AbuseIPDB » 116.255.254.185

116.255.254.185 was found in our database!

This IP was reported 5,931 times. Confidence of Abuse is 36%: ?

36%

ISP	Zhengzhou Gainet Computer Network Technology Co.,Ltd.
Usage Type	Fixed Line ISP
ASN	AS4837
Domain Name	gainet.cn
Country	China
City	Zhengzhou, Henan

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 116.255.254.185

Whois 116.255.254.185

IP Abuse Reports for 116.255.254.185:

This IP address has been reported a total of 5,931 times from 214 distinct sources. 116.255.254.185 was first reported on June 27th 2024, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
Anonymous	2025-02-04 13:08:58 (4 months ago)	Feb 4 15:06:55 zadana sshd[192439]: Invalid user admin from 116.255.254.185 port 56485 ...	Brute-Force SSH
Godert Jan van Manen	2025-02-04 12:35:10 (4 months ago)	Feb 4 13:32:01 odin dovecot: auth-worker(24561): sql([email protected],116.255.254.185,<d3IhMlAt ... show moreFeb 4 13:32:01 odin dovecot: auth-worker(24561): sql([email protected],116.255.254.185,<d3IhMlAt9Lt0//65>): unknown user Feb 4 13:32:03 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<d3IhMlAt9Lt0//65> Feb 4 13:32:53 odin dovecot: auth-worker(24561): sql([email protected],116.255.254.185,<kiU6NVAthIt0//65>): unknown user Feb 4 13:32:55 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<kiU6NVAthIt0//65> Feb 4 13:35:10 odin dovecot: auth-worker(31498): sql([email protected],116.255.254.185,<l+haPVAtocx0//65>): unknown user show less	Brute-Force
Bytemark	2025-02-04 12:26:51 (4 months ago)	Feb 4 12:17:00 dlcentre3 sshd[18523]: Failed password for root from 116.255.254.185 port 59172 ssh2	Brute-Force SSH
Godert Jan van Manen	2025-02-04 11:19:34 (4 months ago)	Feb 4 12:16:25 odin dovecot: auth-worker(12143): sql([email protected],116.255.254.185,<Woa3I08t ... show moreFeb 4 12:16:25 odin dovecot: auth-worker(12143): sql([email protected],116.255.254.185,<Woa3I08tcJh0//65>): unknown user Feb 4 12:16:27 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<Woa3I08tcJh0//65> Feb 4 12:17:15 odin dovecot: auth-worker(12143): sql([email protected],116.255.254.185,<IxGzJk8tEdd0//65>): unknown user Feb 4 12:17:17 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<IxGzJk8tEdd0//65> Feb 4 12:19:34 odin dovecot: auth-worker(12143): sql([email protected],116.255.254.185,<Ebb7Lk8tGax0//65>): unknown user show less	Brute-Force
Bytemark	2025-02-04 11:17:00 (4 months ago)	Feb 4 11:08:43 dlcentre3 sshd[18714]: Failed password for root from 116.255.254.185 port 51174 ssh2	Brute-Force SSH
Anonymous	2025-02-04 11:12:41 (4 months ago)	116.255.254.185 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Po ... show more116.255.254.185 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Feb 4 06:11:31 server2 sshd[962]: Failed password for root from 14.103.107.252 port 42394 ssh2 Feb 4 06:12:35 server2 sshd[1405]: Failed password for root from 5.165.89.64 port 36984 ssh2 Feb 4 06:08:06 server2 sshd[32037]: Failed password for root from 116.255.254.185 port 45967 ssh2 Feb 4 06:04:56 server2 sshd[30632]: Failed password for root from 45.245.61.114 port 37388 ssh2 Feb 4 06:11:32 server2 sshd[970]: Failed password for root from 14.103.107.252 port 42398 ssh2 IP Addresses Blocked: 14.103.107.252 (CN/China/-) 5.165.89.64 (RU/Russia/-) show less	Brute-Force
tecnicorioja	2025-02-04 11:00:34 (4 months ago)	Failed password for invalid user Feb 04 08:06:35 port 54973	Brute-Force SSH
Bytemark	2025-02-04 10:12:09 (4 months ago)	Feb 4 10:10:30 dlcentre3 sshd[22234]: Failed password for root from 116.255.254.185 port 50805 ssh2	Brute-Force SSH
