116.54.98.239 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.54.98.234	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5413b8b76b0298c9 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:13:59

Type

Details

Datetime

116.54.98.234

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5413b8b76b0298c9 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:13:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.54.98.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 48106
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.54.98.239.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021300 1800 900 604800 86400

;; Query time: 71 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Feb 13 13:52:53 CST 2022
;; MSG SIZE  rcvd: 106

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 116.54.98.239.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
106.12.220.84	attackbotsspam	2020-04-07T07:19:05.091631ns386461 sshd\[25402\]: Invalid user deploy from 106.12.220.84 port 33304 2020-04-07T07:19:05.096352ns386461 sshd\[25402\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.220.84 2020-04-07T07:19:07.223951ns386461 sshd\[25402\]: Failed password for invalid user deploy from 106.12.220.84 port 33304 ssh2 2020-04-07T07:36:31.171429ns386461 sshd\[8708\]: Invalid user admin from 106.12.220.84 port 55682 2020-04-07T07:36:31.176033ns386461 sshd\[8708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.220.84 ...	2020-04-07 17:33:30
217.64.108.66	attack	Apr 7 06:23:00 jane sshd[19666]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.64.108.66 Apr 7 06:23:02 jane sshd[19666]: Failed password for invalid user ec2-user from 217.64.108.66 port 33314 ssh2 ...	2020-04-07 17:35:42
51.254.143.190	attack	Apr 7 08:19:01 *** sshd[27591]: Invalid user nagios from 51.254.143.190	2020-04-07 17:24:48
103.215.139.101	attack	k+ssh-bruteforce	2020-04-07 17:30:07
199.127.63.202	attackbotsspam	[2020-04-07 04:25:54] NOTICE[12114] chan_sip.c: Registration from '"205" ' failed for '199.127.63.202:5558' - Wrong password [2020-04-07 04:25:54] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-07T04:25:54.704-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="205",SessionID="0x7f020c04b958",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/199.127.63.202/5558",Challenge="02fd3c93",ReceivedChallenge="02fd3c93",ReceivedHash="a5d2278e38be6e90d13b857d8d08671f" [2020-04-07 04:25:54] NOTICE[12114] chan_sip.c: Registration from '"205" ' failed for '199.127.63.202:5558' - Wrong password [2020-04-07 04:25:54] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-07T04:25:54.844-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="205",SessionID="0x7f020c13daa8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/1 ...	2020-04-07 17:17:53
123.14.5.115	attackbots	(sshd) Failed SSH login from 123.14.5.115 (CN/China/hn.kd.ny.adsl): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr 7 10:45:12 ubnt-55d23 sshd[14818]: Invalid user test from 123.14.5.115 port 48154 Apr 7 10:45:13 ubnt-55d23 sshd[14818]: Failed password for invalid user test from 123.14.5.115 port 48154 ssh2	2020-04-07 17:31:22
222.186.15.114	attackspambots	Unauthorized connection attempt detected from IP address 222.186.15.114 to port 22	2020-04-07 17:28:29
51.91.102.173	attackbots	SSH brute force attempt	2020-04-07 17:28:03
89.144.47.247	attackspam	ET DROP Dshield Block Listed Source group 1 - port: 3387 proto: TCP cat: Misc Attack	2020-04-07 17:51:13
101.89.112.10	attackbots	Automatic report - SSH Brute-Force Attack	2020-04-07 17:47:59
49.232.130.25	attack	DATE:2020-04-07 09:00:34, IP:49.232.130.25, PORT:ssh SSH brute force auth (docker-dc)	2020-04-07 17:49:19
46.105.148.212	attackspam	Apr 7 10:58:51 v22018086721571380 sshd[32116]: Failed password for invalid user monitor from 46.105.148.212 port 53608 ssh2 Apr 7 11:03:37 v22018086721571380 sshd[761]: Failed password for invalid user host from 46.105.148.212 port 49424 ssh2	2020-04-07 17:20:21
118.25.36.79	attackspambots	Apr 7 09:31:18 *** sshd[27942]: User root from 118.25.36.79 not allowed because not listed in AllowUsers	2020-04-07 18:05:01
222.186.42.7	attack	04/07/2020-05:32:44.221362 222.186.42.7 Protocol: 6 ET SCAN Potential SSH Scan	2020-04-07 17:36:19
88.90.123.247	attack	Triggered by Fail2Ban at Ares web server	2020-04-07 17:27:44

Recently Reported IPs

116.58.232.196	116.58.245.230	116.58.21.218	116.58.242.58
116.62.105.32	116.58.250.41	116.58.251.53	116.62.170.67
116.62.190.16	116.62.66.232	116.6.56.66	116.58.34.90
116.63.133.56	116.62.173.84	116.63.70.50	116.68.100.201
116.68.103.38	116.66.188.61	116.68.100.75	116.68.105.161