116.214.59.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Shenzhen Nova Technologies Development. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Feb 25 00:03:24 host sshd[18804]: User r.r from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups Feb 25 00:03:24 host sshd[18804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13 user=r.r Feb 25 00:03:26 host sshd[18804]: Failed password for invalid user r.r from 116.214.59.13 port 60362 ssh2 Feb 25 00:03:26 host sshd[18804]: Received disconnect from 116.214.59.13 port 60362:11: Bye Bye [preauth] Feb 25 00:03:26 host sshd[18804]: Disconnected from invalid user r.r 116.214.59.13 port 60362 [preauth] Feb 25 00:07:03 host sshd[18876]: User lp from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups Feb 25 00:07:03 host sshd[18876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13 user=lp Feb 25 00:07:05 host sshd[18876]: Failed password for invalid user lp from 116.214.59.13 port 35340 ssh2 Feb 25 00:07:........ -------------------------------	2020-02-25 09:32:22

Type

Details

Datetime

attackspam

Feb 25 00:03:24 host sshd[18804]: User r.r from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups
Feb 25 00:03:24 host sshd[18804]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13  user=r.r
Feb 25 00:03:26 host sshd[18804]: Failed password for invalid user r.r from 116.214.59.13 port 60362 ssh2
Feb 25 00:03:26 host sshd[18804]: Received disconnect from 116.214.59.13 port 60362:11: Bye Bye [preauth]
Feb 25 00:03:26 host sshd[18804]: Disconnected from invalid user r.r 116.214.59.13 port 60362 [preauth]
Feb 25 00:07:03 host sshd[18876]: User lp from 116.214.59.13 not allowed because none of user's groups are listed in AllowGroups
Feb 25 00:07:03 host sshd[18876]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.214.59.13  user=lp
Feb 25 00:07:05 host sshd[18876]: Failed password for invalid user lp from 116.214.59.13 port 35340 ssh2
Feb 25 00:07:........
-------------------------------

2020-02-25 09:32:22

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.214.59.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28603
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.214.59.13.			IN	A

;; AUTHORITY SECTION:
.			585	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022401 1800 900 604800 86400

;; Query time: 101 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 25 09:32:18 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 13.59.214.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 13.59.214.116.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.86.90.126	attackspam	May 31 15:09:54 scw-6657dc sshd[16543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.86.90.126 May 31 15:09:54 scw-6657dc sshd[16543]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.86.90.126 May 31 15:09:56 scw-6657dc sshd[16543]: Failed password for invalid user osm from 167.86.90.126 port 52588 ssh2 ...	2020-06-01 01:22:13
185.121.69.4	attackbotsspam	xmlrpc attack	2020-06-01 01:20:40
213.244.123.182	attackbotsspam	2020-05-31T14:08:19.474990+02:00 sshd[25433]: Failed password for root from 213.244.123.182 port 44407 ssh2	2020-06-01 01:39:13
77.42.83.15	attackspambots	Port probing on unauthorized port 23	2020-06-01 01:29:06
106.53.2.93	attackbots	May 28 01:46:30 clarabelen sshd[14382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.2.93 user=r.r May 28 01:46:32 clarabelen sshd[14382]: Failed password for r.r from 106.53.2.93 port 50418 ssh2 May 28 01:46:33 clarabelen sshd[14382]: Received disconnect from 106.53.2.93: 11: Bye Bye [preauth] May 28 01:57:22 clarabelen sshd[15009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.2.93 user=r.r May 28 01:57:24 clarabelen sshd[15009]: Failed password for r.r from 106.53.2.93 port 35914 ssh2 May 28 01:57:24 clarabelen sshd[15009]: Received disconnect from 106.53.2.93: 11: Bye Bye [preauth] May 28 02:00:47 clarabelen sshd[15222]: Invalid user kelly from 106.53.2.93 May 28 02:00:47 clarabelen sshd[15222]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.53.2.93 May 28 02:00:49 clarabelen sshd[15222]: Failed password for invalid user ........ -------------------------------	2020-06-01 01:40:02
189.27.15.218	attackspambots	Automatic report - Port Scan Attack	2020-06-01 01:23:56
51.158.98.224	attackbots	Invalid user vcsa from 51.158.98.224 port 37382	2020-06-01 01:14:36
5.188.206.18	attackspambots	Unauthorized connection attempt detected from IP address 5.188.206.18 to port 3391	2020-06-01 01:03:52
185.147.215.14	attackspambots	[2020-05-31 13:17:32] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:49624' - Wrong password [2020-05-31 13:17:32] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T13:17:32.027-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2943",SessionID="0x7f5f1039ca78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.215.14/49624",Challenge="0748ca65",ReceivedChallenge="0748ca65",ReceivedHash="a379fd4a5686d86b1911fbb56e4364de" [2020-05-31 13:18:03] NOTICE[1157] chan_sip.c: Registration from '' failed for '185.147.215.14:59361' - Wrong password [2020-05-31 13:18:03] SECURITY[1173] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-05-31T13:18:03.143-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2944",SessionID="0x7f5f10787a08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.147.21 ...	2020-06-01 01:29:38
112.30.117.22	attackbotsspam	May 31 16:12:46 cdc sshd[12528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.117.22 May 31 16:12:48 cdc sshd[12528]: Failed password for invalid user akash\r from 112.30.117.22 port 36530 ssh2	2020-06-01 01:28:02
5.253.114.125	attackbotsspam	Unauthorized connection attempt detected from IP address 5.253.114.125 to port 5900	2020-06-01 01:03:36
87.251.74.140	attack	May 31 19:26:18 debian-2gb-nbg1-2 kernel: \[13204754.087413\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=87.251.74.140 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=59368 PROTO=TCP SPT=44773 DPT=7238 WINDOW=1024 RES=0x00 SYN URGP=0	2020-06-01 01:38:44
150.136.220.58	attack	May 31 18:34:08 ajax sshd[12259]: Failed password for root from 150.136.220.58 port 60302 ssh2	2020-06-01 01:45:51
41.33.169.196	attackspam	Unauthorized connection attempt detected from IP address 41.33.169.196 to port 55961	2020-06-01 01:06:49
49.235.202.65	attackspam	2020-05-31T09:14:02.6525141495-001 sshd[48044]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.65 user=root 2020-05-31T09:14:04.5416621495-001 sshd[48044]: Failed password for root from 49.235.202.65 port 41534 ssh2 2020-05-31T09:18:15.4210141495-001 sshd[48147]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.65 user=root 2020-05-31T09:18:17.3752691495-001 sshd[48147]: Failed password for root from 49.235.202.65 port 56550 ssh2 2020-05-31T09:22:21.4729301495-001 sshd[48285]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.202.65 user=root 2020-05-31T09:22:22.8651381495-001 sshd[48285]: Failed password for root from 49.235.202.65 port 43332 ssh2 ...	2020-06-01 01:09:21

Recently Reported IPs

147.30.43.196	183.56.54.83	72.11.154.138	41.41.190.106
182.52.30.243	162.219.253.20	86.110.197.3	103.71.45.23
49.206.198.33	180.244.233.7	156.236.119.87	91.206.15.111
92.171.176.123	222.97.6.154	191.84.208.54	18.204.7.6
187.158.56.40	95.38.214.208	2.180.238.74	106.1.147.148