116.52.118.107

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.52.118.253	attack	Unauthorized connection attempt detected from IP address 116.52.118.253 to port 4712 [T]	2020-04-15 02:07:01
116.52.118.52	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5435ea1e4817eb19 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: doku.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:13:51
116.52.118.239	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5413a39aae84e7ad \| WAF_Rule_ID: 1112824 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:35:34

Type

Details

Datetime

116.52.118.253

attack

Unauthorized connection attempt detected from IP address 116.52.118.253 to port 4712 [T]

2020-04-15 02:07:01

116.52.118.52

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 5435ea1e4817eb19 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: doku.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 05:13:51

116.52.118.239

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5413a39aae84e7ad | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:35:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.52.118.107
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41266
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.52.118.107.			IN	A

;; AUTHORITY SECTION:
.			147	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022700 1800 900 604800 86400

;; Query time: 26 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 27 16:22:37 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 107.118.52.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 116.52.118.107.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
117.64.237.26	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 117.64.237.26 (-): 5 in the last 3600 secs - Mon Jul 23 09:10:20 2018	2020-02-24 23:03:20
218.166.120.56	attackspambots	Brute force blocker - service: proftpd1 - aantal: 30 - Wed Jul 25 17:55:14 2018	2020-02-24 22:44:36
114.239.250.15	attackbotsspam	lfd: (smtpauth) Failed SMTP AUTH login from 114.239.250.15 (-): 5 in the last 3600 secs - Mon Jul 23 10:59:03 2018	2020-02-24 23:04:44
112.85.42.174	attack	Feb 24 15:40:57 v22018076622670303 sshd\[11646\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.174 user=root Feb 24 15:40:58 v22018076622670303 sshd\[11646\]: Failed password for root from 112.85.42.174 port 14987 ssh2 Feb 24 15:41:01 v22018076622670303 sshd\[11646\]: Failed password for root from 112.85.42.174 port 14987 ssh2 ...	2020-02-24 22:45:34
1.58.71.34	attack	Brute force blocker - service: proftpd1 - aantal: 128 - Thu Jul 26 18:05:15 2018	2020-02-24 22:36:58
218.92.0.202	attackbotsspam	Feb 24 15:29:14 MK-Soft-Root1 sshd[22871]: Failed password for root from 218.92.0.202 port 38444 ssh2 Feb 24 15:29:17 MK-Soft-Root1 sshd[22871]: Failed password for root from 218.92.0.202 port 38444 ssh2 ...	2020-02-24 22:59:15
213.57.123.18	attack	[2020-02-24 08:22:55] NOTICE[1148] chan_sip.c: Registration from '"2222"' failed for '213.57.123.18:8232' - Wrong password [2020-02-24 08:22:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T08:22:55.171-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="2222",SessionID="0x7fd82c4c0778",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/213.57.123.18/8232",Challenge="254ee7f1",ReceivedChallenge="254ee7f1",ReceivedHash="bdad31e2bdaa4fc7f73fc32653d0a8a3" [2020-02-24 08:28:55] NOTICE[1148] chan_sip.c: Registration from '"9002"' failed for '213.57.123.18:5973' - Wrong password [2020-02-24 08:28:55] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-24T08:28:55.855-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="9002",SessionID="0x7fd82c9bc688",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/213. ...	2020-02-24 22:53:18
222.186.31.135	attackbots	Feb 24 15:52:31 MK-Soft-VM8 sshd[21949]: Failed password for root from 222.186.31.135 port 27808 ssh2 Feb 24 15:52:34 MK-Soft-VM8 sshd[21949]: Failed password for root from 222.186.31.135 port 27808 ssh2 ...	2020-02-24 22:52:55
117.57.92.242	attack	lfd: (smtpauth) Failed SMTP AUTH login from 117.57.92.242 (CN/China/-): 5 in the last 3600 secs - Tue Jul 24 20:58:05 2018	2020-02-24 22:54:24
115.68.14.70	attack	Brute force blocker - service: exim2 - aantal: 25 - Sun Jul 22 13:10:13 2018	2020-02-24 23:09:05
99.131.46.101	attackbotsspam	TCP Port Scanning	2020-02-24 22:57:55
2.44.165.169	attack	TCP Port Scanning	2020-02-24 23:15:27
114.104.188.208	attackspam	Feb 24 15:32:15 MK-Soft-VM6 sshd[7154]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.104.188.208 Feb 24 15:32:17 MK-Soft-VM6 sshd[7154]: Failed password for invalid user huairuo from 114.104.188.208 port 36172 ssh2 ...	2020-02-24 23:16:34
66.70.202.168	attack	lfd: (smtpauth) Failed SMTP AUTH login from 66.70.202.168 (ip168.ip-66-70-202.net): 5 in the last 3600 secs - Thu Jul 26 12:54:55 2018	2020-02-24 22:38:04
112.85.42.188	attack	02/24/2020-10:16:47.121568 112.85.42.188 Protocol: 6 ET SCAN Potential SSH Scan	2020-02-24 23:19:03

Recently Reported IPs

116.52.100.89	116.52.118.135	116.52.118.12	116.52.118.173
116.52.118.208	116.52.118.28	116.52.118.29	116.52.118.82
116.52.118.35	116.52.118.164	116.52.118.37	116.52.118.92
116.52.207.159	116.52.207.161	116.52.207.17	116.52.207.206
116.52.17.61	116.52.207.22	116.52.207.132	116.52.207.80