116.255.213.44

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: Zhengzhou Gainet Computer Network Technology Co. Ltd.

Hostname: unknown

Organization: unknown

Usage Type: Data Center/Web Hosting/Transit

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	port scan and connect, tcp 1433 (ms-sql-s)	2020-04-03 07:43:54

Comments on same subnet:

IP	Type	Details	Datetime
116.255.213.176	attack	2020-10-10T03:57:54.138120lavrinenko.info sshd[26636]: Invalid user haldaemon from 116.255.213.176 port 55284 2020-10-10T03:57:54.144712lavrinenko.info sshd[26636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 2020-10-10T03:57:54.138120lavrinenko.info sshd[26636]: Invalid user haldaemon from 116.255.213.176 port 55284 2020-10-10T03:57:55.940983lavrinenko.info sshd[26636]: Failed password for invalid user haldaemon from 116.255.213.176 port 55284 ssh2 2020-10-10T04:02:33.316531lavrinenko.info sshd[26780]: Invalid user monitoring from 116.255.213.176 port 56818 ...	2020-10-10 18:33:33
116.255.213.176	attack	Aug 5 17:11:56 lukav-desktop sshd\[25999\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 user=root Aug 5 17:11:58 lukav-desktop sshd\[25999\]: Failed password for root from 116.255.213.176 port 36528 ssh2 Aug 5 17:15:54 lukav-desktop sshd\[14190\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 user=root Aug 5 17:15:56 lukav-desktop sshd\[14190\]: Failed password for root from 116.255.213.176 port 46596 ssh2 Aug 5 17:19:46 lukav-desktop sshd\[14226\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 user=root	2020-08-06 03:37:20
116.255.213.168	attackbots	Jun 27 22:14:49 124388 sshd[16633]: Invalid user odoo from 116.255.213.168 port 37400 Jun 27 22:14:49 124388 sshd[16633]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.168 Jun 27 22:14:49 124388 sshd[16633]: Invalid user odoo from 116.255.213.168 port 37400 Jun 27 22:14:51 124388 sshd[16633]: Failed password for invalid user odoo from 116.255.213.168 port 37400 ssh2 Jun 27 22:19:46 124388 sshd[16979]: Invalid user afp from 116.255.213.168 port 57022	2020-06-28 08:08:14
116.255.213.176	attackspambots	$f2bV_matches	2020-06-18 05:34:30
116.255.213.168	attackspam	2020-06-16T10:02:29.1843851495-001 sshd[56426]: Failed password for root from 116.255.213.168 port 36539 ssh2 2020-06-16T10:05:33.1467551495-001 sshd[56617]: Invalid user mcserver from 116.255.213.168 port 47453 2020-06-16T10:05:33.1511421495-001 sshd[56617]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.168 2020-06-16T10:05:33.1467551495-001 sshd[56617]: Invalid user mcserver from 116.255.213.168 port 47453 2020-06-16T10:05:35.4920311495-001 sshd[56617]: Failed password for invalid user mcserver from 116.255.213.168 port 47453 ssh2 2020-06-16T10:08:37.8675601495-001 sshd[56733]: Invalid user admin from 116.255.213.168 port 58370 ...	2020-06-17 00:51:22
116.255.213.168	attackspam	Jun 15 17:12:40 root sshd[17827]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.168 user=root Jun 15 17:12:43 root sshd[17827]: Failed password for root from 116.255.213.168 port 33417 ssh2 ...	2020-06-16 03:32:09
116.255.213.176	attack	Invalid user zhangchunzhi from 116.255.213.176 port 46582	2020-06-09 13:24:27
116.255.213.176	attackbotsspam	Jun 7 22:21:59 santamaria sshd\[18259\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 user=root Jun 7 22:22:01 santamaria sshd\[18259\]: Failed password for root from 116.255.213.176 port 53556 ssh2 Jun 7 22:24:39 santamaria sshd\[18289\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.176 user=root ...	2020-06-08 07:20:03
116.255.213.176	attackbots	Jun 6 06:10:10 server sshd[32670]: Failed password for root from 116.255.213.176 port 42796 ssh2 Jun 6 06:13:19 server sshd[375]: Failed password for root from 116.255.213.176 port 54704 ssh2 ...	2020-06-06 15:26:12
116.255.213.176	attackspam	Jun 1 09:06:15 vps46666688 sshd[24239]: Failed password for root from 116.255.213.176 port 42328 ssh2 ...	2020-06-01 21:30:56
116.255.213.176	attackspam	Invalid user eb from 116.255.213.176 port 35666	2020-05-26 02:20:34
116.255.213.176	attackbotsspam	Invalid user syj from 116.255.213.176 port 44800	2020-05-23 01:53:59
116.255.213.46	attackbotsspam	Apr 30 16:59:56 PorscheCustomer sshd[18203]: Failed password for root from 116.255.213.46 port 58140 ssh2 Apr 30 17:03:18 PorscheCustomer sshd[18331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.213.46 Apr 30 17:03:20 PorscheCustomer sshd[18331]: Failed password for invalid user manager1 from 116.255.213.46 port 58564 ssh2 ...	2020-05-01 04:27:53
116.255.213.176	attack	Apr 30 03:56:00 *** sshd[32728]: User root from 116.255.213.176 not allowed because not listed in AllowUsers	2020-04-30 12:24:26
116.255.213.176	attack	Apr 25 05:36:12 ws12vmsma01 sshd[37505]: Invalid user guest from 116.255.213.176 Apr 25 05:36:14 ws12vmsma01 sshd[37505]: Failed password for invalid user guest from 116.255.213.176 port 58016 ssh2 Apr 25 05:42:39 ws12vmsma01 sshd[38422]: Invalid user maybechat from 116.255.213.176 ...	2020-04-25 16:54:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.255.213.44
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34461
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.255.213.44.			IN	A

