116.202.1.138 - IPInfo

Basic Info

City: Falkenstein

Region: Sachsen

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.202.128.29	attack	116.202.128.29 - - [05/Aug/2020:16:07:44 +0100] "POST /wp-login.php HTTP/1.1" 200 2348 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.202.128.29 - - [05/Aug/2020:16:07:45 +0100] "POST /xmlrpc.php HTTP/1.1" 200 247 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.202.128.29 - - [05/Aug/2020:16:13:21 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-08-06 00:33:50
116.202.102.8	attackbotsspam	Jul 4 14:27:03 eventyay sshd[31855]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.102.8 Jul 4 14:27:05 eventyay sshd[31855]: Failed password for invalid user z from 116.202.102.8 port 57276 ssh2 Jul 4 14:30:13 eventyay sshd[31971]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.102.8 ...	2020-07-04 20:32:50
116.202.114.112	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-15 18:16:28
116.202.114.112	attackspambots	116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-06-10 02:04:15
116.202.183.143	attackspambots	Bad mail behaviour	2020-05-30 14:16:23
116.202.111.84	attackbots	116.202.111.84 - - \[08/May/2020:10:08:22 +0200\] "POST /wp-login.php HTTP/1.0" 200 5932 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.111.84 - - \[08/May/2020:10:08:23 +0200\] "POST /wp-login.php HTTP/1.0" 200 5745 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.111.84 - - \[08/May/2020:10:08:24 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-08 18:00:39
116.202.111.84	attackbots	116.202.111.84 - - \[08/May/2020:02:37:37 +0200\] "POST /wp-login.php HTTP/1.0" 200 12425 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.111.84 - - \[08/May/2020:02:37:38 +0200\] "POST /wp-login.php HTTP/1.0" 200 7318 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.111.84 - - \[08/May/2020:02:37:39 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 802 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-05-08 08:41:45
116.202.196.24	attack	116.202.196.24 - - [02/Apr/2020:15:08:02 +0200] "GET /wp-login.php HTTP/1.1" 200 5688 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.202.196.24 - - [02/Apr/2020:15:08:03 +0200] "POST /wp-login.php HTTP/1.1" 200 6587 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 116.202.196.24 - - [02/Apr/2020:15:08:04 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-04-02 23:39:51
116.202.181.27	attackspambots	Bitcoin scammer	2020-04-01 04:59:35
116.202.117.187	attack	Fail2Ban Ban Triggered	2020-03-24 04:35:16
116.202.155.140	attack	Wordpress attack	2020-03-18 01:55:21
116.202.112.170	attackspam	TOR exit server, open proxy.	2020-02-18 06:47:11
116.202.12.135	attack	Jan 22 07:40:32 www_kotimaassa_fi sshd[24374]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.202.12.135 Jan 22 07:40:34 www_kotimaassa_fi sshd[24374]: Failed password for invalid user ftpadmin from 116.202.12.135 port 41934 ssh2 ...	2020-01-22 15:42:37
116.202.117.187	attackbots	Fake Googlebot	2019-12-24 06:26:03
116.202.115.84	attackspambots	xmlrpc attack	2019-12-06 10:01:03

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.202.1.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29648
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.202.1.138.			IN	A

;; AUTHORITY SECTION:
.			225	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024011500 1800 900 604800 86400

;; Query time: 99 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 16 01:01:16 CST 2024
;; MSG SIZE  rcvd: 106

Host info

138.1.202.116.in-addr.arpa domain name pointer static.138.1.202.116.clients.your-server.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
138.1.202.116.in-addr.arpa	name = static.138.1.202.116.clients.your-server.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
182.59.233.225	attackbotsspam	Unauthorized connection attempt from IP address 182.59.233.225 on Port 445(SMB)	2020-02-06 23:07:46
77.247.110.39	attackspam	[2020-02-06 09:08:43] NOTICE[1148] chan_sip.c: Registration from '"222" ' failed for '77.247.110.39:5787' - Wrong password [2020-02-06 09:08:43] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:08:43.437-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222",SessionID="0x7fd82c2bd8a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.39/5787",Challenge="2b3ac8b0",ReceivedChallenge="2b3ac8b0",ReceivedHash="65e7bd2ffe63ed55a23d6f3deb0b2271" [2020-02-06 09:08:43] NOTICE[1148] chan_sip.c: Registration from '"222" ' failed for '77.247.110.39:5787' - Wrong password [2020-02-06 09:08:43] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-06T09:08:43.552-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222",SessionID="0x7fd82c307128",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.1 ...	2020-02-06 22:26:29
162.243.110.205	attack	C1,WP GET /manga/wp-login.php	2020-02-06 23:09:31
206.189.157.33	attackspambots	ENG,WP GET /wp-login.php	2020-02-06 23:11:24
185.150.235.34	attackbotsspam	Feb 6 15:29:51 silence02 sshd[26286]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.150.235.34 Feb 6 15:29:53 silence02 sshd[26286]: Failed password for invalid user clm from 185.150.235.34 port 60258 ssh2 Feb 6 15:33:10 silence02 sshd[26573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.150.235.34	2020-02-06 22:46:30
201.221.155.182	attackspam	port scan and connect, tcp 1433 (ms-sql-s)	2020-02-06 22:54:51
85.175.100.14	attackbots	Unauthorized connection attempt from IP address 85.175.100.14 on Port 445(SMB)	2020-02-06 22:49:33
177.17.174.243	attackspam	Unauthorized connection attempt from IP address 177.17.174.243 on Port 445(SMB)	2020-02-06 22:52:55
141.98.10.137	attack	Rude login attack (4 tries in 1d)	2020-02-06 22:30:44
81.218.126.102	attackspambots	Unauthorized connection attempt from IP address 81.218.126.102 on Port 445(SMB)	2020-02-06 22:33:57
190.205.111.139	attack	Unauthorized connection attempt from IP address 190.205.111.139 on Port 445(SMB)	2020-02-06 22:40:53
185.175.93.101	attackspam	firewall-block, port(s): 5904/tcp, 5906/tcp, 5907/tcp, 5908/tcp, 5914/tcp, 5916/tcp, 5919/tcp	2020-02-06 23:03:00
3.13.170.121	attack	C1,DEF GET /wp-login.php	2020-02-06 23:13:36
51.161.12.231	attackspam	Port 8545 (Ethereum client) access denied	2020-02-06 22:53:50
200.7.126.189	attackbotsspam	Unauthorized connection attempt from IP address 200.7.126.189 on Port 445(SMB)	2020-02-06 22:57:53

Recently Reported IPs

78.46.243.101	95.216.223.204	128.140.40.61	128.199.175.237
2.178.107.161	104.237.198.145	42.158.30.206	107.158.144.14
20.96.200.41	249.55.122.76	183.45.78.198	173.222.162.133
111.63.253.219	8.2.151.83	220.127.217.209	182.1.202.179
47.89.137.154	228.84.1.9	170.65.245.67	163.47.10.165