Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
116.196.104.139 attack
Jul 23 16:38:33 firewall sshd[12427]: Invalid user magento from 116.196.104.139
Jul 23 16:38:35 firewall sshd[12427]: Failed password for invalid user magento from 116.196.104.139 port 34822 ssh2
Jul 23 16:47:10 firewall sshd[12786]: Invalid user sonarqube from 116.196.104.139
...
2020-07-24 03:50:43
116.196.104.139 attack
Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564
Jul 23 07:59:27 home sshd[245496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.139 
Jul 23 07:59:27 home sshd[245496]: Invalid user chj from 116.196.104.139 port 52564
Jul 23 07:59:29 home sshd[245496]: Failed password for invalid user chj from 116.196.104.139 port 52564 ssh2
Jul 23 08:03:11 home sshd[245869]: Invalid user biadmin from 116.196.104.139 port 40674
...
2020-07-23 17:28:26
116.196.104.100 attack
Apr 24 02:32:08 ns392434 sshd[3795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100  user=root
Apr 24 02:32:10 ns392434 sshd[3795]: Failed password for root from 116.196.104.100 port 51480 ssh2
Apr 24 02:45:50 ns392434 sshd[4563]: Invalid user tom from 116.196.104.100 port 37663
Apr 24 02:45:50 ns392434 sshd[4563]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
Apr 24 02:45:50 ns392434 sshd[4563]: Invalid user tom from 116.196.104.100 port 37663
Apr 24 02:45:52 ns392434 sshd[4563]: Failed password for invalid user tom from 116.196.104.100 port 37663 ssh2
Apr 24 02:51:50 ns392434 sshd[4796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100  user=root
Apr 24 02:51:51 ns392434 sshd[4796]: Failed password for root from 116.196.104.100 port 39378 ssh2
Apr 24 02:57:41 ns392434 sshd[5017]: Invalid user iq from 116.196.104.100 port 41093
2020-04-26 19:42:02
116.196.104.100 attackspam
ssh brute force
2020-04-21 16:07:53
116.196.104.100 attackspambots
Apr 11 23:51:39 ny01 sshd[6780]: Failed password for root from 116.196.104.100 port 55187 ssh2
Apr 11 23:54:21 ny01 sshd[7109]: Failed password for root from 116.196.104.100 port 40913 ssh2
2020-04-12 13:32:12
116.196.104.100 attackbotsspam
Apr  2 07:57:16 vps647732 sshd[23093]: Failed password for root from 116.196.104.100 port 58428 ssh2
...
2020-04-02 14:50:22
116.196.104.100 attackspam
DATE:2020-03-30 07:59:07, IP:116.196.104.100, PORT:ssh SSH brute force auth (docker-dc)
2020-03-30 14:50:31
116.196.104.100 attackspambots
SSH login attempts.
2020-03-29 15:28:15
116.196.104.100 attack
Tried sshing with brute force.
2020-02-05 05:47:30
116.196.104.100 attackbots
Jan 21 17:38:35 hosting sshd[3536]: Invalid user check from 116.196.104.100 port 50512
...
2020-01-21 23:27:42
116.196.104.1 attackbots
SSH login attempts with user root at 2020-01-02.
2020-01-03 03:09:53
116.196.104.100 attack
Dec 27 08:28:39 silence02 sshd[13838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
Dec 27 08:28:41 silence02 sshd[13838]: Failed password for invalid user arlet from 116.196.104.100 port 52722 ssh2
Dec 27 08:33:48 silence02 sshd[13973]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
2019-12-27 15:38:48
116.196.104.100 attackspambots
2019-09-29T00:37:37.227314suse-nuc sshd[19942]: Invalid user webmaster from 116.196.104.100 port 47336
...
2019-11-30 02:32:54
116.196.104.100 attackspam
Nov 26 16:03:07 eventyay sshd[22645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
Nov 26 16:03:09 eventyay sshd[22645]: Failed password for invalid user P4sswort!234 from 116.196.104.100 port 41953 ssh2
Nov 26 16:11:12 eventyay sshd[22784]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
...
2019-11-26 23:24:03
116.196.104.100 attackbots
Nov 16 06:11:52 host sshd[30580]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.104.100
Nov 16 06:11:52 host sshd[30580]: Invalid user aclin from 116.196.104.100 port 41641
Nov 16 06:11:53 host sshd[30580]: Failed password for invalid user aclin from 116.196.104.100 port 41641 ssh2
...
2019-11-16 13:35:37
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.196.104.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48806
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.196.104.34.			IN	A

