Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Beijing Jingdong 360 Degree E-Commerce Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Commercial

Comments:
Type Details Datetime
attackbotsspam
$f2bV_matches
2020-05-04 12:50:36
attackspambots
Apr 11 02:09:20 web1 sshd\[6888\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104  user=root
Apr 11 02:09:22 web1 sshd\[6888\]: Failed password for root from 116.196.80.104 port 44488 ssh2
Apr 11 02:12:31 web1 sshd\[7249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104  user=root
Apr 11 02:12:33 web1 sshd\[7249\]: Failed password for root from 116.196.80.104 port 41464 ssh2
Apr 11 02:15:36 web1 sshd\[7591\]: Invalid user canna from 116.196.80.104
Apr 11 02:15:36 web1 sshd\[7591\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
2020-04-12 01:39:04
attackspambots
2020-03-17 11:59:29 server sshd[96705]: Failed password for invalid user root from 116.196.80.104 port 58630 ssh2
2020-03-19 03:11:05
attack
SSH Bruteforce attempt
2020-02-10 07:53:21
attackspambots
Unauthorized connection attempt detected from IP address 116.196.80.104 to port 2220 [J]
2020-02-04 19:34:05
attackspambots
Unauthorized connection attempt detected from IP address 116.196.80.104 to port 2220 [J]
2020-01-25 00:42:20
attackbots
Unauthorized connection attempt detected from IP address 116.196.80.104 to port 2220 [J]
2020-01-04 23:57:36
attackbots
Invalid user krishan from 116.196.80.104 port 33116
2020-01-01 05:51:24
attackbotsspam
Dec 24 05:54:00 lnxweb61 sshd[4590]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
2019-12-24 13:54:44
attackspam
Dec 13 15:18:27 sauna sshd[29198]: Failed password for root from 116.196.80.104 port 37710 ssh2
...
2019-12-13 21:27:10
attack
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-09 23:18:57
attack
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-09 14:53:12
attack
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-09 07:17:02
attack
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-09 01:29:51
attackspam
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-08 15:18:42
attackspambots
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-08 09:22:39
attackbotsspam
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-07 15:42:44
attack
Dec  6 23:03:54 mail sshd[1431]: Failed password for root from 116.196.80.104 port 47674 ssh2
Dec  6 23:11:08 mail sshd[3259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104 
Dec  6 23:11:10 mail sshd[3259]: Failed password for invalid user awhite from 116.196.80.104 port 48976 ssh2
2019-12-07 13:28:20
attackbotsspam
Nov 16 17:32:58 Invalid user nen from 116.196.80.104 port 51026
2019-11-17 04:16:32
attackbotsspam
Nov  5 18:31:43 localhost sshd\[10360\]: Invalid user com from 116.196.80.104 port 50618
Nov  5 18:31:43 localhost sshd\[10360\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Nov  5 18:31:44 localhost sshd\[10360\]: Failed password for invalid user com from 116.196.80.104 port 50618 ssh2
Nov  5 18:35:22 localhost sshd\[10471\]: Invalid user testtest123 from 116.196.80.104 port 56066
Nov  5 18:35:22 localhost sshd\[10471\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
...
2019-11-06 02:51:51
attackbotsspam
2019-11-05 03:29:52,977 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 116.196.80.104
2019-11-05 04:03:46,628 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 116.196.80.104
2019-11-05 04:41:47,270 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 116.196.80.104
2019-11-05 05:16:12,717 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 116.196.80.104
2019-11-05 05:52:43,102 fail2ban.actions        \[14488\]: NOTICE  \[sshd\] Ban 116.196.80.104
...
2019-11-05 14:19:56
attackbots
