116.49.89.116 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Hong Kong

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.49.89.224	attack	SSH authentication failure x 6 reported by Fail2Ban ...	2019-07-07 19:22:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.49.89.116
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31076
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.49.89.116.			IN	A

;; AUTHORITY SECTION:
.			237	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 21 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 15:02:13 CST 2022
;; MSG SIZE  rcvd: 106

Host info

116.89.49.116.in-addr.arpa domain name pointer n1164989116.netvigator.com.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
116.89.49.116.in-addr.arpa	name = n1164989116.netvigator.com.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.206.255.181	attackspambots	Feb 12 05:36:02 hpm sshd\[26038\]: Invalid user blood from 123.206.255.181 Feb 12 05:36:02 hpm sshd\[26038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.255.181 Feb 12 05:36:05 hpm sshd\[26038\]: Failed password for invalid user blood from 123.206.255.181 port 35586 ssh2 Feb 12 05:45:27 hpm sshd\[27230\]: Invalid user matilda from 123.206.255.181 Feb 12 05:45:27 hpm sshd\[27230\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.206.255.181	2020-02-13 01:45:28
201.72.108.148	attackspambots	Unauthorized connection attempt from IP address 201.72.108.148 on Port 445(SMB)	2020-02-13 01:18:20
41.89.105.17	attackspambots	Automatic report - Port Scan	2020-02-13 01:40:28
192.145.209.11	attack	[Wed Feb 12 02:46:08 2020] [error] [client 192.145.209.11] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /	2020-02-13 01:22:15
81.24.119.68	attack	[Mon Feb 10 09:41:21 2020] [error] [client 81.24.119.68] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /	2020-02-13 01:46:49
91.74.234.154	attackbotsspam	Feb 12 18:09:54 sd-53420 sshd\[27303\]: Invalid user row from 91.74.234.154 Feb 12 18:09:54 sd-53420 sshd\[27303\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.74.234.154 Feb 12 18:09:57 sd-53420 sshd\[27303\]: Failed password for invalid user row from 91.74.234.154 port 36140 ssh2 Feb 12 18:12:55 sd-53420 sshd\[27641\]: User root from 91.74.234.154 not allowed because none of user's groups are listed in AllowGroups Feb 12 18:12:55 sd-53420 sshd\[27641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.74.234.154 user=root ...	2020-02-13 01:34:39
181.164.4.8	attack	ssh failed login	2020-02-13 01:55:23
173.245.202.210	attackbots	[2020-02-12 12:26:24] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.202.210:49954' - Wrong password [2020-02-12 12:26:24] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T12:26:24.103-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="17512",SessionID="0x7fd82cb29a68",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173.245.202.210/49954",Challenge="0693b17b",ReceivedChallenge="0693b17b",ReceivedHash="131652587c228107f1f3facf6e6304a0" [2020-02-12 12:26:39] NOTICE[1148] chan_sip.c: Registration from '' failed for '173.245.202.210:57836' - Wrong password [2020-02-12 12:26:39] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-12T12:26:39.763-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="15376",SessionID="0x7fd82cfcf5b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/173 ...	2020-02-13 01:30:06
180.76.244.97	attackbotsspam	Brute-force attempt banned	2020-02-13 01:42:22
14.177.99.174	attack	Feb 12 14:24:46 mxgate1 postfix/postscreen[27996]: CONNECT from [14.177.99.174]:26162 to [176.31.12.44]:25 Feb 12 14:24:46 mxgate1 postfix/dnsblog[27997]: addr 14.177.99.174 listed by domain zen.spamhaus.org as 127.0.0.4 Feb 12 14:24:46 mxgate1 postfix/dnsblog[27997]: addr 14.177.99.174 listed by domain zen.spamhaus.org as 127.0.0.3 Feb 12 14:24:46 mxgate1 postfix/dnsblog[27997]: addr 14.177.99.174 listed by domain zen.spamhaus.org as 127.0.0.11 Feb 12 14:24:46 mxgate1 postfix/dnsblog[27998]: addr 14.177.99.174 listed by domain cbl.abuseat.org as 127.0.0.2 Feb 12 14:24:46 mxgate1 postfix/dnsblog[28000]: addr 14.177.99.174 listed by domain bl.spamcop.net as 127.0.0.2 Feb 12 14:24:46 mxgate1 postfix/dnsblog[28001]: addr 14.177.99.174 listed by domain b.barracudacentral.org as 127.0.0.2 Feb 12 14:24:52 mxgate1 postfix/postscreen[27996]: DNSBL rank 5 for [14.177.99.174]:26162 Feb 12 14:24:54 mxgate1 postfix/tlsproxy[28145]: CONNECT from [14.177.99.174]:26162 Feb x@x ........ ------------------------------------	2020-02-13 01:22:41
102.65.231.20	attackspambots	Feb 12 14:21:47 vbuntu sshd[26939]: refused connect from 102-65-231-20.dsl.web.africa (102.65.231.20) Feb 12 14:21:49 vbuntu sshd[26940]: refused connect from 102-65-231-20.dsl.web.africa (102.65.231.20) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=102.65.231.20	2020-02-13 01:15:51
151.61.161.138	attackbots	[Sun Feb 09 16:49:16 2020] [error] [client 151.61.161.138] client sent HTTP/1.1 request without hostname (see RFC2616 section 14.23): /	2020-02-13 01:56:26
188.6.226.168	attack	" "	2020-02-13 01:23:35
51.89.200.111	attack	Feb 12 14:28:06 mailrelay sshd[23447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.200.111 user=r.r Feb 12 14:28:08 mailrelay sshd[23447]: Failed password for r.r from 51.89.200.111 port 48244 ssh2 Feb 12 14:28:09 mailrelay sshd[23447]: Connection closed by 51.89.200.111 port 48244 [preauth] Feb 12 14:31:44 mailrelay sshd[23742]: Invalid user ftp from 51.89.200.111 port 57318 Feb 12 14:31:44 mailrelay sshd[23742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.89.200.111 Feb 12 14:31:46 mailrelay sshd[23742]: Failed password for invalid user ftp from 51.89.200.111 port 57318 ssh2 Feb 12 14:31:46 mailrelay sshd[23742]: Connection closed by 51.89.200.111 port 57318 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=51.89.200.111	2020-02-13 01:54:29
186.212.65.168	attackbots	Automatic report - Port Scan Attack	2020-02-13 01:12:45

Recently Reported IPs

116.252.204.9	116.6.233.254	116.88.80.59	117.1.249.109
117.0.181.147	117.102.87.66	116.98.173.239	117.1.253.199
117.141.230.10	117.111.1.237	117.120.9.114	117.132.12.70
117.2.189.205	117.2.194.189	117.197.118.11	117.2.210.111
117.50.37.217	117.3.2.186	117.50.173.66	117.86.174.225