116.54.98.246 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.54.98.234	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5413b8b76b0298c9 \| WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: theme-suka.skk.moe \| User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 06:13:59

Type

Details

Datetime

116.54.98.234

attackspam

The IP has triggered Cloudflare WAF. CF-Ray: 5413b8b76b0298c9 | WAF_Rule_ID: 3b40188685924a32bf11d40edea05a27 | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: theme-suka.skk.moe | User-Agent: Mozilla/5.0101097241 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.81 Safari/537.36 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 06:13:59

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.54.98.246
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62865
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.54.98.246.			IN	A

;; AUTHORITY SECTION:
.			143	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021301 1800 900 604800 86400

;; Query time: 16 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 14 06:48:15 CST 2022
;; MSG SIZE  rcvd: 106

Host info

b';; connection timed out; no servers could be reached
'

Nslookup info:

server can't find 116.54.98.246.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
185.153.197.11	normal	Terraria Server v1.3.5.3 Listening on port 7777 Type 'help' for a list of commands. : : : 185.153.197.71:12455 is connecting... 185.153.197.71:12455 is connecting... 185.153.197.71:13444 is connecting... 185.153.197.71:13444 is connecting... Exception normal: Tried to send data to a client after losing connection Exception normal: Tried to send data to a client after losing connection 185.153.197.71:19011 is connecting... 185.153.197.71:19011 is connecting... Exception normal: Tried to send data to a client after losing connection	2019-09-17 02:20:44
121.26.255.250	attack	[portscan] tcp/1433 [MsSQL] *(RWIN=64240)(09161116)	2019-09-17 02:41:04
154.117.154.34	attackspam	[portscan] tcp/23 [TELNET] *(RWIN=32947)(09161116)	2019-09-17 02:51:06
195.64.208.228	attack	Unauthorized IMAP connection attempt	2019-09-17 02:20:25
122.199.233.120	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(09161116)	2019-09-17 02:40:22
207.6.1.11	attack	$f2bV_matches	2019-09-17 02:36:29
91.165.142.97	attackspambots	[portscan] tcp/23 [TELNET] *(RWIN=3673)(09161116)	2019-09-17 02:42:23
117.56.190.214	attackbots	[portscan] tcp/23 [TELNET] [scan/connect: 20 time(s)] *(RWIN=14600)(09161116)	2019-09-17 02:53:11
198.108.67.55	attackbotsspam	[portscan] tcp/26 [tcp/26] *(RWIN=1024)(09161116)	2019-09-17 02:48:06
122.53.219.84	attack	[SMB remote code execution attempt: port tcp/445] *(RWIN=8192)(09161116)	2019-09-17 02:40:39
61.158.186.84	attackbotsspam	Unauthorized IMAP connection attempt	2019-09-17 02:19:46
113.246.68.142	attackspambots	DATE:2019-09-16 10:19:15, IP:113.246.68.142, PORT:1433 - MSSQL brute force auth on a honeypot server (epe-dc)	2019-09-17 02:18:45
78.36.203.72	attackspambots	2019-09-16 07:07:39 H=72-203-36-78.baltnet.ru [78.36.203.72]:44055 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/78.36.203.72) 2019-09-16 07:07:39 H=72-203-36-78.baltnet.ru [78.36.203.72]:44055 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/78.36.203.72) 2019-09-16 07:07:39 H=72-203-36-78.baltnet.ru [78.36.203.72]:44055 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3) (https://www.spamhaus.org/query/ip/78.36.203.72) ...	2019-09-17 02:31:37
185.153.197.11	normal	Terraria Server v1.3.5.3 Listening on port 7777 Type 'help' for a list of commands. : 185.153.197.71:12455 is connecting... 185.153.197.71:12455 is connecting... 185.153.197.71:13444 is connecting... 185.153.197.71:13444 is connecting... Exception normal: Tried to send data to a client after losing connection Exception normal: Tried to send data to a client after losing connection 185.153.197.71:19011 is connecting... 185.153.197.71:19011 is connecting... Exception normal: Tried to send data to a client after losing connection	2019-09-17 02:21:16
221.231.3.226	attack	[portscan] tcp/1433 [MsSQL] *(RWIN=8192)(09161116)	2019-09-17 02:44:16

Recently Reported IPs

116.6.21.90	116.54.86.124	116.62.148.150	116.62.235.163
116.63.147.229	116.62.235.5	116.62.41.100	116.68.100.148
116.68.100.10	116.68.102.192	116.68.103.11	116.68.103.217
116.68.104.192	116.68.111.87	116.68.96.106	116.68.81.47
116.68.98.186	116.7.11.30	116.68.96.97	116.7.11.56