City: Guiyang
Region: Guizhou
Country: China
Internet Service Provider: China Unicom Guizhou Province Network
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackspambots | The IP has triggered Cloudflare WAF. CF-Ray: 54107005796fd352 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: api.skk.moe | User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB). |
2019-12-08 04:52:31 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 221.13.12.79 | attack | Unauthorized connection attempt detected from IP address 221.13.12.79 to port 123 |
2020-06-13 06:05:18 |
| 221.13.12.19 | attack | Web Server Scan. RayID: 592aa77abd9b0256, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN |
2020-05-21 03:47:26 |
| 221.13.12.222 | attackspam | China's GFW probe |
2020-05-15 17:35:44 |
| 221.13.12.235 | attack | Unauthorized connection attempt detected from IP address 221.13.12.235 to port 992 [T] |
2020-04-15 02:25:36 |
| 221.13.12.179 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.179 to port 3389 [J] |
2020-03-03 02:05:51 |
| 221.13.12.142 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.142 to port 8899 [J] |
2020-03-02 20:47:11 |
| 221.13.12.187 | attack | Unauthorized connection attempt detected from IP address 221.13.12.187 to port 22 [J] |
2020-03-02 19:21:12 |
| 221.13.12.104 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.104 to port 22 [J] |
2020-03-02 17:29:07 |
| 221.13.12.65 | attack | Unauthorized connection attempt detected from IP address 221.13.12.65 to port 8081 [J] |
2020-03-02 16:58:59 |
| 221.13.12.133 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.133 to port 8082 [J] |
2020-03-02 16:29:37 |
| 221.13.12.98 | attack | Unauthorized connection attempt detected from IP address 221.13.12.98 to port 8118 [J] |
2020-03-02 14:47:39 |
| 221.13.12.91 | attack | Unauthorized connection attempt detected from IP address 221.13.12.91 to port 8000 [J] |
2020-03-02 14:14:42 |
| 221.13.12.97 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.97 to port 8443 [J] |
2020-02-05 09:04:55 |
| 221.13.12.118 | attackbots | Unauthorized connection attempt detected from IP address 221.13.12.118 to port 443 [J] |
2020-01-31 22:42:35 |
| 221.13.12.224 | attackspam | Unauthorized connection attempt detected from IP address 221.13.12.224 to port 9011 [T] |
2020-01-29 10:16:31 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.13.12.99
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 40163
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.13.12.99. IN A
;; AUTHORITY SECTION:
. 200 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019120701 1800 900 604800 86400
;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 04:52:27 CST 2019
;; MSG SIZE rcvd: 116Host 99.12.13.221.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 100.100.2.136, trying next server
** server can't find 99.12.13.221.in-addr.arpa: SERVFAIL
| IP | Type | Details | Datetime |
|---|---|---|---|
| 218.92.0.179 | attackbotsspam | Mar 7 16:26:31 minden010 sshd[11016]: Failed password for root from 218.92.0.179 port 14234 ssh2 Mar 7 16:26:35 minden010 sshd[11016]: Failed password for root from 218.92.0.179 port 14234 ssh2 Mar 7 16:26:38 minden010 sshd[11016]: Failed password for root from 218.92.0.179 port 14234 ssh2 Mar 7 16:26:41 minden010 sshd[11016]: Failed password for root from 218.92.0.179 port 14234 ssh2 ... |
2020-03-08 00:34:56 |
| 49.231.142.100 | attackbots | Unauthorized connection attempt from IP address 49.231.142.100 on Port 445(SMB) |
2020-03-08 00:13:07 |
