116.48.14.35 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: Hong Kong Telecommunications (HKT) Limited

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	5555/tcp 5555/tcp 5555/tcp... [2019-09-16/10-15]6pkt,1pt.(tcp)	2019-10-16 05:13:05

Comments on same subnet:

IP	Type	Details	Datetime
116.48.140.149	attack	Unauthorized connection attempt detected from IP address 116.48.140.149 to port 4567 [J]	2020-03-01 06:07:58
116.48.140.186	attack	Unauthorized connection attempt detected from IP address 116.48.140.186 to port 81 [J]	2020-01-28 23:44:16
116.48.142.127	attackspam	Automatic report - Banned IP Access	2019-11-26 04:24:26
116.48.144.96	attackspam	Automatic report - Banned IP Access	2019-11-01 02:19:49
116.48.145.13	attackspambots	IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/116.48.145.13/ HK - 1H : (14) Protection Against DDoS WordPress plugin : "odzyskiwanie danych help-dysk" IP Address Ranges by Country : HK NAME ASN : ASN4760 IP : 116.48.145.13 CIDR : 116.48.128.0/19 PREFIX COUNT : 283 UNIQUE IP COUNT : 1705728 WYKRYTE ATAKI Z ASN4760 : 1H - 2 3H - 3 6H - 3 12H - 4 24H - 5 DateTime : 2019-10-08 05:56:23 INFO : Port Scan TELNET Detected and Blocked by ADMIN - data recovery	2019-10-08 14:44:04
116.48.141.193	attackspambots	Bad Request: "GET / HTTP/1.0"	2019-06-22 06:05:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.48.14.35
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34273
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.48.14.35.			IN	A

;; AUTHORITY SECTION:
.			377	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019101501 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 16 05:13:00 CST 2019
;; MSG SIZE  rcvd: 116

Host info

35.14.48.116.in-addr.arpa domain name pointer n1164814035.netvigator.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
35.14.48.116.in-addr.arpa	name = n1164814035.netvigator.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.183	attackspam	Nov 13 13:51:54 plusreed sshd[26542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183 user=root Nov 13 13:51:56 plusreed sshd[26542]: Failed password for root from 222.186.175.183 port 57564 ssh2 ...	2019-11-14 02:56:42
52.34.253.52	attack	2019-11-13 16:06:13 H=smtp33b.mxver.com [52.34.253.52] F= rejected RCPT : relay not permitted 2019-11-13 16:28:15 H=smtp33b.mxver.com [52.34.253.52] F= rejected RCPT : relay not permitted ...	2019-11-14 02:43:58
141.98.80.99	attackspambots		2019-11-14 02:39:40
218.92.0.138	attack	$f2bV_matches	2019-11-14 02:38:32
184.154.216.246	attackbots	Automatic report - XMLRPC Attack	2019-11-14 02:35:59
197.45.75.194	attackbotsspam	Unauthorized connection attempt from IP address 197.45.75.194 on Port 445(SMB)	2019-11-14 02:54:04
111.231.76.29	attack	Nov 13 16:49:46 mail sshd\[32599\]: Invalid user sumsion from 111.231.76.29 Nov 13 16:49:46 mail sshd\[32599\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.76.29 Nov 13 16:49:48 mail sshd\[32599\]: Failed password for invalid user sumsion from 111.231.76.29 port 47860 ssh2 ...	2019-11-14 02:41:51
91.134.140.242	attackspam	Nov 13 19:19:44 SilenceServices sshd[19308]: Failed password for root from 91.134.140.242 port 47636 ssh2 Nov 13 19:22:53 SilenceServices sshd[21450]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.134.140.242 Nov 13 19:22:55 SilenceServices sshd[21450]: Failed password for invalid user vico from 91.134.140.242 port 56100 ssh2	2019-11-14 02:24:00
49.88.112.115	attack	Nov 13 08:47:09 php1 sshd\[23578\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Nov 13 08:47:11 php1 sshd\[23578\]: Failed password for root from 49.88.112.115 port 51934 ssh2 Nov 13 08:48:02 php1 sshd\[23634\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root Nov 13 08:48:04 php1 sshd\[23634\]: Failed password for root from 49.88.112.115 port 37880 ssh2 Nov 13 08:48:55 php1 sshd\[23718\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.115 user=root	2019-11-14 02:56:02
122.117.142.155	attackbotsspam	Connection by 122.117.142.155 on port: 23 got caught by honeypot at 11/13/2019 1:47:08 PM	2019-11-14 02:51:09
18.215.220.11	attackspam	Nov 13 19:04:29 ns382633 sshd\[20426\]: Invalid user bosnes from 18.215.220.11 port 53480 Nov 13 19:04:29 ns382633 sshd\[20426\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.215.220.11 Nov 13 19:04:31 ns382633 sshd\[20426\]: Failed password for invalid user bosnes from 18.215.220.11 port 53480 ssh2 Nov 13 19:15:47 ns382633 sshd\[22780\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.215.220.11 user=root Nov 13 19:15:49 ns382633 sshd\[22780\]: Failed password for root from 18.215.220.11 port 50168 ssh2	2019-11-14 02:25:57
222.186.169.192	attackbots	Nov 13 19:21:16 MK-Soft-VM7 sshd[1282]: Failed password for root from 222.186.169.192 port 53326 ssh2 Nov 13 19:21:20 MK-Soft-VM7 sshd[1282]: Failed password for root from 222.186.169.192 port 53326 ssh2 ...	2019-11-14 02:23:34
168.181.49.192	attackbotsspam	Nov 13 15:47:07 lnxweb61 sshd[6245]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=168.181.49.192	2019-11-14 02:47:50
107.182.187.34	attack	Nov 13 17:10:11 debian sshd\[31936\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.182.187.34 user=root Nov 13 17:10:14 debian sshd\[31936\]: Failed password for root from 107.182.187.34 port 40960 ssh2 Nov 13 17:46:58 debian sshd\[2059\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.182.187.34 user=lp ...	2019-11-14 02:55:38
138.197.195.52	attackbotsspam	Nov 13 19:21:34 serwer sshd\[25602\]: Invalid user user from 138.197.195.52 port 55592 Nov 13 19:21:34 serwer sshd\[25602\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.195.52 Nov 13 19:21:36 serwer sshd\[25602\]: Failed password for invalid user user from 138.197.195.52 port 55592 ssh2 ...	2019-11-14 02:58:17

Recently Reported IPs

151.165.168.86	171.116.26.172	181.31.230.12	97.127.79.255
82.137.238.234	54.221.26.203	168.114.18.63	189.226.219.214
74.43.147.83	49.207.181.242	178.21.66.226	178.128.232.77
160.153.147.15	80.98.199.181	1.171.26.146	212.235.203.242
111.172.104.22	106.12.179.35	190.113.89.30	115.219.34.19