116.228.52.148

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

No discussion about this subnet yet..

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.228.52.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15013
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.228.52.148.			IN	A

;; AUTHORITY SECTION:
.			201	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021702 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 10:40:38 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 148.52.228.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 148.52.228.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
159.89.194.103	attackbots	Sep 18 12:12:53 plex-server sshd[1402128]: Failed password for root from 159.89.194.103 port 47034 ssh2 Sep 18 12:16:24 plex-server sshd[1403644]: Invalid user gdm from 159.89.194.103 port 43056 Sep 18 12:16:24 plex-server sshd[1403644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.89.194.103 Sep 18 12:16:24 plex-server sshd[1403644]: Invalid user gdm from 159.89.194.103 port 43056 Sep 18 12:16:26 plex-server sshd[1403644]: Failed password for invalid user gdm from 159.89.194.103 port 43056 ssh2 ...	2020-09-18 23:54:58
39.109.122.46	attackspam	2020-09-18T10:15:32.184714dreamphreak.com sshd[358813]: Invalid user develop from 39.109.122.46 port 47576 2020-09-18T10:15:34.237338dreamphreak.com sshd[358813]: Failed password for invalid user develop from 39.109.122.46 port 47576 ssh2 ...	2020-09-18 23:26:48
45.80.64.246	attack	Sep 18 08:54:35 *** sshd[5294]: User root from 45.80.64.246 not allowed because not listed in AllowUsers	2020-09-18 23:44:39
118.89.138.117	attack	2020-09-18 10:24:30.074836-0500 localhost sshd[96943]: Failed password for root from 118.89.138.117 port 15736 ssh2	2020-09-18 23:30:57
92.222.74.255	attack	Sep 18 14:13:36 ovpn sshd\[2483\]: Invalid user doggiedog from 92.222.74.255 Sep 18 14:13:36 ovpn sshd\[2483\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.74.255 Sep 18 14:13:38 ovpn sshd\[2483\]: Failed password for invalid user doggiedog from 92.222.74.255 port 34116 ssh2 Sep 18 14:21:00 ovpn sshd\[4297\]: Invalid user dio1 from 92.222.74.255 Sep 18 14:21:00 ovpn sshd\[4297\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.222.74.255	2020-09-18 23:39:05
104.248.176.46	attack	TCP (SYN) 104.248.176.46:50650 -> port 29507, len 44	2020-09-18 23:54:35
45.143.221.41	attackspam	[2020-09-18 05:24:47] NOTICE[1239] chan_sip.c: Registration from '"800" ' failed for '45.143.221.41:5747' - Wrong password [2020-09-18 05:24:47] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-18T05:24:47.003-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7f4d4843fec8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/5747",Challenge="0c1ed4da",ReceivedChallenge="0c1ed4da",ReceivedHash="a7b964b5f78af3516c9e6448ba52fd8d" [2020-09-18 05:24:47] NOTICE[1239] chan_sip.c: Registration from '"800" ' failed for '45.143.221.41:5747' - Wrong password [2020-09-18 05:24:47] SECURITY[1264] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-18T05:24:47.160-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="800",SessionID="0x7f4d4844faa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.2 ...	2020-09-18 23:47:28
183.91.4.95	attackspam	Port Scan ...	2020-09-18 23:48:52
213.150.184.62	attackspam	$f2bV_matches	2020-09-18 23:18:35
223.84.17.117	attackspam	Icarus honeypot on github	2020-09-18 23:22:22
142.93.100.171	attack	(sshd) Failed SSH login from 142.93.100.171 (DE/Germany/-): 5 in the last 3600 secs	2020-09-18 23:25:04
211.159.217.106	attack	211.159.217.106 (CN/China/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep 18 04:42:41 jbs1 sshd[20637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=211.159.217.106 user=root Sep 18 04:45:42 jbs1 sshd[21558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.106.33.94 user=root Sep 18 04:43:46 jbs1 sshd[20981]: Failed password for root from 88.132.66.26 port 49536 ssh2 Sep 18 04:44:33 jbs1 sshd[21192]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.78.8 user=root Sep 18 04:44:34 jbs1 sshd[21192]: Failed password for root from 129.28.78.8 port 44548 ssh2 Sep 18 04:42:44 jbs1 sshd[20637]: Failed password for root from 211.159.217.106 port 52960 ssh2 IP Addresses Blocked:	2020-09-18 23:34:38
74.62.86.11	attack	Repeated RDP login failures. Last user: 001	2020-09-18 23:13:52
194.61.24.102	attackbotsspam	xmlrpc attack	2020-09-18 23:16:32
188.19.32.218	attackbots	Port probing on unauthorized port 445	2020-09-18 23:28:17

Recently Reported IPs

116.211.155.137	116.232.69.68	116.23.96.173	116.233.210.6
116.24.65.246	116.25.46.11	116.24.152.194	116.251.204.12
116.251.204.141	116.251.16.176	116.251.205.44	116.251.205.203
116.251.205.2	116.251.205.76	116.251.206.28	116.251.205.70
116.251.207.250	116.252.43.153	116.255.195.66	116.255.154.184