116.149.193.248

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	Unauthorized connection attempt detected from IP address 116.149.193.248 to port 6656 [T]	2020-01-30 16:03:49

Comments on same subnet:

IP	Type	Details	Datetime
116.149.193.181	attack	Unauthorized connection attempt detected from IP address 116.149.193.181 to port 6656 [T]	2020-01-30 15:16:08
116.149.193.5	attackspambots	Unauthorized connection attempt detected from IP address 116.149.193.5 to port 6656 [T]	2020-01-30 13:34:58

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.149.193.248
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 50125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.149.193.248.		IN	A

;; AUTHORITY SECTION:
.			503	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020013001 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 30 16:03:44 CST 2020
;; MSG SIZE  rcvd: 119

Host info

Host 248.193.149.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 248.193.149.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
81.171.107.175	attack	\[2019-10-04 08:15:46\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '81.171.107.175:56237' - Wrong password \[2019-10-04 08:15:46\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T08:15:46.103-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1181",SessionID="0x7f1e1c2f44f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.107.175/56237",Challenge="75402956",ReceivedChallenge="75402956",ReceivedHash="bd3e3cf07284f5fc79b58d1c1ee10079" \[2019-10-04 08:17:09\] NOTICE\[1948\] chan_sip.c: Registration from '\' failed for '81.171.107.175:60847' - Wrong password \[2019-10-04 08:17:09\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-04T08:17:09.499-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="8116",SessionID="0x7f1e1c2bed58",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171	2019-10-04 20:18:31
203.76.71.194	attackspam	" "	2019-10-04 20:22:26
211.159.152.252	attackspambots	Invalid user export from 211.159.152.252 port 29737	2019-10-04 20:20:52
185.209.0.32	attack	10/04/2019-07:13:20.880681 185.209.0.32 Protocol: 6 ET SCAN NMAP -sS window 1024	2019-10-04 20:04:07
162.144.159.55	attackspambots	WordPress wp-login brute force :: 162.144.159.55 0.140 BYPASS [04/Oct/2019:22:29:53 1000] [censored_1] "POST /wp-login.php HTTP/1.1" 200 3972 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-10-04 20:30:17
103.81.85.21	attackbots	xmlrpc attack	2019-10-04 20:36:35
159.89.155.148	attack	Oct 4 06:33:53 localhost sshd\[19256\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.155.148 user=root Oct 4 06:33:55 localhost sshd\[19256\]: Failed password for root from 159.89.155.148 port 51576 ssh2 Oct 4 06:38:06 localhost sshd\[19644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.155.148 user=root	2019-10-04 20:12:12
129.146.201.116	attackbotsspam	Invalid user user from 129.146.201.116 port 49518	2019-10-04 20:04:56
52.168.48.111	attackspambots	Lines containing failures of 52.168.48.111 Oct 2 15:14:00 * sshd[65084]: Invalid user yun from 52.168.48.111 port 37482 Oct 2 15:14:00 * sshd[65084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.168.48.111 Oct 2 15:14:02 * sshd[65084]: Failed password for invalid user yun from 52.168.48.111 port 37482 ssh2 Oct 2 15:14:02 * sshd[65084]: Received disconnect from 52.168.48.111 port 37482:11: Bye Bye [preauth] Oct 2 15:14:02 * sshd[65084]: Disconnected from invalid user yun 52.168.48.111 port 37482 [preauth] Oct 2 15:32:32 * sshd[66508]: Invalid user zm from 52.168.48.111 port 50144 Oct 2 15:32:32 * sshd[66508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.168.48.111 Oct 2 15:32:34 * sshd[66508]: Failed password for invalid user zm from 52.168.48.111 port 50144 ssh2 Oct 2 15:32:34 *** sshd[66508]: Received disconnect from 52.168.48.111 port 50144:11: Bye Bye [........ ------------------------------	2019-10-04 20:29:13
49.233.47.47	attack	Port scan on 2 port(s): 1433 7002	2019-10-04 20:12:56
122.154.46.5	attackbotsspam	Invalid user lc from 122.154.46.5 port 41430	2019-10-04 20:10:57
80.55.175.172	attackbots	" "	2019-10-04 20:37:15
5.196.7.123	attackbots	Oct 4 14:25:45 eventyay sshd[21781]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.7.123 Oct 4 14:25:47 eventyay sshd[21781]: Failed password for invalid user Admin2012 from 5.196.7.123 port 45692 ssh2 Oct 4 14:29:38 eventyay sshd[21852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.196.7.123 ...	2019-10-04 20:38:59
197.48.32.116	attackbots	Chat Spam	2019-10-04 20:19:01
80.211.113.144	attackbotsspam	Oct 4 12:43:42 sauna sshd[132162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.113.144 Oct 4 12:43:44 sauna sshd[132162]: Failed password for invalid user P4SSW0RD@2019 from 80.211.113.144 port 37674 ssh2 ...	2019-10-04 20:03:49

Recently Reported IPs

101.206.232.134	59.58.57.176	49.71.151.151	46.211.151.119
159.178.214.165	42.117.213.59	182.235.19.67	242.2.254.91
150.136.183.246	97.14.103.43	37.98.170.175	191.250.62.46
199.189.166.158	212.223.142.68	184.142.153.206	36.7.26.71
147.20.57.215	158.156.218.115	130.156.56.218	57.95.205.164