AbuseIPDB » 218.16.248.54

218.16.248.54 was found in our database!

This IP was reported 187 times. Confidence of Abuse is 0%: ?

0%

ISP	Jinshalu85Haoyouyidasha3Lou
Usage Type	Commercial
Domain Name	chinatelecom.com.cn
Country	China
City	Shantou, Guangdong

IP info including ISP, Usage Type, and Location provided by IP2Location. Updated monthly.

Report 218.16.248.54

Whois 218.16.248.54

IP Abuse Reports for 218.16.248.54:

This IP address has been reported a total of 187 times from 72 distinct sources. 218.16.248.54 was first reported on November 16th 2021, and the most recent report was 5 months ago.

Old Reports: The most recent abuse report for this IP address is from 5 months ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	Date	Comment	Categories
nikoladd	27 Nov 2021	Nov 27 15:10:33 server2 sshd\[24481\]: User root from 218.16.248.54 not allowed because not listed i ... show moreNov 27 15:10:33 server2 sshd\[24481\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 15:11:11 server2 sshd\[24518\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 15:11:51 server2 sshd\[24527\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 15:16:49 server2 sshd\[24891\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 15:17:37 server2 sshd\[24926\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 15:18:32 server2 sshd\[24958\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers show less	Brute-Force
TyphonSolutions	27 Nov 2021	Nov 27 07:38:07 stark sshd[17697]: Received disconnect from 218.16.248.54 port 57352:11: Normal Shut ... show moreNov 27 07:38:07 stark sshd[17697]: Received disconnect from 218.16.248.54 port 57352:11: Normal Shutdown, Thank you for playing [preauth] Nov 27 07:39:06 stark sshd[17701]: Invalid user init from 218.16.248.54 Nov 27 07:40:08 stark sshd[17893]: User root not allowed because account is locked Nov 27 07:40:09 stark sshd[17893]: Received disconnect from 218.16.248.54 port 57054:11: Normal Shutdown, Thank you for playing [preauth] show less	Brute-Force
axilbiotech.com	27 Nov 2021	Nov 27 06:36:53 mail sshd[3416]: Failed password for root from 218.16.248.54 port 34022 ssh2 N ... show moreNov 27 06:36:53 mail sshd[3416]: Failed password for root from 218.16.248.54 port 34022 ssh2 Nov 27 06:37:46 mail sshd[3418]: Failed password for root from 218.16.248.54 port 33868 ssh2 Nov 27 06:38:41 mail sshd[3420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 Nov 27 06:38:43 mail sshd[3420]: Failed password for invalid user init from 218.16.248.54 port 33712 ssh2 show less	Brute-Force SSH
nikoladd	27 Nov 2021	Nov 27 14:36:45 server2 sshd\[21835\]: User root from 218.16.248.54 not allowed because not listed i ... show moreNov 27 14:36:45 server2 sshd\[21835\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 14:36:51 server2 sshd\[21839\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 14:36:58 server2 sshd\[21843\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 14:37:38 server2 sshd\[21889\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 14:37:45 server2 sshd\[21897\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers Nov 27 14:37:58 server2 sshd\[21899\]: User root from 218.16.248.54 not allowed because not listed in AllowUsers show less	Brute-Force
ShadowWhisperer	27 Nov 2021	Cowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2021-11-27T13:28:53Z and 2021-11-2 ... show moreCowrie Honeypot: 2 unauthorised SSH/Telnet login attempts between 2021-11-27T13:28:53Z and 2021-11-27T13:29:48Z show less	Brute-Force SSH
juguemosalacarioca.com	26 Nov 2021	(sshd) Failed SSH login from 218.16.248.54 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ... show more(sshd) Failed SSH login from 218.16.248.54 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 27 02:07:01 arachne sshd[25212]: Invalid user user from 218.16.248.54 port 41322 Nov 27 02:18:13 arachne sshd[28344]: Invalid user dmdba from 218.16.248.54 port 38690 Nov 27 02:18:59 arachne sshd[28512]: Invalid user huawei from 218.16.248.54 port 58662 Nov 27 02:19:46 arachne sshd[28771]: Invalid user db2inst1 from 218.16.248.54 port 50402 Nov 27 02:20:42 arachne sshd[28941]: Invalid user vbox from 218.16.248.54 port 42142 show less	Port Scan