| 171.4.238.114 | attackbots | [SatMar0714:31:58.5389692020][:error][pid22865:tid47374142183168][client171.4.238.114:14063][client171.4.238.114]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(DisableifyouwanttoallowMSIE6\)"][severity"WARNING"][hostname"patriziatodiosogna.ch"][uri"/"][unique_id"XmOiTkxEYV9Jn2sXpUU-lgAAAMw"][SatMar0714:32:03.3384972020][:error][pid22858:tid47374125373184][client171.4.238.114:6362][client171.4.238.114]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchof"rx\(MSWebServicesClientProtocol\|WormlyBot\|webauth@cmcm\\\\\\\\.com\)"against"REQUEST_HEADERS:User-Agent"required.[file"/usr/local/apache.ea3/conf/modsec_rules/20_asl_useragents.conf"][line"402"][id"397989"][rev"1"][msg"Atomicorp.comWAFRules:MSIE6.0detected\(Disa |
2020-03-08 00:35:41 |
| 177.69.26.97 | attackbotsspam | Mar 7 16:36:20 nextcloud sshd\[12379\]: Invalid user gerrit2 from 177.69.26.97 Mar 7 16:36:20 nextcloud sshd\[12379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.69.26.97 Mar 7 16:36:22 nextcloud sshd\[12379\]: Failed password for invalid user gerrit2 from 177.69.26.97 port 50172 ssh2 |
2020-03-08 00:13:43 |
| 14.231.193.117 | attackbotsspam | Brute-force attempt banned |
2020-03-08 00:06:12 |
| 192.169.190.108 | attackbots | $f2bV_matches |
2020-03-08 00:36:24 |
| 124.109.47.91 | attackbots | 20/3/7@10:12:09: FAIL: Alarm-Network address from=124.109.47.91 20/3/7@10:12:09: FAIL: Alarm-Network address from=124.109.47.91 ... |
2020-03-08 00:33:29 |
| 46.101.105.55 | attackbotsspam | Mar 7 15:34:18 server sshd[3996891]: Failed password for root from 46.101.105.55 port 37558 ssh2 Mar 7 15:38:12 server sshd[4002516]: Failed password for root from 46.101.105.55 port 52552 ssh2 Mar 7 15:42:01 server sshd[4008362]: Failed password for root from 46.101.105.55 port 39314 ssh2 |
2020-03-08 00:15:06 |
| 178.206.127.58 | attackbotsspam | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-03-08 00:01:42 |
| 45.55.6.42 | attackspambots | Mar 7 14:31:57 mail sshd[15989]: Invalid user fct from 45.55.6.42 Mar 7 14:31:57 mail sshd[15989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.55.6.42 Mar 7 14:31:57 mail sshd[15989]: Invalid user fct from 45.55.6.42 Mar 7 14:31:59 mail sshd[15989]: Failed password for invalid user fct from 45.55.6.42 port 40511 ssh2 ... |
2020-03-08 00:40:50 |
| 81.9.127.89 | attack | 0,47-03/25 [bc04/m13] PostRequest-Spammer scoring: berlin |
2020-03-08 00:01:04 |
| 191.96.249.156 | attackbots | suspicious action Sat, 07 Mar 2020 10:31:57 -0300 |
2020-03-08 00:42:51 |
| 222.186.175.217 | attackspam | Mar 7 14:54:21 server sshd[753011]: Failed password for root from 222.186.175.217 port 33776 ssh2 Mar 7 15:54:58 server sshd[762778]: Failed none for root from 222.186.175.217 port 10056 ssh2 Mar 7 15:55:00 server sshd[762778]: Failed password for root from 222.186.175.217 port 10056 ssh2 |
2020-03-08 00:33:14 |
| 218.64.122.63 | attackbotsspam | 2020-03-0714:31:101jAZXo-0005Yl-BP\<=verena@rs-solution.chH=\(localhost\)[14.246.213.250]:33861P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3095id=ad9d50030823f6fadd982e7d894e44487b3c2499@rs-solution.chT="NewlikereceivedfromAlecia"forstansmore23@gmail.comallischalmers6060@gmail.com2020-03-0714:31:281jAZY7-0005Zl-5Z\<=verena@rs-solution.chH=\(localhost\)[14.248.69.107]:47177P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3094id=a5c1f8aba08b5e52753086d521e6ece0d313b715@rs-solution.chT="RecentlikefromLuella"fora.gibson219@btinternet.comcourblou24@gmail.com2020-03-0714:30:421jAZXK-0005TW-P4\<=verena@rs-solution.chH=\(localhost\)[37.114.183.203]:52237P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:verena@rs-solution.chS=3010id=822791c2c9e2c8c05c59ef43a4507a6689c8fe@rs-solution.chT="NewlikefromKasey"forroman408.cs@gmail.comanthonykeith1969@gmail.com2020-03-0714:31:191jAZXx-0005ZG-OA\<=verena@rs-s |
2020-03-08 00:43:57 |
| 212.29.222.12 | attackspam | Honeypot attack, port: 81, PTR: 212-29-222-12.barak.net.il. |
2020-03-08 00:00:10 |