116.21.1.148 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.21.124.109	attackspambots	Port Scan ...	2020-09-17 01:14:41
116.21.124.109	attack	Port Scan ...	2020-09-16 17:30:36
116.21.136.38	attackspambots	Fail2Ban Ban Triggered	2020-08-21 17:15:59
116.21.128.188	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-03 07:18:31
116.21.172.193	attack	Unauthorized connection attempt detected from IP address 116.21.172.193 to port 23	2020-05-30 01:23:12
116.21.146.5	attackspambots	Automatic report - Port Scan Attack	2020-05-25 01:43:49
116.21.125.72	attackspam	Unauthorized connection attempt detected from IP address 116.21.125.72 to port 8089 [T]	2020-04-01 05:20:10
116.21.1.8	attack	Unauthorized connection attempt detected from IP address 116.21.1.8 to port 23 [J]	2020-02-29 18:34:29
116.21.180.172	attackbotsspam	Feb 5 18:50:32 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:50:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\> Feb 5 18:50:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:33 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=116.21.180.17 ...	2020-02-06 03:33:31
116.21.175.240	attackspam	Sep 17 17:09:43 mxgate1 postfix/postscreen[20426]: CONNECT from [116.21.175.240]:43322 to [176.31.12.44]:25 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20427]: addr 116.21.175.240 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20428]: addr 116.21.175.240 listed by domain bl.spamcop.net as 127.0.0.2 Sep 17 17:09:49 mxgate1 postfix/postscreen[20426]: DNSBL rank 4 for [116.21.175.240]:43322 Sep x@x Sep 17 17:09:50 mxgate1 postfix/postscreen[20426]: DISCONNECT [116.21.175.240]:43322 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.21.175.240	2019-09-17 23:25:48
116.21.127.96	attackbotsspam	port 23 attempt blocked	2019-09-14 23:07:41
116.21.132.6	attackbots	Sep 2 12:01:22 wp sshd[26875]: Invalid user gpq from 116.21.132.6 Sep 2 12:01:22 wp sshd[26875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:01:25 wp sshd[26875]: Failed password for invalid user gpq from 116.21.132.6 port 11204 ssh2 Sep 2 12:01:25 wp sshd[26875]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:03:20 wp sshd[26891]: Invalid user stas from 116.21.132.6 Sep 2 12:03:20 wp sshd[26891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:03:22 wp sshd[26891]: Failed password for invalid user stas from 116.21.132.6 port 10720 ssh2 Sep 2 12:03:22 wp sshd[26891]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:05:17 wp sshd[26914]: Invalid user admin from 116.21.132.6 Sep 2 12:05:17 wp sshd[26914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ -------------------------------	2019-09-03 15:30:19
116.21.133.180	attackbots	Aug 31 14:46:17 plex sshd[16050]: Invalid user nbsuser from 116.21.133.180 port 32038	2019-08-31 21:07:43
116.21.133.180	attackspambots	Aug 30 17:54:21 fv15 sshd[30006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 17:54:23 fv15 sshd[30006]: Failed password for r.r from 116.21.133.180 port 33154 ssh2 Aug 30 17:54:23 fv15 sshd[30006]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:18:06 fv15 sshd[26471]: Failed password for invalid user ftpuser from 116.21.133.180 port 32916 ssh2 Aug 30 18:18:06 fv15 sshd[26471]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:24:32 fv15 sshd[9809]: Failed password for invalid user dekahostname from 116.21.133.180 port 30796 ssh2 Aug 30 18:24:32 fv15 sshd[9809]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:30:58 fv15 sshd[24495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 18:31:00 fv15 sshd[24495]: Failed password for r.r from 116.21.133.180 po........ -------------------------------	2019-08-31 06:24:53
116.21.127.110	attackspam	Telnet Server BruteForce Attack	2019-07-31 22:57:00

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.21.1.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37122
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.21.1.148.			IN	A