Nov  3 08:54:38 hosting sshd[7897]: Invalid user student2 from 116.196.80.104 port 49174
...
2019-11-03 15:01:19
attackspambots
Automatic report - Banned IP Access
2019-10-26 23:23:39
attackspam
2019-10-26T03:47:44.619880abusebot-4.cloudsearch.cf sshd\[9836\]: Invalid user ack from 116.196.80.104 port 34634
2019-10-26 16:53:24
attack
2019-10-21T08:12:35.411595abusebot-7.cloudsearch.cf sshd\[28831\]: Invalid user mt from 116.196.80.104 port 53968
2019-10-21 16:22:50
attackbotsspam
Oct 14 17:47:36 markkoudstaal sshd[16332]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Oct 14 17:47:38 markkoudstaal sshd[16332]: Failed password for invalid user oracle from 116.196.80.104 port 46662 ssh2
Oct 14 17:53:24 markkoudstaal sshd[16800]: Failed password for root from 116.196.80.104 port 56452 ssh2
2019-10-15 00:20:56
attackspam
Oct  6 07:10:13 sauna sshd[188793]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Oct  6 07:10:16 sauna sshd[188793]: Failed password for invalid user abc@2018 from 116.196.80.104 port 47728 ssh2
...
2019-10-06 12:33:15
attackbots
Sep 20 06:33:32 microserver sshd[13298]: Invalid user postgres from 116.196.80.104 port 56310
Sep 20 06:33:32 microserver sshd[13298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Sep 20 06:33:34 microserver sshd[13298]: Failed password for invalid user postgres from 116.196.80.104 port 56310 ssh2
Sep 20 06:38:04 microserver sshd[13958]: Invalid user upload from 116.196.80.104 port 40338
Sep 20 06:38:04 microserver sshd[13958]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Sep 20 06:51:30 microserver sshd[15903]: Invalid user system from 116.196.80.104 port 48852
Sep 20 06:51:30 microserver sshd[15903]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
Sep 20 06:51:32 microserver sshd[15903]: Failed password for invalid user system from 116.196.80.104 port 48852 ssh2
Sep 20 06:56:14 microserver sshd[16590]: Invalid user msimon from 116.196.80.1
2019-10-05 05:24:52
attackspambots
2019-10-02T01:15:03.426430shield sshd\[25778\]: Invalid user gy from 116.196.80.104 port 40938
2019-10-02T01:15:03.431199shield sshd\[25778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
2019-10-02T01:15:04.675933shield sshd\[25778\]: Failed password for invalid user gy from 116.196.80.104 port 40938 ssh2
2019-10-02T01:18:35.488910shield sshd\[26172\]: Invalid user asael from 116.196.80.104 port 43888
2019-10-02T01:18:35.493197shield sshd\[26172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.104
2019-10-02 09:29:58
attackspam
2019-09-29T05:29:24.903168abusebot-2.cloudsearch.cf sshd\[6981\]: Invalid user george from 116.196.80.104 port 36498
2019-09-29 14:03:52
Comments on same subnet:
IP Type Details Datetime
116.196.80.119 attackspam
Apr 18 11:29:54 marvibiene sshd[34039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.196.80.119  user=root
Apr 18 11:29:56 marvibiene sshd[34039]: Failed password for root from 116.196.80.119 port 47338 ssh2
Apr 18 11:59:51 marvibiene sshd[34461]: Invalid user test from 116.196.80.119 port 48786
...
2020-04-19 00:54:14
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.196.80.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63719
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.196.80.104.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082601 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 27 10:37:37 CST 2019
;; MSG SIZE  rcvd: 118
Host info
Host 104.80.196.116.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 104.80.196.116.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
51.77.140.244 attackbotsspam
Automatic report - Banned IP Access
2019-11-03 06:07:19
92.100.84.70 attackspambots
IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/92.100.84.70/ 
 