;; AUTHORITY SECTION:
.			399	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 18 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 17:43:26 CST 2022
;; MSG SIZE  rcvd: 107
Host info
Host 34.104.196.116.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 34.104.196.116.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
52.73.169.169 attack
firewall-block, port(s): 1900/udp
2020-09-30 19:40:22
150.158.181.16 attackbots
Bruteforce detected by fail2ban
2020-09-30 20:10:57
189.1.162.121 attackspambots
$f2bV_matches
2020-09-30 19:31:44
117.211.126.230 attackspam
$f2bV_matches
2020-09-30 19:33:43
54.240.48.101 attack
SpamScore above: 10.0
2020-09-30 19:26:55
5.188.84.242 attackbotsspam
fell into ViewStateTrap:vaduz
2020-09-30 19:24:50
192.99.168.9 attackbotsspam
Time:     Wed Sep 30 07:02:07 2020 00
IP:       192.99.168.9 (CA/Canada/9.ip-192-99-168.net)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep 30 06:51:50 -11 sshd[25067]: Invalid user tomcat from 192.99.168.9 port 37656
Sep 30 06:51:53 -11 sshd[25067]: Failed password for invalid user tomcat from 192.99.168.9 port 37656 ssh2
Sep 30 06:59:28 -11 sshd[25295]: Invalid user web1 from 192.99.168.9 port 43340
Sep 30 06:59:30 -11 sshd[25295]: Failed password for invalid user web1 from 192.99.168.9 port 43340 ssh2
Sep 30 07:02:05 -11 sshd[25443]: Failed password for root from 192.99.168.9 port 47550 ssh2
2020-09-30 19:28:36
119.29.182.185 attack
Unauthorized SSH login attempts
2020-09-30 20:17:27
14.244.141.129 attackspam
1601412073 - 09/29/2020 22:41:13 Host: 14.244.141.129/14.244.141.129 Port: 445 TCP Blocked
2020-09-30 20:15:01
49.233.54.212 attackbotsspam
Sep 30 12:48:52 server sshd[57157]: Failed password for invalid user git from 49.233.54.212 port 57834 ssh2
Sep 30 13:09:08 server sshd[61307]: Failed password for invalid user admin from 49.233.54.212 port 34452 ssh2
Sep 30 13:15:18 server sshd[62501]: Failed password for invalid user alexandra from 49.233.54.212 port 40212 ssh2
2020-09-30 20:12:52
197.35.169.54 attackbots
Telnetd brute force attack detected by fail2ban
2020-09-30 19:37:16
139.59.232.188 attackspambots
Invalid user jobs from 139.59.232.188 port 42489
2020-09-30 20:22:32
172.217.11.51 attack
http://28gw5c.4iipnb8lsy.ferivecationss.me/
paypal phishing
2020-09-30 19:26:22
109.94.125.102 attackbotsspam
Port probing on unauthorized port 8080
2020-09-30 19:25:20
138.68.5.192 attack
Invalid user steam from 138.68.5.192 port 54078
2020-09-30 20:24:23

Recently Reported IPs

118.99.86.143 118.99.86.149 116.196.106.18 116.196.108.12
116.196.125.51 116.196.91.172 118.99.87.98 118.99.88.101
118.99.87.9 118.99.88.112 118.99.88.106 118.99.88.119
118.99.88.102 118.99.88.116 118.99.87.96 118.99.88.107
118.99.88.120 118.99.87.87 118.99.88.124 118.99.88.147