;; AUTHORITY SECTION:
.			215	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 128 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 04:56:16 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 148.1.21.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.1.21.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
178.62.36.116	attackbots	" "	2020-05-24 02:12:54
106.246.250.202	attack	May 24 00:27:34 web1 sshd[29834]: Invalid user ecr from 106.246.250.202 port 22179 May 24 00:27:34 web1 sshd[29834]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 May 24 00:27:34 web1 sshd[29834]: Invalid user ecr from 106.246.250.202 port 22179 May 24 00:27:37 web1 sshd[29834]: Failed password for invalid user ecr from 106.246.250.202 port 22179 ssh2 May 24 00:34:56 web1 sshd[31620]: Invalid user rok from 106.246.250.202 port 53936 May 24 00:34:56 web1 sshd[31620]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.246.250.202 May 24 00:34:56 web1 sshd[31620]: Invalid user rok from 106.246.250.202 port 53936 May 24 00:34:58 web1 sshd[31620]: Failed password for invalid user rok from 106.246.250.202 port 53936 ssh2 May 24 00:37:06 web1 sshd[32179]: Invalid user dyk from 106.246.250.202 port 31839 ...	2020-05-24 02:28:02
5.182.210.16	attackspambots	Port scan: Attack repeated for 24 hours	2020-05-24 02:07:12
122.165.119.171	attackbots	May 23 20:17:21 mail sshd[2023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.165.119.171 May 23 20:17:23 mail sshd[2023]: Failed password for invalid user afe from 122.165.119.171 port 51964 ssh2 ...	2020-05-24 02:21:58
119.195.197.187	attackspambots	Invalid user pi from 119.195.197.187 port 65360	2020-05-24 02:23:53
51.38.51.200	attackbots	May 23 19:22:00 inter-technics sshd[2056]: Invalid user eav from 51.38.51.200 port 37706 May 23 19:22:00 inter-technics sshd[2056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.51.200 May 23 19:22:00 inter-technics sshd[2056]: Invalid user eav from 51.38.51.200 port 37706 May 23 19:22:03 inter-technics sshd[2056]: Failed password for invalid user eav from 51.38.51.200 port 37706 ssh2 May 23 19:25:30 inter-technics sshd[2336]: Invalid user ash from 51.38.51.200 port 42418 ...	2020-05-24 02:04:11
152.136.213.72	attackbotsspam	May 23 19:44:07 ns3164893 sshd[11317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.213.72 May 23 19:44:09 ns3164893 sshd[11317]: Failed password for invalid user frn from 152.136.213.72 port 55084 ssh2 ...	2020-05-24 02:17:58
139.199.32.57	attackbotsspam	Invalid user lah from 139.199.32.57 port 42814	2020-05-24 02:19:24
118.145.8.50	attackspam	May 23 18:33:32 roki sshd[29957]: Invalid user dmx from 118.145.8.50 May 23 18:33:32 roki sshd[29957]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 May 23 18:33:34 roki sshd[29957]: Failed password for invalid user dmx from 118.145.8.50 port 41761 ssh2 May 23 18:45:04 roki sshd[30772]: Invalid user eng from 118.145.8.50 May 23 18:45:04 roki sshd[30772]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.145.8.50 ...	2020-05-24 02:24:47
37.187.100.50	attackspambots	SSH Brute Force	2020-05-24 02:37:55
148.70.31.188	attack	Invalid user euk from 148.70.31.188 port 57766	2020-05-24 02:18:10
83.24.209.212	attackbotsspam	Invalid user rfv from 83.24.209.212 port 57152	2020-05-24 02:01:05
36.133.14.249	attackspambots	Invalid user ajb from 36.133.14.249 port 59108	2020-05-24 02:04:41
211.171.72.149	attack	Invalid user hxhtxftp from 211.171.72.149 port 58775	2020-05-24 02:09:25
167.71.254.95	attackbots	SSH/22 MH Probe, BF, Hack -	2020-05-24 02:15:19

Recently Reported IPs

116.21.1.147	116.21.1.48	116.21.120.198	116.21.120.208
116.21.120.84	116.21.121.120	116.21.121.181	116.21.122.133
116.21.122.171	116.21.122.175	116.21.122.184	116.96.90.252
116.21.122.2	116.21.122.214	116.21.122.235	116.21.122.236
116.21.122.55	116.21.122.74	116.96.91.55	116.96.95.69