Godert Jan van Manen	2025-02-04 10:08:27 (4 months ago)	Feb 4 11:05:11 odin dovecot: auth-worker(19999): sql([email protected],116.255.254.185,< ... show moreFeb 4 11:05:11 odin dovecot: auth-worker(19999): sql([email protected],116.255.254.185,<fBwEJU4tTIl0//65>): unknown user Feb 4 11:05:13 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<fBwEJU4tTIl0//65> Feb 4 11:08:18 odin dovecot: auth-worker(19999): sql([email protected],116.255.254.185,<ygwbME4tLp50//65>): unknown user Feb 4 11:08:20 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<ygwbME4tLp50//65> Feb 4 11:08:27 odin dovecot: auth-worker(19999): sql([email protected],116.255.254.185,<OfdmME4tWKZ0//65>): unknown user show less	Brute-Force
Godert Jan van Manen	2025-02-04 09:27:59 (4 months ago)	Feb 4 10:21:43 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185 ... show moreFeb 4 10:21:43 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185,<FxWPiU0thcl0//65>): unknown user Feb 4 10:21:45 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<FxWPiU0thcl0//65> Feb 4 10:24:25 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185,<L9szk00t3sF0//65>): unknown user Feb 4 10:24:27 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<L9szk00t3sF0//65> Feb 4 10:27:59 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185,<MnTvn00t8Yl0//65>): unknown user show less	Brute-Force
Bytemark	2025-02-04 09:22:10 (4 months ago)	Feb 4 09:22:08 dlcentre3 sshd[28059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreFeb 4 09:22:08 dlcentre3 sshd[28059]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.254.185 Feb 4 09:22:10 dlcentre3 sshd[28059]: Failed password for invalid user distancelearningcentre from 116.255.254.185 port 54807 ssh2 show less	Brute-Force SSH
vbios.com	2025-02-04 09:11:21 (4 months ago)	SSH_Brute-Force	Brute-Force
Godert Jan van Manen	2025-02-04 09:06:32 (4 months ago)	Feb 4 10:01:21 odin dovecot: auth-worker(8969): sql([email protected],116.255.254.1 ... show moreFeb 4 10:01:21 odin dovecot: auth-worker(8969): sql([email protected],116.255.254.185,<hf64QE0trLV0//65>): unknown user Feb 4 10:01:23 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<hf64QE0trLV0//65> Feb 4 10:04:01 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185,<0C43Sk0tUqd0//65>): unknown user Feb 4 10:04:03 odin dovecot: pop3-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=116.255.254.185, lip=178.162.131.122, session=<0C43Sk0tUqd0//65> Feb 4 10:06:31 odin dovecot: auth-worker(13106): sql([email protected],116.255.254.185,<AEQzU00to4p0//65>): unknown user show less	Brute-Force
Bytemark	2025-02-04 08:54:23 (4 months ago)	Feb 4 08:54:20 dlcentre3 sshd[16877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 e ... show moreFeb 4 08:54:20 dlcentre3 sshd[16877]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.254.185 Feb 4 08:54:22 dlcentre3 sshd[16877]: Failed password for invalid user distancelearningcentre from 116.255.254.185 port 45273 ssh2 show less	Brute-Force SSH
KIsmay	2025-02-04 08:52:51 (4 months ago)	Feb 4 03:46:26 www3 sshd[413034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid= ... show moreFeb 4 03:46:26 www3 sshd[413034]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.254.185 user=root Feb 4 03:46:28 www3 sshd[413034]: Failed password for root from 116.255.254.185 port 58539 ssh2 Feb 4 03:52:49 www3 sshd[413331]: Invalid user dehnel from 116.255.254.185 port 42488 Feb 4 03:52:50 www3 sshd[413331]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.255.254.185 Feb 4 03:52:51 www3 sshd[413331]: Failed password for invalid user dehnel from 116.255.254.185 port 42488 ssh2 ... show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