116.202.114.216

Basic Info

City: unknown

Region: unknown

Country: Germany

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.202.114.112	attackspam	"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:	2020-06-15 18:16:28
116.202.114.112	attackspambots	116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-06-10 02:04:15

Type

Details

Datetime

116.202.114.112

attackspam

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

2020-06-15 18:16:28

116.202.114.112

attackspambots

116.202.114.112 - - \[09/Jun/2020:16:42:15 +0200\] "POST /wp-login.php HTTP/1.0" 200 5508 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /wp-login.php HTTP/1.0" 200 5345 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
116.202.114.112 - - \[09/Jun/2020:16:42:17 +0200\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

2020-06-10 02:04:15

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.202.114.216
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64463
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.202.114.216.		IN	A

;; AUTHORITY SECTION:
.			551	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 105 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:47:41 CST 2022
;; MSG SIZE  rcvd: 108

Host info

216.114.202.116.in-addr.arpa domain name pointer static.216.114.202.116.clients.your-server.de.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
216.114.202.116.in-addr.arpa	name = static.216.114.202.116.clients.your-server.de.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
73.249.237.5	attack	Unauthorized connection attempt detected from IP address 73.249.237.5 to port 2220 [J]	2020-02-03 21:52:24
37.145.216.185	attack	Automatic report - Port Scan Attack	2020-02-03 21:38:09
175.101.93.4	attack	Feb 3 14:30:04 grey postfix/smtpd\[18785\]: NOQUEUE: reject: RCPT from unknown\[175.101.93.4\]: 554 5.7.1 Service unavailable\; Client host \[175.101.93.4\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[175.101.93.4\]\; from=\ to=\ proto=ESMTP helo=\<\[175.101.93.4\]\> ...	2020-02-03 21:35:44
51.38.214.114	attack	SSH_scan	2020-02-03 21:42:52
222.186.30.35	attackspambots	Feb 3 15:08:01 localhost sshd\[29809\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.35 user=root Feb 3 15:08:03 localhost sshd\[29809\]: Failed password for root from 222.186.30.35 port 18277 ssh2 Feb 3 15:08:05 localhost sshd\[29809\]: Failed password for root from 222.186.30.35 port 18277 ssh2	2020-02-03 22:14:13
154.70.208.66	attack	Unauthorized connection attempt detected from IP address 154.70.208.66 to port 2220 [J]	2020-02-03 21:55:57
178.17.24.162	attackbots	Feb 3 14:29:47 grey postfix/smtpd\[17376\]: NOQUEUE: reject: RCPT from unknown\[178.17.24.162\]: 554 5.7.1 Service unavailable\; Client host \[178.17.24.162\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[178.17.24.162\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-03 22:02:52
41.143.8.81	attackspambots	Time: Mon Feb 3 10:27:12 2020 -0300 IP: 41.143.8.81 (MA/Morocco/-) Failures: 5 (mod_security) Interval: 3600 seconds Blocked: Permanent Block	2020-02-03 21:39:41
73.124.236.66	attack	Unauthorized connection attempt detected from IP address 73.124.236.66 to port 2220 [J]	2020-02-03 22:06:28
158.69.226.175	attackspam	Feb 3 14:38:32 legacy sshd[10148]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.226.175 Feb 3 14:38:34 legacy sshd[10148]: Failed password for invalid user venus from 158.69.226.175 port 34845 ssh2 Feb 3 14:41:16 legacy sshd[10322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.226.175 ...	2020-02-03 21:49:29
37.139.24.190	attack	detected by Fail2Ban	2020-02-03 21:58:29
201.182.238.138	attackbotsspam	DATE:2020-02-03 14:29:57, IP:201.182.238.138, PORT:telnet - Telnet brute force auth on a honeypot server (epe-dc)	2020-02-03 21:50:12
37.49.226.111	attack	firewall-block, port(s): 2000/tcp	2020-02-03 21:46:12
112.85.42.195	attackbotsspam	Feb 3 14:29:38 163-172-32-151 sshd[19318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.195 user=root Feb 3 14:29:39 163-172-32-151 sshd[19318]: Failed password for root from 112.85.42.195 port 61058 ssh2 ...	2020-02-03 22:12:36
92.63.194.90	attack	Feb 3 14:29:32 localhost sshd\[26050\]: Invalid user admin from 92.63.194.90 port 40000 Feb 3 14:29:32 localhost sshd\[26050\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.90 Feb 3 14:29:35 localhost sshd\[26050\]: Failed password for invalid user admin from 92.63.194.90 port 40000 ssh2	2020-02-03 22:10:06

Recently Reported IPs

116.20.79.199	116.203.121.252	116.202.84.176	116.2.119.98
116.2.221.8	116.203.133.204	116.203.17.240	116.203.252.136
116.203.34.37	116.203.44.248	116.203.80.208	116.204.154.160
116.206.14.42	116.206.15.4	116.206.35.22	116.209.140.228
116.206.9.3	116.209.141.113	116.21.15.5	116.206.149.62