116.52.2.56 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.52.2.62	attackbots	20/8/21@23:54:50: FAIL: Alarm-SSH address from=116.52.2.62 ...	2020-08-22 13:11:30
116.52.2.62	attackbotsspam	nft/Honeypot/22/73e86	2020-05-29 05:49:45
116.52.2.62	attack	SIP/5060 Probe, BF, Hack -	2020-05-13 19:19:13
116.52.2.62	attackspam	firewall-block, port(s): 24258/tcp	2020-05-09 20:05:12
116.52.2.62	attackbotsspam	ET COMPROMISED Known Compromised or Hostile Host Traffic group 3 - port: 1257 proto: TCP cat: Misc Attack	2020-04-23 20:32:08
116.52.2.62	attackspam	srv02 Mass scanning activity detected Target: 30657 ..	2020-04-22 04:52:17
116.52.207.48	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 54314c5348aceef6 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/4.054101423 Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 07:38:56
116.52.207.181	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54315a670fbde516 \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/4.066686748 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 03:57:42
116.52.207.236	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 541457cfae2ae825 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: d.skk.moe \| User-Agent: Mozilla/5.051975669 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:14:28
116.52.225.81	attackbotsspam	Seq 2995002506	2019-10-22 04:13:55
116.52.20.193	attackspam	Sep 17 17:00:27 srv206 sshd[7137]: Invalid user admin from 116.52.20.193 Sep 17 17:00:27 srv206 sshd[7137]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.52.20.193 Sep 17 17:00:27 srv206 sshd[7137]: Invalid user admin from 116.52.20.193 Sep 17 17:00:29 srv206 sshd[7137]: Failed password for invalid user admin from 116.52.20.193 port 37206 ssh2 ...	2019-09-18 00:08:02
116.52.225.68	attack	52869/tcp [2019-08-20]1pkt	2019-08-20 13:44:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.52.2.56
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 25305
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.52.2.56.			IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022000 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 01:26:53 CST 2022
;; MSG SIZE  rcvd: 104

Host info

Host 56.2.52.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

server can't find 116.52.2.56.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.161.59.210	attackspam	2019-07-15T06:09:47.042Z CLOSE host=113.161.59.210 port=26248 fd=5 time=960.735 bytes=1685 ...	2019-09-10 20:38:25
108.77.81.198	attackbotsspam	Sep 10 02:21:49 sachi sshd\[19141\]: Invalid user mc from 108.77.81.198 Sep 10 02:21:49 sachi sshd\[19141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108-77-81-198.lightspeed.rlghnc.sbcglobal.net Sep 10 02:21:51 sachi sshd\[19141\]: Failed password for invalid user mc from 108.77.81.198 port 51672 ssh2 Sep 10 02:28:21 sachi sshd\[19713\]: Invalid user student from 108.77.81.198 Sep 10 02:28:21 sachi sshd\[19713\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=108-77-81-198.lightspeed.rlghnc.sbcglobal.net	2019-09-10 20:32:12
209.124.55.40	attack	Fail2Ban Ban Triggered HTTP Exploit Attempt	2019-09-10 20:26:27
140.238.173.10	attackbots	/wp-json/wp/v2/users	2019-09-10 21:02:05
79.47.65.196	attackspambots	firewall-block, port(s): 60001/tcp	2019-09-10 20:48:04
164.160.93.3	attack	Time: Tue Sep 10 08:18:54 2019 -0300 IP: 164.160.93.3 (ZA/South Africa/-) Failures: 30 (smtpauth) Interval: 3600 seconds Blocked: Permanent Block	2019-09-10 20:54:04
159.122.210.233	attackbotsspam	May 11 10:15:32 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=159.122.210.233 DST=109.74.200.221 LEN=220 TOS=0x00 PREC=0x00 TTL=247 ID=54321 PROTO=UDP SPT=45405 DPT=123 LEN=200 ...	2019-09-10 20:34:27
200.110.137.82	attackbotsspam	Aug 15 01:04:18 mercury smtpd[1187]: 17a8d66a3197caa3 smtp event=failed-command address=200.110.137.82 host=host82.200.110.137.ifxnw.com.ar command="RCPT to:" result="550 Invalid recipient" ...	2019-09-10 20:46:18
123.148.146.81	attackspambots	[Mon Aug 05 12:26:02.617586 2019] [access_compat:error] [pid 4787] [client 123.148.146.81:61368] AH01797: client denied by server configuration: /var/www/html/luke/wp-login.php ...	2019-09-10 20:25:48
220.76.107.50	attackbotsspam	Sep 10 02:22:21 hiderm sshd\[16135\]: Invalid user ts3 from 220.76.107.50 Sep 10 02:22:21 hiderm sshd\[16135\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.107.50 Sep 10 02:22:23 hiderm sshd\[16135\]: Failed password for invalid user ts3 from 220.76.107.50 port 33586 ssh2 Sep 10 02:28:59 hiderm sshd\[16766\]: Invalid user deploy from 220.76.107.50 Sep 10 02:28:59 hiderm sshd\[16766\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.76.107.50	2019-09-10 20:42:15
113.160.132.11	attack	2019-07-29T11:47:24.718Z CLOSE host=113.160.132.11 port=49382 fd=5 time=180.149 bytes=269 ...	2019-09-10 20:44:12
210.182.116.41	attackbots	Sep 10 14:27:45 legacy sshd[29309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.182.116.41 Sep 10 14:27:47 legacy sshd[29309]: Failed password for invalid user myftp from 210.182.116.41 port 44352 ssh2 Sep 10 14:35:04 legacy sshd[29641]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.182.116.41 ...	2019-09-10 20:48:24
218.98.40.135	attackbots	Sep 10 02:25:03 sachi sshd\[19393\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.135 user=root Sep 10 02:25:06 sachi sshd\[19393\]: Failed password for root from 218.98.40.135 port 52498 ssh2 Sep 10 02:25:12 sachi sshd\[19406\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.98.40.135 user=root Sep 10 02:25:13 sachi sshd\[19406\]: Failed password for root from 218.98.40.135 port 21883 ssh2 Sep 10 02:25:16 sachi sshd\[19406\]: Failed password for root from 218.98.40.135 port 21883 ssh2	2019-09-10 20:45:37
113.172.131.241	attackbots	2019-07-24T01:47:46.137Z CLOSE host=113.172.131.241 port=52095 fd=4 time=20.017 bytes=17 ...	2019-09-10 20:11:34
162.243.10.64	attackspambots	Sep 10 01:42:58 eddieflores sshd\[10774\]: Invalid user 123 from 162.243.10.64 Sep 10 01:42:58 eddieflores sshd\[10774\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.10.64 Sep 10 01:43:00 eddieflores sshd\[10774\]: Failed password for invalid user 123 from 162.243.10.64 port 53642 ssh2 Sep 10 01:49:24 eddieflores sshd\[11379\]: Invalid user 1q2w3e4r from 162.243.10.64 Sep 10 01:49:24 eddieflores sshd\[11379\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.10.64	2019-09-10 20:23:35

Recently Reported IPs

116.52.118.200	116.52.206.133	116.52.207.12	116.52.207.131
116.52.207.248	116.53.230.4	116.54.42.122	116.54.42.14
116.54.42.143	116.55.116.30	116.55.209.133	116.55.227.251
116.55.233.40	116.55.250.144	116.55.250.150	116.55.250.151
116.55.250.158	116.55.250.211	93.228.155.217	116.55.251.73