City: unknown
Region: unknown
Country: China
Internet Service Provider: China Unicom Guizhou Province Network
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackspam | The IP has triggered Cloudflare WAF. CF-Ray: 5410ce280fd3e7fd | WAF_Rule_ID: 1112825 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Mobile Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 07:01:34 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.13.12.79 | attack | Unauthorized connection attempt detected from IP address 221.13.12.79 to port 123 |
2020-06-13 06:05:18 |
| 221.13.12.19 | attack | Web Server Scan. RayID: 592aa77abd9b0256, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN |
2020-05-21 03:47:26 |
| 221.13.12.222 | attackspam | China's GFW probe |
2020-05-15 17:35:44 |
| 221.13.12.235 | attack | Unauthorized connection attempt detected from IP address 221.13.12.235 to port 992 [T] |
2020-04-15 02:25:36 |
| 221.13.12.179 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.179 to port 3389 [J] |
2020-03-03 02:05:51 |
| 221.13.12.142 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.142 to port 8899 [J] |
2020-03-02 20:47:11 |
| 221.13.12.187 | attack | Unauthorized connection attempt detected from IP address 221.13.12.187 to port 22 [J] |
2020-03-02 19:21:12 |
| 221.13.12.104 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.104 to port 22 [J] |
2020-03-02 17:29:07 |
| 221.13.12.65 | attack | Unauthorized connection attempt detected from IP address 221.13.12.65 to port 8081 [J] |
2020-03-02 16:58:59 |
| 221.13.12.133 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.133 to port 8082 [J] |
2020-03-02 16:29:37 |
| 221.13.12.98 | attack | Unauthorized connection attempt detected from IP address 221.13.12.98 to port 8118 [J] |
2020-03-02 14:47:39 |
| 221.13.12.91 | attack | Unauthorized connection attempt detected from IP address 221.13.12.91 to port 8000 [J] |
2020-03-02 14:14:42 |
| 221.13.12.97 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.97 to port 8443 [J] |
2020-02-05 09:04:55 |
| 221.13.12.118 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.118 to port 443 [J] |
2020-01-31 22:42:35 |
| 221.13.12.224 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.224 to port 9011 [T] |
2020-01-29 10:16:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.13.12.74
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 9812
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.13.12.74. IN A
;; AUTHORITY SECTION:
. 278 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019120701 1800 900 604800 86400
;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 07:01:31 CST 2019
;; MSG SIZE rcvd: 116Host 74.12.13.221.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 74.12.13.221.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 86.210.129.3 | attack | $f2bV_matches |
2020-03-26 18:48:19 |
| 107.170.244.110 | attackspam | Mar 26 09:38:11 XXX sshd[24947]: Invalid user magda from 107.170.244.110 port 56632 |
2020-03-26 19:11:34 |
| 45.55.65.92 | attackbots | Mar 26 11:25:52 debian-2gb-nbg1-2 kernel: \[7477427.856143\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.55.65.92 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=17152 PROTO=TCP SPT=43828 DPT=26705 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-03-26 19:06:41 |
| 51.83.75.97 | attackbotsspam | Mar 26 10:45:59 xeon sshd[21089]: Failed password for invalid user www from 51.83.75.97 port 54420 ssh2 |
2020-03-26 18:42:50 |
| 39.71.69.5 | attack | Unauthorized connection attempt detected from IP address 39.71.69.5 to port 22 [T] |
2020-03-26 19:20:29 |
| 66.240.236.119 | attackspambots | Unauthorized connection attempt detected from IP address 66.240.236.119 to port 53 |
2020-03-26 18:56:46 |
| 5.154.247.1 | attackbots | Brute force VPN server |
2020-03-26 19:21:01 |
| 45.5.0.7 | attackspambots | Invalid user bran from 45.5.0.7 port 53934 |
2020-03-26 19:07:59 |
| 124.123.37.168 | attackbots | Mar 26 06:29:37 master sshd[4411]: Failed password for invalid user xiehongjun from 124.123.37.168 port 39994 ssh2 Mar 26 06:34:27 master sshd[4463]: Failed password for backup from 124.123.37.168 port 50508 ssh2 Mar 26 06:37:11 master sshd[4481]: Failed password for invalid user vo from 124.123.37.168 port 60126 ssh2 Mar 26 06:39:54 master sshd[4506]: Failed password for invalid user melc from 124.123.37.168 port 41490 ssh2 Mar 26 06:42:34 master sshd[4527]: Failed password for invalid user lupoae from 124.123.37.168 port 51092 ssh2 Mar 26 06:45:13 master sshd[4559]: Failed password for invalid user diskchk from 124.123.37.168 port 60700 ssh2 Mar 26 06:47:57 master sshd[4573]: Failed password for invalid user ionut from 124.123.37.168 port 42080 ssh2 Mar 26 06:53:11 master sshd[4597]: Failed password for invalid user ob from 124.123.37.168 port 33062 ssh2 Mar 26 06:55:51 master sshd[4611]: Failed password for invalid user web from 124.123.37.168 port 42660 ssh2 |
2020-03-26 19:20:09 |
| 200.186.21.125 | attackspam | 2020-03-26T11:01:04.894029vps751288.ovh.net sshd\[22637\]: Invalid user sh from 200.186.21.125 port 37799 2020-03-26T11:01:04.904284vps751288.ovh.net sshd\[22637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.186.21.125 2020-03-26T11:01:07.132024vps751288.ovh.net sshd\[22637\]: Failed password for invalid user sh from 200.186.21.125 port 37799 ssh2 2020-03-26T11:08:09.549090vps751288.ovh.net sshd\[22700\]: Invalid user jl from 200.186.21.125 port 35837 2020-03-26T11:08:09.559743vps751288.ovh.net sshd\[22700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.186.21.125 |
2020-03-26 18:57:33 |
| 175.147.167.200 | attack | Port 23 (Telnet) access denied |
2020-03-26 18:47:31 |
| 142.93.178.254 | attack | Mar 26 07:58:33 master sshd[32618]: Failed password for invalid user zimbra from 142.93.178.254 port 35552 ssh2 Mar 26 08:00:17 master sshd[590]: Failed password for invalid user oracle from 142.93.178.254 port 49560 ssh2 |
2020-03-26 18:38:02 |
| 103.40.26.77 | attackspam | Mar 26 11:21:38 eventyay sshd[6080]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.26.77 Mar 26 11:21:40 eventyay sshd[6080]: Failed password for invalid user ee from 103.40.26.77 port 34638 ssh2 Mar 26 11:25:31 eventyay sshd[6240]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.40.26.77 ... |
2020-03-26 18:36:13 |
| 93.170.36.2 | attack | Invalid user oraprod from 93.170.36.2 port 56139 |
2020-03-26 18:56:16 |
| 51.75.17.6 | attackspam | Mar 26 11:34:30 host01 sshd[17206]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.17.6 Mar 26 11:34:32 host01 sshd[17206]: Failed password for invalid user admin from 51.75.17.6 port 45530 ssh2 Mar 26 11:38:22 host01 sshd[17926]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.17.6 ... |
2020-03-26 18:57:07 |