116.52.118.219

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.52.118.253	attack	Unauthorized connection attempt detected from IP address 116.52.118.253 to port 4712 [T]	2020-04-15 02:07:01
116.52.118.52	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5435ea1e4817eb19 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: doku.skk.moe \| User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 05:13:51
116.52.118.239	attack	The IP has triggered Cloudflare WAF. CF-Ray: 5413a39aae84e7ad \| WAF_Rule_ID: 1112824 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:35:34

Type

Details

Datetime

116.52.118.253

attack

Unauthorized connection attempt detected from IP address 116.52.118.253 to port 4712 [T]

2020-04-15 02:07:01

116.52.118.52

attackbots

The IP has triggered Cloudflare WAF. CF-Ray: 5435ea1e4817eb19 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: doku.skk.moe | User-Agent: Mozilla/5.084743666 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.140 Safari/537.36 Edge/17.17134 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 05:13:51

116.52.118.239

attack

The IP has triggered Cloudflare WAF. CF-Ray: 5413a39aae84e7ad | WAF_Rule_ID: 1112824 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/5.0 (Linux; U; Android 4.3; en-us; SM-N900T Build/JSS15J) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Mobile Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 03:35:34

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.52.118.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14379
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.52.118.219.			IN	A

;; AUTHORITY SECTION:
.			476	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030600 1800 900 604800 86400

;; Query time: 68 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Mar 06 15:19:13 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 219.118.52.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 116.52.118.219.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
1.202.76.226	attackbots	k+ssh-bruteforce	2020-05-21 22:32:01
118.96.225.15	attackspambots	1590062483 - 05/21/2020 14:01:23 Host: 118.96.225.15/118.96.225.15 Port: 445 TCP Blocked	2020-05-21 22:59:30
194.146.188.206	attackspam	Unauthorized connection attempt from IP address 194.146.188.206 on Port 445(SMB)	2020-05-21 22:52:55
103.41.110.38	attackspambots	103.41.110.38	2020-05-21 22:23:20
81.213.108.19	attackbots	Unauthorized connection attempt from IP address 81.213.108.19 on Port 445(SMB)	2020-05-21 23:03:24
2.37.134.39	attack	Unauthorized connection attempt detected from IP address 2.37.134.39 to port 23	2020-05-21 22:25:13
125.212.128.34	attackbots	1590062486 - 05/21/2020 14:01:26 Host: 125.212.128.34/125.212.128.34 Port: 445 TCP Blocked	2020-05-21 22:55:24
23.254.229.216	attackspam	Unauthorized connection attempt detected from IP address 23.254.229.216 to port 23	2020-05-21 22:51:33
106.12.33.174	attackbots	May 21 09:50:39 ny01 sshd[11514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.174 May 21 09:50:42 ny01 sshd[11514]: Failed password for invalid user xbf from 106.12.33.174 port 55170 ssh2 May 21 09:55:42 ny01 sshd[12568]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.33.174	2020-05-21 22:20:34
185.153.196.230	attackspambots	May 21 15:07:45 haigwepa sshd[16452]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.153.196.230 May 21 15:07:47 haigwepa sshd[16452]: Failed password for invalid user 0 from 185.153.196.230 port 42521 ssh2 ...	2020-05-21 22:34:01
101.69.200.162	attackbotsspam	May 21 07:59:45 NPSTNNYC01T sshd[18921]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.69.200.162 May 21 07:59:47 NPSTNNYC01T sshd[18921]: Failed password for invalid user nvp from 101.69.200.162 port 61501 ssh2 May 21 08:01:35 NPSTNNYC01T sshd[19075]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.69.200.162 ...	2020-05-21 23:01:36
165.22.193.235	attack	May 21 16:07:03 [host] sshd[15988]: Invalid user x May 21 16:07:03 [host] sshd[15988]: pam_unix(sshd: May 21 16:07:05 [host] sshd[15988]: Failed passwor	2020-05-21 22:21:24
63.80.88.192	attackbotsspam	May 21 14:56:02 mail.srvfarm.net postfix/smtpd[2165739]: NOQUEUE: reject: RCPT from unknown[63.80.88.192]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 21 15:02:16 mail.srvfarm.net postfix/smtpd[2163155]: NOQUEUE: reject: RCPT from unknown[63.80.88.192]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 21 15:05:28 mail.srvfarm.net postfix/smtpd[2163036]: NOQUEUE: reject: RCPT from unknown[63.80.88.192]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= May 21 15:05:34 mail.srvfarm.net postfix/smtpd[2163171]: NOQUEUE: reject: RCPT from unknown[63.80.88.192]: 450 4.1.8 : Sender address	2020-05-21 22:29:31
87.251.74.48	attack	May 21 14:49:21 localhost sshd\[23239\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.48 user=root May 21 14:49:21 localhost sshd\[23238\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.251.74.48 user=root May 21 14:49:23 localhost sshd\[23239\]: Failed password for root from 87.251.74.48 port 20478 ssh2 ...	2020-05-21 22:57:08
37.195.194.36	attack	Unauthorized connection attempt from IP address 37.195.194.36 on Port 445(SMB)	2020-05-21 22:43:41

Recently Reported IPs

116.52.118.216	116.52.118.234	116.52.121.244	116.52.121.52
116.52.13.90	116.52.133.107	116.52.133.123	116.52.133.90
116.52.134.135	149.223.82.253	116.52.134.5	116.52.141.27
116.58.232.220	116.58.245.40	116.58.245.57	82.199.97.90
116.58.245.66	116.58.245.76	116.58.246.101	180.130.237.241