116.53.230.142

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: ChinaNet Yunnan Province Network

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt detected from IP address 116.53.230.142 to port 8332	2020-05-31 04:18:38

Comments on same subnet:

IP	Type	Details	Datetime
116.53.230.235	attack	Unauthorized connection attempt detected from IP address 116.53.230.235 to port 8888 [J]	2020-01-29 08:59:43
116.53.230.109	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5435c0ab9d64778e \| WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 \| WAF_Kind: firewall \| CF_Action: drop \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: blog.skk.moe \| User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 01:56:27

Type

Details

Datetime

116.53.230.235

attack

Unauthorized connection attempt detected from IP address 116.53.230.235 to port 8888 [J]

2020-01-29 08:59:43

116.53.230.109

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5435c0ab9d64778e | WAF_Rule_ID: 53b8357af6d244d3a132bcf913c3a388 | WAF_Kind: firewall | CF_Action: drop | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: blog.skk.moe | User-Agent: Mozilla/4.074482891 Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-12 01:56:27

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.53.230.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15776
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.53.230.142.			IN	A

;; AUTHORITY SECTION:
.			445	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020053000 1800 900 604800 86400

;; Query time: 96 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun May 31 04:18:35 CST 2020
;; MSG SIZE  rcvd: 118

Host info

142.230.53.116.in-addr.arpa domain name pointer 142.230.53.116.broad.km.yn.dynamic.163data.com.cn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
142.230.53.116.in-addr.arpa	name = 142.230.53.116.broad.km.yn.dynamic.163data.com.cn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
138.99.224.128	attackbotsspam	WordPress wp-login brute force :: 138.99.224.128 0.088 BYPASS [30/Sep/2020:20:41:34 0000] [censored_2] "POST /wp-login.php HTTP/1.1" 200 2577 "https://[censored_2]/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36"	2020-10-02 04:19:18
138.99.79.192	attackspam	DATE:2020-09-30 22:38:59, IP:138.99.79.192, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-10-02 04:31:18
37.212.59.5	attack	445/tcp 445/tcp [2020-09-30]2pkt	2020-10-02 04:32:02
45.123.8.144	attackspambots	Automatic report - Port Scan Attack	2020-10-02 04:41:39
188.255.132.31	attack	Sep 30 23:38:41 master sshd[7310]: Failed password for invalid user admin from 188.255.132.31 port 51090 ssh2 Sep 30 23:38:45 master sshd[7312]: Failed password for invalid user admin from 188.255.132.31 port 51094 ssh2	2020-10-02 04:50:21
190.207.172.55	attackspam	445/tcp 445/tcp [2020-09-30]2pkt	2020-10-02 04:36:01
177.161.251.74	attackbotsspam	22/tcp 22/tcp 22/tcp... [2020-09-30]4pkt,1pt.(tcp)	2020-10-02 04:13:45
134.255.57.137	attackspam	C1,WP GET /wp-login.php	2020-10-02 04:18:30
106.107.222.10	attackspambots	5555/tcp [2020-09-30]1pkt	2020-10-02 04:23:50
197.216.101.166	attack	Lines containing failures of 197.216.101.166 Sep 30 22:28:20 shared07 sshd[24180]: Did not receive identification string from 197.216.101.166 port 55715 Sep 30 22:28:33 shared07 sshd[24194]: Invalid user user1 from 197.216.101.166 port 56183 Sep 30 22:28:34 shared07 sshd[24194]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=197.216.101.166 Sep 30 22:28:36 shared07 sshd[24194]: Failed password for invalid user user1 from 197.216.101.166 port 56183 ssh2 Sep 30 22:28:36 shared07 sshd[24194]: Connection closed by invalid user user1 197.216.101.166 port 56183 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=197.216.101.166	2020-10-02 04:27:23
211.254.215.197	attack	SSH bruteforce	2020-10-02 04:42:53
60.250.23.233	attack	(sshd) Failed SSH login from 60.250.23.233 (TW/Taiwan/60-250-23-233.HINET-IP.hinet.net): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Oct 1 11:59:40 server sshd[26934]: Invalid user rh from 60.250.23.233 port 62162 Oct 1 11:59:43 server sshd[26934]: Failed password for invalid user rh from 60.250.23.233 port 62162 ssh2 Oct 1 12:07:02 server sshd[28948]: Invalid user edu from 60.250.23.233 port 51360 Oct 1 12:07:04 server sshd[28948]: Failed password for invalid user edu from 60.250.23.233 port 51360 ssh2 Oct 1 12:10:56 server sshd[29894]: Failed password for root from 60.250.23.233 port 51719 ssh2	2020-10-02 04:29:06
94.102.49.137	attackbots	firewall-block, port(s): 10750/tcp, 10774/tcp, 10843/tcp, 10874/tcp, 10886/tcp	2020-10-02 04:28:40
45.143.221.41	attack	[2020-10-01 15:48:47] NOTICE[1182] chan_sip.c: Registration from '"4002" ' failed for '45.143.221.41:6928' - Wrong password [2020-10-01 15:48:47] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-01T15:48:47.318-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4002",SessionID="0x7f22f801fc98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.41/6928",Challenge="00caa98a",ReceivedChallenge="00caa98a",ReceivedHash="8d31b2d227f2a0ec99f2d3c4c97c1939" [2020-10-01 15:48:47] NOTICE[1182] chan_sip.c: Registration from '"4002" ' failed for '45.143.221.41:6928' - Wrong password [2020-10-01 15:48:47] SECURITY[1204] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-10-01T15:48:47.572-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4002",SessionID="0x7f22f8089de8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45 ...	2020-10-02 04:26:02
141.98.9.31	attackbots	Oct 1 22:34:20 vps647732 sshd[28710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.9.31 Oct 1 22:34:22 vps647732 sshd[28710]: Failed password for invalid user 1234 from 141.98.9.31 port 32898 ssh2 ...	2020-10-02 04:50:45

Recently Reported IPs

81.16.120.70	79.55.39.113	70.124.223.136	60.162.248.96
46.177.99.83	46.82.60.106	45.83.67.25	45.83.66.116
45.76.136.225	41.90.20.186	41.32.63.144	40.123.25.57
37.57.161.50	37.46.240.200	49.22.10.24	36.32.3.46
232.160.103.81	160.248.150.96	209.111.134.133	5.187.21.50