;; AUTHORITY SECTION:
.			121	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020040202 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Apr 03 07:43:50 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 44.213.255.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 44.213.255.116.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
134.73.7.251	attack	2019-05-04 11:50:42 1hMrJa-0004pL-BD SMTP connection from downtown.sandyfadadu.com $downtown.ryupex.icu$ \[134.73.7.251\]:49242 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-04 11:50:42 1hMrJa-0004pM-H5 SMTP connection from downtown.sandyfadadu.com $downtown.ryupex.icu$ \[134.73.7.251\]:51161 I=\[193.107.90.29\]:25 closed by DROP in ACL 2019-05-04 11:51:23 1hMrKF-0004pv-AR SMTP connection from downtown.sandyfadadu.com $downtown.ryupex.icu$ \[134.73.7.251\]:55617 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 01:39:10
137.101.19.136	attack	2019-09-23 20:24:37 1iCT0m-0003RS-NV SMTP connection from $\[137.101.19.136\]$ \[137.101.19.136\]:23201 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 20:24:50 1iCT0z-0003Ri-QX SMTP connection from $\[137.101.19.136\]$ \[137.101.19.136\]:23269 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-09-23 20:25:09 1iCT16-0003Rm-3o SMTP connection from $\[137.101.19.136\]$ \[137.101.19.136\]:23295 I=\[193.107.88.166\]:25 closed by DROP in ACL ...	2020-02-05 01:23:13
185.151.242.91	attackspambots	Unauthorized connection attempt from IP address 185.151.242.91 on Port 3389(RDP)	2020-02-05 01:34:35
194.26.29.123	attackbots	He tried to login to Remote Access.	2020-02-05 00:59:07
138.68.133.161	attackbots	2019-05-07 14:01:13 1hNymX-0003t1-J3 SMTP connection from wail.bridgecoaa.com $sombrero.saudecolastrina.icu$ \[138.68.133.161\]:55146 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-07 14:01:13 1hNymX-0003t0-J4 SMTP connection from wail.bridgecoaa.com $ecology.saudecolastrina.icu$ \[138.68.133.161\]:33983 I=\[193.107.88.166\]:25 closed by DROP in ACL 2019-05-07 14:03:34 1hNyoo-0003vx-Qj SMTP connection from wail.bridgecoaa.com $stitch.saudecolastrina.icu$ \[138.68.133.161\]:47804 I=\[193.107.90.29\]:25 closed by DROP in ACL ...	2020-02-05 01:15:36
117.218.63.25	attackbots	Unauthorized connection attempt detected from IP address 117.218.63.25 to port 2220 [J]	2020-02-05 01:24:47
144.217.34.148	attackbots	02/04/2020-10:49:20.709966 144.217.34.148 Protocol: 17 GPL EXPLOIT ntpdx overflow attempt	2020-02-05 01:15:14
198.108.66.155	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-05 01:14:07
139.192.41.240	attack	2019-03-11 11:28:06 H=$\[139.192.41.240\]$ \[139.192.41.240\]:49015 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 11:28:15 H=$\[139.192.41.240\]$ \[139.192.41.240\]:49097 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed 2019-03-11 11:28:22 H=$\[139.192.41.240\]$ \[139.192.41.240\]:49156 I=\[193.107.88.166\]:25 F=\ rejected RCPT \: Sender verify failed ...	2020-02-05 01:06:31
112.1.64.254	attackspambots	Unauthorized connection attempt detected from IP address 112.1.64.254 to port 2220 [J]	2020-02-05 01:03:53
172.105.13.100	attack	firewall-block, port(s): 3283/udp	2020-02-05 01:40:58
118.91.178.253	attackbots	$f2bV_matches	2020-02-05 01:29:49
81.45.56.199	attackspam	Unauthorized connection attempt detected from IP address 81.45.56.199 to port 2220 [J]	2020-02-05 01:19:35
49.88.112.114	attack	Feb 4 07:35:34 php1 sshd\[24870\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Feb 4 07:35:36 php1 sshd\[24870\]: Failed password for root from 49.88.112.114 port 43002 ssh2 Feb 4 07:36:46 php1 sshd\[24956\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root Feb 4 07:36:48 php1 sshd\[24956\]: Failed password for root from 49.88.112.114 port 50504 ssh2 Feb 4 07:37:58 php1 sshd\[25030\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.114 user=root	2020-02-05 01:38:12
139.199.113.140	attackbotsspam	Feb 4 16:54:17 v22018076622670303 sshd\[20656\]: Invalid user weblogic from 139.199.113.140 port 37650 Feb 4 16:54:17 v22018076622670303 sshd\[20656\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.113.140 Feb 4 16:54:19 v22018076622670303 sshd\[20656\]: Failed password for invalid user weblogic from 139.199.113.140 port 37650 ssh2 ...	2020-02-05 01:02:58

Recently Reported IPs

195.9.205.44	221.122.116.72	187.154.214.156	53.63.135.244
64.20.43.233	95.2.3.247	77.55.209.117	179.221.113.92
115.202.71.252	115.73.75.122	106.13.183.147	51.38.189.209
188.51.139.160	46.1.145.46	59.188.43.107	45.74.18.12
187.112.99.130	122.225.105.173	2.44.244.149	180.247.25.44