Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Singapore

Internet Service Provider: StarHub Cable Vision Ltd

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:
Type Details Datetime
attackspam
Aug  6 13:41:46 mail sshd\[1413\]: Failed password for invalid user cynthia from 116.89.53.66 port 52184 ssh2
Aug  6 13:57:36 mail sshd\[1610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66  user=root
...
2019-08-06 21:11:19
attack
Aug  1 01:01:03 MK-Soft-Root2 sshd\[669\]: Invalid user mint from 116.89.53.66 port 55794
Aug  1 01:01:03 MK-Soft-Root2 sshd\[669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
Aug  1 01:01:05 MK-Soft-Root2 sshd\[669\]: Failed password for invalid user mint from 116.89.53.66 port 55794 ssh2
...
2019-08-01 07:28:52
attackbots
Jul 30 16:27:24 ArkNodeAT sshd\[7753\]: Invalid user usuario from 116.89.53.66
Jul 30 16:27:24 ArkNodeAT sshd\[7753\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
Jul 30 16:27:25 ArkNodeAT sshd\[7753\]: Failed password for invalid user usuario from 116.89.53.66 port 48084 ssh2
2019-07-30 23:13:08
attackbots
Jul  5 00:46:25 lnxweb62 sshd[11444]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.89.53.66
2019-07-05 13:28:57
attackspam
Automatic report - Web App Attack
2019-06-22 18:29:59
Comments on same subnet:
No discussion about this subnet yet..
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.89.53.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16354
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.89.53.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019062201 1800 900 604800 86400

;; Query time: 5 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Jun 22 18:29:52 CST 2019
;; MSG SIZE  rcvd: 116
Host info
66.53.89.116.in-addr.arpa domain name pointer 66.53.89.116.starhub.net.sg.
Nslookup info:
Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
66.53.89.116.in-addr.arpa	name = 66.53.89.116.starhub.net.sg.

Authoritative answers can be found from:
Related IP info:
Related comments:
IP Type Details Datetime
14.18.236.20 attack
445/tcp 445/tcp 445/tcp...
[2019-05-24/07-11]22pkt,1pt.(tcp)
2019-07-11 16:37:11
177.154.237.187 attackbots
failed_logins
2019-07-11 16:18:19
188.131.141.187 attackspambots
2019-07-11T06:10:51.348243lon01.zurich-datacenter.net sshd\[4257\]: Invalid user wangy from 188.131.141.187 port 37248
2019-07-11T06:10:51.352410lon01.zurich-datacenter.net sshd\[4257\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.141.187
2019-07-11T06:10:53.122402lon01.zurich-datacenter.net sshd\[4257\]: Failed password for invalid user wangy from 188.131.141.187 port 37248 ssh2
2019-07-11T06:13:22.567404lon01.zurich-datacenter.net sshd\[4297\]: Invalid user apeitpanthiya from 188.131.141.187 port 32936
2019-07-11T06:13:22.573091lon01.zurich-datacenter.net sshd\[4297\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.141.187
...
2019-07-11 16:58:31
201.245.1.107 attackspam
Invalid user randy from 201.245.1.107 port 33320
2019-07-11 16:50:16
117.4.56.55 attack
445/tcp 445/tcp
[2019-05-17/07-11]2pkt
2019-07-11 16:13:29
175.22.165.193 attack
5500/tcp 5500/tcp
[2019-07-07/11]2pkt
2019-07-11 16:48:06
86.57.175.61 attackspam
EventTime:Thu Jul 11 13:50:37 AEST 2019,EventName:Client denied: configuration,TargetDataNamespace:/,TargetDataContainer:srv/www/isag.melbourne/site/, referer: http://isag.melbourne/,TargetDataName:E_NULL,SourceIP:86.57.175.61,VendorOutcomeCode:E_NULL,InitiatorServiceName:58096
2019-07-11 16:30:38
77.247.110.191 attack
Jul 11 09:29:24 h2177944 kernel: \[1154436.739175\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=443 TOS=0x00 PREC=0x00 TTL=58 ID=25437 DF PROTO=UDP SPT=5069 DPT=65111 LEN=423 
Jul 11 09:29:52 h2177944 kernel: \[1154464.436401\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=31113 DF PROTO=UDP SPT=5092 DPT=65221 LEN=421 
Jul 11 09:30:07 h2177944 kernel: \[1154479.786271\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=443 TOS=0x00 PREC=0x00 TTL=58 ID=34270 DF PROTO=UDP SPT=5070 DPT=65102 LEN=423 
Jul 11 09:30:18 h2177944 kernel: \[1154490.973628\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=36530 DF PROTO=UDP SPT=5077 DPT=65030 LEN=421 
Jul 11 09:30:43 h2177944 kernel: \[1154515.509588\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=77.247.110.191 DST=85.214.117.9 LEN=441 TOS=0x00 PREC=0x00 TTL=58 ID=41461 DF PROTO=UDP SPT=5063 DPT=65171 LEN
2019-07-11 16:24:07
103.76.22.141 attackspambots
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:21:33,316 INFO [amun_request_handler] PortScan Detected on Port: 445 (103.76.22.141)
2019-07-11 16:51:19
102.165.35.71 attackspam
445/tcp 445/tcp
[2019-05-15/07-11]2pkt
2019-07-11 16:39:27
200.207.63.165 attack
Jul 11 08:51:09 vps647732 sshd[21322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.207.63.165
Jul 11 08:51:11 vps647732 sshd[21322]: Failed password for invalid user google from 200.207.63.165 port 43493 ssh2
...
2019-07-11 16:49:57
186.96.254.239 attack
445/tcp 445/tcp 445/tcp...
[2019-05-11/07-11]13pkt,1pt.(tcp)
2019-07-11 16:46:47
121.129.217.90 attack
21/tcp 21/tcp 21/tcp...
[2019-07-06/11]4pkt,1pt.(tcp)
2019-07-11 16:10:05
117.247.122.194 attackspam
Unauthorised access (Jul 11) SRC=117.247.122.194 LEN=52 PREC=0x20 TTL=112 ID=13916 DF TCP DPT=445 WINDOW=8192 SYN
2019-07-11 17:02:21
72.34.113.202 attackspam
Telnet Server BruteForce Attack
2019-07-11 16:55:22

Recently Reported IPs

181.197.90.190 218.80.251.10 92.242.198.250 139.180.213.200
86.125.178.205 85.255.232.4 179.97.24.234 104.237.253.203
189.127.107.167 213.118.198.82 109.103.51.74 79.85.235.126
13.244.204.123 112.65.157.165 76.183.82.47 115.63.185.142
61.173.72.107 52.160.192.165 95.70.111.106 245.203.222.40