2 ... |
2019-12-22 03:25:11 |
| 222.137.74.125 | attackspam | Fail2Ban Ban Triggered |
2019-12-22 03:11:45 |
| 84.2.104.71 | attack | Automatic report - Port Scan Attack |
2019-12-22 03:34:21 |
| 159.203.32.71 | attack | $f2bV_matches |
2019-12-22 03:38:29 |