116.202.114.140

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.202.114.112	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-15 18:16:28
116.202.114.112	attackspambots	116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-06-10 02:04:15

Type

Details

Datetime

116.202.114.112

attackspam

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

2020-06-15 18:16:28

116.202.114.112

attackspambots

116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

2020-06-10 02:04:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.202.114.140
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 24694
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.202.114.140.		IN	A

;; AUTHORITY SECTION:
.			30	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2025013100 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 31 21:10:24 CST 2025
;; MSG SIZE  rcvd: 108

Host info

140.114.202.116.in-addr.arpa domain name pointer static.140.114.202.116.clients.your-server.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
140.114.202.116.in-addr.arpa	name = static.140.114.202.116.clients.your-server.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.31.136	attack	2019-09-20T06:12:41.707286enmeeting.mahidol.ac.th sshd\[5786\]: User root from 222.186.31.136 not allowed because not listed in AllowUsers 2019-09-20T06:12:42.078594enmeeting.mahidol.ac.th sshd\[5786\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.31.136 user=root 2019-09-20T06:12:44.144593enmeeting.mahidol.ac.th sshd\[5786\]: Failed password for invalid user root from 222.186.31.136 port 35058 ssh2 ...	2019-09-20 07:19:50
172.105.4.63	attackbots	Port scan: Attack repeated for 24 hours	2019-09-20 06:57:57
193.46.63.136	attackspambots	firewall-block, port(s): 37778/tcp	2019-09-20 07:16:51
37.187.79.55	attackbotsspam	Sep 20 00:54:18 nextcloud sshd\[3611\]: Invalid user wakaski from 37.187.79.55 Sep 20 00:54:18 nextcloud sshd\[3611\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.187.79.55 Sep 20 00:54:20 nextcloud sshd\[3611\]: Failed password for invalid user wakaski from 37.187.79.55 port 41211 ssh2 ...	2019-09-20 07:29:25
222.188.75.151	attack	Sep 19 22:31:08 www sshd\[35047\]: Invalid user admin from 222.188.75.151Sep 19 22:31:09 www sshd\[35047\]: Failed password for invalid user admin from 222.188.75.151 port 32553 ssh2Sep 19 22:31:12 www sshd\[35047\]: Failed password for invalid user admin from 222.188.75.151 port 32553 ssh2 ...	2019-09-20 07:15:58
104.248.30.249	attackspam	Automatic report - Banned IP Access	2019-09-20 06:58:10
45.112.252.209	attack	Unauthorized connection attempt from IP address 45.112.252.209 on Port 445(SMB)	2019-09-20 07:30:17
51.38.49.140	attackspam	Sep 20 00:51:59 localhost sshd\[12257\]: Invalid user sunsun from 51.38.49.140 port 45690 Sep 20 00:51:59 localhost sshd\[12257\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.49.140 Sep 20 00:52:02 localhost sshd\[12257\]: Failed password for invalid user sunsun from 51.38.49.140 port 45690 ssh2	2019-09-20 06:58:56
157.230.7.0	attack	Sep 19 23:32:44 cp sshd[32203]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=157.230.7.0	2019-09-20 07:32:32
86.104.220.248	attackspam	Sep 19 23:07:07 game-panel sshd[12373]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.220.248 Sep 19 23:07:09 game-panel sshd[12373]: Failed password for invalid user modifications from 86.104.220.248 port 34764 ssh2 Sep 19 23:11:29 game-panel sshd[12579]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=86.104.220.248	2019-09-20 07:39:39
80.82.78.85	attack	Sep 20 00:41:32 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:41:43 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 6 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:41:59 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 10 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\<8EG9qO+SSEZQUk5V\> Sep 20 00:44:04 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN, rip=80.82.78.85, lip=176.9.177.164, session=\ Sep 20 00:46:29 relay dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 2 secs$: user=\, method=PLAIN ...	2019-09-20 07:12:35
40.78.100.11	attackbots	Sep 20 01:34:14 dev0-dcfr-rnet sshd[3508]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.78.100.11 Sep 20 01:34:17 dev0-dcfr-rnet sshd[3508]: Failed password for invalid user velocity from 40.78.100.11 port 40000 ssh2 Sep 20 01:38:32 dev0-dcfr-rnet sshd[3529]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.78.100.11	2019-09-20 07:40:48
181.143.249.50	attack	Unauthorized connection attempt from IP address 181.143.249.50 on Port 445(SMB)	2019-09-20 07:10:50
59.63.188.56	attack	$f2bV_matches	2019-09-20 07:03:11
209.17.96.26	attackspambots	port scan and connect, tcp 111 (rpcbind)	2019-09-20 07:38:53

Recently Reported IPs

83.168.176.95	18.165.211.205	126.193.103.220	212.146.208.96
139.80.132.91	204.31.26.191	161.8.108.101	190.144.233.165
16.0.177.20	177.201.180.168	228.128.95.102	246.216.200.202
34.199.193.35	93.211.65.156	116.177.85.33	116.4.133.170
186.104.33.114	163.249.9.119	194.217.185.108	38.71.204.231