ghostwarriors	26 Nov 2021	Unauthorized connection attempt detected, SSH Brute-Force	Port Scan Brute-Force SSH
tows	26 Nov 2021	2021-11-27 02:12:27,899 fail2ban.actions [756]: NOTICE [sshd] Ban 218.16.248.54 2021-1 ... show more2021-11-27 02:12:27,899 fail2ban.actions [756]: NOTICE [sshd] Ban 218.16.248.54 2021-11-27 02:17:33,563 fail2ban.actions [756]: NOTICE [sshd] Ban 218.16.248.54 show less	Brute-Force SSH
Anonymous	26 Nov 2021	Nov 26 16:21:33 benjamin sshd[31023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 eu ... show moreNov 26 16:21:33 benjamin sshd[31023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 Nov 26 16:21:35 benjamin sshd[31023]: Failed password for invalid user nginx from 218.16.248.54 port 35922 ssh2 show less	Brute-Force SSH
Anonymous	26 Nov 2021	2021-11-27T00:37:10.597411hz01.yumiweb.com sshd\[32303\]: Invalid user oracle from 218.16.248.54 por ... show more2021-11-27T00:37:10.597411hz01.yumiweb.com sshd\[32303\]: Invalid user oracle from 218.16.248.54 port 40450 2021-11-27T00:45:33.479248hz01.yumiweb.com sshd\[32327\]: Invalid user dmdba from 218.16.248.54 port 48604 2021-11-27T00:53:58.446419hz01.yumiweb.com sshd\[32351\]: Invalid user huawei from 218.16.248.54 port 56758 ... show less	Brute-Force SSH
Anonymous	26 Nov 2021	Nov 26 11:08:25 benjamin sshd[27974]: Failed password for root from 218.16.248.54 port 44442 ssh2	Brute-Force SSH
Bernhard Fürst	26 Nov 2021	(PERMBLOCK) 218.16.248.54 (CN/China/-) has had more than 4 temp blocks in the last 86400 secs; Ports ... show more(PERMBLOCK) 218.16.248.54 (CN/China/-) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: show less	Port Scan
Bernhard Fürst	26 Nov 2021	218.16.248.54 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Port ... show more218.16.248.54 (CN/China/-), 5 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Nov 26 18:41:42 vm1 sshd[2168437]: Failed password for root from 117.248.249.70 port 1344 ssh2 Nov 26 18:35:03 vm1 sshd[2166762]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root Nov 26 18:35:05 vm1 sshd[2166762]: Failed password for root from 218.16.248.54 port 39286 ssh2 Nov 26 18:41:40 vm1 sshd[2168437]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.248.249.70 user=root Nov 26 18:06:45 vm1 sshd[2158491]: Failed password for root from 222.187.232.39 port 28402 ssh2 IP Addresses Blocked: 117.248.249.70 (IN/India/-) show less	Port Scan
Bernhard Fürst	26 Nov 2021	(sshd) Failed SSH login from 218.16.248.54 (CN/China/-): 5 in the last 3600 secs; Ports: *; Directio ... show more(sshd) Failed SSH login from 218.16.248.54 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Nov 26 17:14:22 vm1 sshd[2142069]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root Nov 26 17:14:23 vm1 sshd[2142069]: Failed password for root from 218.16.248.54 port 54228 ssh2 Nov 26 17:20:23 vm1 sshd[2143754]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root Nov 26 17:20:25 vm1 sshd[2143754]: Failed password for root from 218.16.248.54 port 34162 ssh2 Nov 26 17:26:06 vm1 sshd[2145345]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root show less	Port Scan
Wuck	26 Nov 2021	Nov 26 15:03:15 Ubuntu-1404-trusty-64-minimal sshd\[673\]: pam_unix\(sshd:auth\): authentication fai ... show moreNov 26 15:03:15 Ubuntu-1404-trusty-64-minimal sshd\[673\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root Nov 26 15:03:17 Ubuntu-1404-trusty-64-minimal sshd\[673\]: Failed password for root from 218.16.248.54 port 52664 ssh2 Nov 26 15:03:30 Ubuntu-1404-trusty-64-minimal sshd\[676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root Nov 26 15:03:32 Ubuntu-1404-trusty-64-minimal sshd\[676\]: Failed password for root from 218.16.248.54 port 59508 ssh2 Nov 26 15:04:15 Ubuntu-1404-trusty-64-minimal sshd\[680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.16.248.54 user=root show less	Brute-Force SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