Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: StarHub Cable Vision Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Aug  6 13:41:46 mail sshd\[1413\]: Failed password for invalid user cynthia from 116.89.53.66 port 52184 ssh2
Aug  6 13:57:36 mail sshd\[1610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66  user=root
...
2019-08-06 21:11:19
attack
Aug  1 01:01:03 MK-Soft-Root2 sshd\[669\]: Invalid user mint from 116.89.53.66 port 55794
Aug  1 01:01:03 MK-Soft-Root2 sshd\[669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
Aug  1 01:01:05 MK-Soft-Root2 sshd\[669\]: Failed password for invalid user mint from 116.89.53.66 port 55794 ssh2
...
2019-08-01 07:28:52
attackbots
Jul 30 16:27:24 ArkNodeAT sshd\[7753\]: Invalid user usuario from 116.89.53.66
Jul 30 16:27:24 ArkNodeAT sshd\[7753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
Jul 30 16:27:25 ArkNodeAT sshd\[7753\]: Failed password for invalid user usuario from 116.89.53.66 port 48084 ssh2
2019-07-30 23:13:08
attackbots
Jul  5 00:46:25 lnxweb62 sshd[11444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
2019-07-05 13:28:57
attackspam
Automatic report - Web App Attack
2019-06-22 18:29:59
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.89.53.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16354
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.89.53.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062201 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 18:29:52 CST 2019
;; MSG SIZE  rcvd: 116
Host info
66.53.89.116.in-addr.arpa domain name pointer 66.53.89.116.starhub.net.sg.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
66.53.89.116.in-addr.arpa	name = 66.53.89.116.starhub.net.sg.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
14.186.130.40 attackbotsspam
(eximsyntax) Exim syntax errors from 14.186.130.40 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: 2020-06-19 01:14:08 SMTP call from [14.186.130.40] dropped: too many syntax or protocol errors (last command was "?\034?\032?\027?\031?\034?\033?\030?\032?\026?\016?\r?\v?\f?	?")
2020-06-19 08:03:37
37.187.99.147 attackbots
detected by Fail2Ban
2020-06-19 07:54:12
156.199.90.2 attackspam
Telnet Honeypot -> Telnet Bruteforce / Login
2020-06-19 07:50:02
185.143.75.81 attackbots
Jun 19 01:30:16 mail postfix/smtpd\[9172\]: warning: unknown\[185.143.75.81\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 19 01:31:11 mail postfix/smtpd\[9172\]: warning: unknown\[185.143.75.81\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 19 02:01:44 mail postfix/smtpd\[9995\]: warning: unknown\[185.143.75.81\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jun 19 02:02:29 mail postfix/smtpd\[9880\]: warning: unknown\[185.143.75.81\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2020-06-19 08:05:53
167.172.36.232 attackspam
SSH / Telnet Brute Force Attempts on Honeypot
2020-06-19 08:06:08
180.76.53.230 attackspam
Fail2Ban Ban Triggered
2020-06-19 07:37:32
156.96.151.225 attack
Brute forcing email accounts
2020-06-19 07:38:20
185.175.93.24 attackspam
[MK-VM4] Blocked by UFW
2020-06-19 07:55:55
106.12.214.145 attackbotsspam
Jun 19 08:24:17 web1 sshd[19646]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145  user=root
Jun 19 08:24:19 web1 sshd[19646]: Failed password for root from 106.12.214.145 port 51396 ssh2
Jun 19 08:29:43 web1 sshd[20983]: Invalid user plex from 106.12.214.145 port 46968
Jun 19 08:29:43 web1 sshd[20983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145
Jun 19 08:29:43 web1 sshd[20983]: Invalid user plex from 106.12.214.145 port 46968
Jun 19 08:29:45 web1 sshd[20983]: Failed password for invalid user plex from 106.12.214.145 port 46968 ssh2
Jun 19 08:31:38 web1 sshd[21515]: Invalid user ansible from 106.12.214.145 port 41264
Jun 19 08:31:38 web1 sshd[21515]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145
Jun 19 08:31:38 web1 sshd[21515]: Invalid user ansible from 106.12.214.145 port 41264
Jun 19 08:31:40 web1 sshd[21515]: Fai
...
2020-06-19 07:33:13
222.186.169.192 attackspam
Scanned 59 times in the last 24 hours on port 22
2020-06-19 08:05:33
196.38.70.24 attack
736. On Jun 18 2020 experienced a Brute Force SSH login attempt -> 8 unique times by 196.38.70.24.
2020-06-19 07:34:56
117.122.208.145 attackbotsspam
" "
2020-06-19 08:00:09
123.49.47.26 attackbots
srv02 SSH BruteForce Attacks 22 ..
2020-06-19 07:48:33
111.231.87.209 attackspambots
2020-06-19T00:54:10.413070mail.standpoint.com.ua sshd[27520]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.87.209
2020-06-19T00:54:10.410226mail.standpoint.com.ua sshd[27520]: Invalid user boss from 111.231.87.209 port 41276
2020-06-19T00:54:11.821577mail.standpoint.com.ua sshd[27520]: Failed password for invalid user boss from 111.231.87.209 port 41276 ssh2
2020-06-19T00:57:31.559838mail.standpoint.com.ua sshd[27981]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.231.87.209  user=apache
2020-06-19T00:57:33.565310mail.standpoint.com.ua sshd[27981]: Failed password for apache from 111.231.87.209 port 51440 ssh2
...
2020-06-19 07:53:12
132.232.10.144 attack
Invalid user zxp from 132.232.10.144 port 49800
2020-06-19 07:33:55

Recently Reported IPs

181.197.90.190 218.80.251.10 92.242.198.250 139.180.213.200
86.125.178.205 85.255.232.4 179.97.24.234 104.237.253.203
189.127.107.167 213.118.198.82 109.103.51.74 79.85.235.126
13.244.204.123 112.65.157.165 76.183.82.47 115.63.185.142
61.173.72.107 52.160.192.165 95.70.111.106 245.203.222.40