Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: Dalian

Region: Liaoning

Country: China

Internet Service Provider: China Unicom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
116.3.213.69 attack
Automatic report - Port Scan Attack
2020-04-05 11:08:01
116.3.213.203 attack
unauthorized connection attempt
2020-01-20 17:32:16
116.3.213.203 attack
unauthorized connection attempt
2020-01-17 14:44:59
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.3.213.139
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29885
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.3.213.139.			IN	A

;; AUTHORITY SECTION:
.			75	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2023051400 1800 900 604800 86400

;; Query time: 73 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 14 14:58:31 CST 2023
;; MSG SIZE  rcvd: 106
Host info
Host 139.213.3.116.in-addr.arpa not found: 2(SERVFAIL)
Nslookup info:
server can't find 116.3.213.139.in-addr.arpa: SERVFAIL
Related IP info:
Related comments:
IP Type Details Datetime
104.236.203.29 attackspam
104.236.203.29 - - [21/Aug/2020:16:51:25 +0100] "POST /wp-login.php HTTP/1.1" 200 2261 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.236.203.29 - - [21/Aug/2020:16:51:26 +0100] "POST /wp-login.php HTTP/1.1" 200 2234 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
104.236.203.29 - - [21/Aug/2020:16:51:28 +0100] "POST /wp-login.php HTTP/1.1" 200 2233 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"
...
2020-08-22 03:49:40
203.175.73.61 attackspam
Unauthorized connection attempt from IP address 203.175.73.61 on Port 445(SMB)
2020-08-22 03:30:50
46.225.242.179 attackbots
Dovecot Invalid User Login Attempt.
2020-08-22 03:29:07
85.104.154.24 attackbots
Unauthorized connection attempt from IP address 85.104.154.24 on Port 445(SMB)
2020-08-22 03:44:05
159.65.30.66 attack
2020-08-21T15:30:06+0000 Failed SSH Authentication/Brute Force Attack. (Server 6)
2020-08-22 03:45:58
200.93.149.162 attackbotsspam
 TCP (SYN) 200.93.149.162:36588 -> port 445, len 52
2020-08-22 03:54:16
167.71.213.143 attackbotsspam
srvr1: (mod_security) mod_security (id:942100) triggered by 167.71.213.143 (SG/-/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:01:17 [error] 482759#0: *840067 [client 167.71.213.143] ModSecurity: Access denied with code 406 (phase 2).  [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801127724.930284"] [ref ""], client: 167.71.213.143, [redacted] request: "GET /forum/viewthread.php?thread_id=1122+AND+UPDATEXML%285947%2CCONCAT%280x2e%2C0x394e55735452%2C%28SELECT+%28ELT%282836%3D2836%2C1%29%29%29%2C0x394e55735452%29%2C5431%29--+YblK HTTP/1.1" [redacted]
2020-08-22 03:27:42
120.7.210.138 attack
CN CN/China/- Failures: 20 ftpd
2020-08-22 03:46:26
217.115.87.170 attackbots
1598011281 - 08/21/2020 14:01:21 Host: 217.115.87.170/217.115.87.170 Port: 445 TCP Blocked
2020-08-22 03:29:41
111.229.194.130 attackbots
2020-08-21T14:30:42.8147651495-001 sshd[63202]: Invalid user fastdfs from 111.229.194.130 port 54456
2020-08-21T14:30:44.3924191495-001 sshd[63202]: Failed password for invalid user fastdfs from 111.229.194.130 port 54456 ssh2
2020-08-21T14:34:06.8106651495-001 sshd[63406]: Invalid user matt from 111.229.194.130 port 35338
2020-08-21T14:34:06.8137351495-001 sshd[63406]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.194.130
2020-08-21T14:34:06.8106651495-001 sshd[63406]: Invalid user matt from 111.229.194.130 port 35338
2020-08-21T14:34:09.0562501495-001 sshd[63406]: Failed password for invalid user matt from 111.229.194.130 port 35338 ssh2
...
2020-08-22 03:42:01
51.77.201.36 attack
Aug 21 19:19:56 [host] sshd[28026]: Invalid user a
Aug 21 19:19:56 [host] sshd[28026]: pam_unix(sshd:
Aug 21 19:19:58 [host] sshd[28026]: Failed passwor
2020-08-22 03:39:41
79.124.3.98 attackspambots
DATE:2020-08-21 17:49:45, IP:79.124.3.98, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)
2020-08-22 03:39:24
179.43.143.153 attackbotsspam
Scanning an empty webserver with deny all robots.txt
2020-08-22 03:41:39
102.182.30.27 attackbots
102.182.30.27 - - [21/Aug/2020:08:01:22 -0400] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36 Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.10"
102.182.30.27 - - [21/Aug/2020:08:01:23 -0400] "POST /wp/xmlrpc.php HTTP/1.1" 404 211 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
102.182.30.27 - - [21/Aug/2020:08:01:23 -0400] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36"
...
2020-08-22 03:27:05
121.48.164.31 attackspam
Aug 21 14:19:26 myvps sshd[19637]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.48.164.31 
Aug 21 14:19:28 myvps sshd[19637]: Failed password for invalid user vna from 121.48.164.31 port 38646 ssh2
Aug 21 14:34:09 myvps sshd[28838]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.48.164.31 
...
2020-08-22 03:24:29

Recently Reported IPs

140.116.34.137 149.169.130.140 193.231.40.43 120.118.167.15
140.116.82.133 140.113.28.194 200.20.0.159 153.91.202.87
103.216.87.103 223.202.199.162 140.116.30.80 128.153.5.252
140.116.163.145 140.116.20.130 140.116.72.122 120.108.85.50
128.164.210.65 120.105.143.212 138.36.21.0 196.43.151.104