 RU - 1H : (172)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : RU 
 NAME ASN : ASN12389 
 
 IP : 92.100.84.70 
 
 CIDR : 92.100.64.0/19 
 
 PREFIX COUNT : 2741 
 
 UNIQUE IP COUNT : 8699648 
 
 
 ATTACKS DETECTED ASN12389 :  
  1H - 4 
  3H - 11 
  6H - 21 
 12H - 44 
 24H - 84 
 
 DateTime : 2019-11-02 21:50:30 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery
2019-11-03 05:50:07
193.111.77.230 attackspambots
SASL Brute Force
2019-11-03 06:22:09
84.255.152.10 attackbotsspam
Nov  2 21:34:04 vps666546 sshd\[14701\]: Invalid user ubuntu from 84.255.152.10 port 63399
Nov  2 21:34:04 vps666546 sshd\[14701\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.255.152.10
Nov  2 21:34:07 vps666546 sshd\[14701\]: Failed password for invalid user ubuntu from 84.255.152.10 port 63399 ssh2
Nov  2 21:41:40 vps666546 sshd\[15010\]: Invalid user sc from 84.255.152.10 port 57449
Nov  2 21:41:40 vps666546 sshd\[15010\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.255.152.10
...
2019-11-03 05:47:24
173.255.234.194 attackbotsspam
" "
2019-11-03 06:01:33
222.186.175.220 attack
Triggered by Fail2Ban at Ares web server
2019-11-03 06:10:36
122.154.225.202 attackbots
Nov  2 21:28:15 ms-srv sshd[18264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.154.225.202  user=root
Nov  2 21:28:16 ms-srv sshd[18264]: Failed password for invalid user root from 122.154.225.202 port 45958 ssh2
2019-11-03 06:09:39
104.129.191.242 attackspambots
3389BruteforceFW21
2019-11-03 05:55:22
167.71.14.11 attack
wp bruteforce
2019-11-03 05:52:18
120.36.2.217 attackspam
Nov  2 22:27:29 dedicated sshd[21322]: Invalid user ann from 120.36.2.217 port 48935
2019-11-03 05:44:00
222.186.169.194 attackbots
Nov  2 22:43:56 meumeu sshd[14139]: Failed password for root from 222.186.169.194 port 15796 ssh2
Nov  2 22:44:11 meumeu sshd[14139]: error: maximum authentication attempts exceeded for root from 222.186.169.194 port 15796 ssh2 [preauth]
Nov  2 22:44:17 meumeu sshd[14193]: Failed password for root from 222.186.169.194 port 29938 ssh2
...
2019-11-03 05:49:03
202.39.64.122 attackspam
abuseConfidenceScore blocked for 12h
2019-11-03 06:16:39
196.45.48.48 attack
Automatic report - XMLRPC Attack
2019-11-03 05:53:29
14.187.62.118 attackspam
Nov  2 16:18:09 web1 postfix/smtpd[30994]: warning: unknown[14.187.62.118]: SASL PLAIN authentication failed: authentication failure
...
2019-11-03 06:08:19
223.247.129.84 attackspam
Oct 29 16:49:12 zulu1842 sshd[3298]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84  user=r.r
Oct 29 16:49:13 zulu1842 sshd[3298]: Failed password for r.r from 223.247.129.84 port 37056 ssh2
Oct 29 16:49:14 zulu1842 sshd[3298]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth]
Oct 29 17:07:20 zulu1842 sshd[4183]: Invalid user wc from 223.247.129.84
Oct 29 17:07:20 zulu1842 sshd[4183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84 
Oct 29 17:07:22 zulu1842 sshd[4183]: Failed password for invalid user wc from 223.247.129.84 port 46836 ssh2
Oct 29 17:07:22 zulu1842 sshd[4183]: Received disconnect from 223.247.129.84: 11: Bye Bye [preauth]
Oct 29 17:12:45 zulu1842 sshd[4525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.247.129.84  user=r.r
Oct 29 17:12:47 zulu1842 sshd[4525]: Failed password for r.r fro........
-------------------------------
2019-11-03 06:18:41

Recently Reported IPs

130.61.27.145 120.51.167.0 107.170.209.246 163.112.58.52
17.192.115.249 139.119.163.141 178.46.128.103 9.252.145.169
235.21.149.78 192.247.255.118 156.7.126.110 243.194.233.192
238.171.99.82 46.183.222.117 124.154.99.56 233.125.183.224
58.140.229.218 1.235.40.213 43.176.227.230 224.253.140.27