116.3.213.139 - IPInfo

Basic Info

City: Dalian

Region: Liaoning

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.3.213.69	attack	Automatic report - Port Scan Attack	2020-04-05 11:08:01
116.3.213.203	attack	unauthorized connection attempt	2020-01-20 17:32:16
116.3.213.203	attack	unauthorized connection attempt	2020-01-17 14:44:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.3.213.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.3.213.139.			IN	A

;; AUTHORITY SECTION:
.			75	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023051400 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 14 14:58:31 CST 2023
;; MSG SIZE  rcvd: 106

Host info

Host 139.213.3.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 116.3.213.139.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
219.77.104.197	attack	Sep 23 20:05:45 root sshd[25208]: Invalid user osmc from 219.77.104.197 ...	2020-09-24 12:24:31
149.202.40.210	attackbotsspam	$f2bV_matches	2020-09-24 12:27:06
5.135.224.152	attack	Time: Thu Sep 24 04:10:35 2020 +0000 IP: 5.135.224.152 (FR/France/ip152.ip-5-135-224.eu) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 24 03:57:50 3 sshd[11888]: Invalid user setup from 5.135.224.152 port 55126 Sep 24 03:57:51 3 sshd[11888]: Failed password for invalid user setup from 5.135.224.152 port 55126 ssh2 Sep 24 04:03:45 3 sshd[27476]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.135.224.152 user=root Sep 24 04:03:47 3 sshd[27476]: Failed password for root from 5.135.224.152 port 58586 ssh2 Sep 24 04:10:30 3 sshd[10475]: Invalid user login from 5.135.224.152 port 53374	2020-09-24 12:37:37
81.163.15.138	attack	Sep 23 18:50:10 mail.srvfarm.net postfix/smtpd[194163]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed: Sep 23 18:50:10 mail.srvfarm.net postfix/smtpd[194163]: lost connection after AUTH from 81-163-15-138.net.lasnet.pl[81.163.15.138] Sep 23 18:55:39 mail.srvfarm.net postfix/smtpd[198463]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed: Sep 23 18:55:39 mail.srvfarm.net postfix/smtpd[198463]: lost connection after AUTH from 81-163-15-138.net.lasnet.pl[81.163.15.138] Sep 23 18:59:08 mail.srvfarm.net postfix/smtps/smtpd[199015]: warning: 81-163-15-138.net.lasnet.pl[81.163.15.138]: SASL PLAIN authentication failed:	2020-09-24 12:39:57
103.145.13.230	attackbotsspam	firewall-block, port(s): 5060/udp	2020-09-24 12:07:11
157.245.227.165	attackspambots	(sshd) Failed SSH login from 157.245.227.165 (US/United States/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 23 14:55:04 server sshd[25482]: Invalid user manager from 157.245.227.165 port 44206 Sep 23 14:55:07 server sshd[25482]: Failed password for invalid user manager from 157.245.227.165 port 44206 ssh2 Sep 23 15:06:29 server sshd[28628]: Invalid user marcela from 157.245.227.165 port 51520 Sep 23 15:06:31 server sshd[28628]: Failed password for invalid user marcela from 157.245.227.165 port 51520 ssh2 Sep 23 15:10:01 server sshd[29642]: Invalid user virl from 157.245.227.165 port 58002	2020-09-24 12:05:19
149.34.17.76	attackspam	Sep 23 17:05:58 ssh2 sshd[70026]: Invalid user pi from 149.34.17.76 port 53684 Sep 23 17:05:58 ssh2 sshd[70026]: Failed password for invalid user pi from 149.34.17.76 port 53684 ssh2 Sep 23 17:05:58 ssh2 sshd[70026]: Connection closed by invalid user pi 149.34.17.76 port 53684 [preauth] ...	2020-09-24 12:11:43
52.172.220.153	attackbotsspam	Sep 24 06:11:14 fhem-rasp sshd[5143]: Failed password for root from 52.172.220.153 port 45478 ssh2 Sep 24 06:11:16 fhem-rasp sshd[5143]: Disconnected from authenticating user root 52.172.220.153 port 45478 [preauth] ...	2020-09-24 12:12:53
106.13.129.8	attack	Fail2Ban Ban Triggered	2020-09-24 12:13:29
180.76.165.107	attackbots	5x Failed Password	2020-09-24 12:09:28
107.179.95.124	attack	Sep 23 18:56:34 web01.agentur-b-2.de postfix/smtpd[1999767]: NOQUEUE: reject: RCPT from unknown[107.179.95.124]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 18:56:35 web01.agentur-b-2.de postfix/smtpd[1999767]: NOQUEUE: reject: RCPT from unknown[107.179.95.124]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 18:59:38 web01.agentur-b-2.de postfix/smtpd[1999709]: lost connection after CONNECT from unknown[107.179.95.124] Sep 23 18:59:39 web01.agentur-b-2.de postfix/smtpd[2002246]: NOQUEUE: reject: RCPT from unknown[107.179.95.124]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 18:59:39 web01.agentur-b-2.de postfix/smtpd[2002246]: NOQUEUE: reject: RCPT from unknown[107.179.95.124]: 450 4.7.1	2020-09-24 12:38:50
187.126.57.202	attackbotsspam	Automatic report - Port Scan Attack	2020-09-24 12:28:26
85.187.128.35	attackspambots	MYH,DEF GET /wp-admin/	2020-09-24 12:14:31
99.203.18.165	attackbotsspam	Brute forcing email accounts	2020-09-24 12:31:20
189.251.73.140	attack	1600880744 - 09/23/2020 19:05:44 Host: 189.251.73.140/189.251.73.140 Port: 445 TCP Blocked	2020-09-24 12:26:15

Recently Reported IPs

140.116.34.137	149.169.130.140	193.231.40.43	120.118.167.15
140.116.82.133	140.113.28.194	200.20.0.159	153.91.202.87
103.216.87.103	223.202.199.162	140.116.30.80	128.153.5.252
140.116.163.145	140.116.20.130	140.116.72.122	120.108.85.50
128.164.210.65	120.105.143.212	138.36.21.0	196.43.151.104