116.209.52.142

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.209.52.90	attackbots	spam (f2b h2)	2020-09-02 04:05:34
116.209.52.67	attackspambots	spam (f2b h2)	2020-09-02 03:49:56

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.209.52.142
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 5264
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.209.52.142.			IN	A

;; AUTHORITY SECTION:
.			312	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 50 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 19:01:49 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 142.52.209.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 142.52.209.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
1.179.220.208	attack	Sep 21 18:15:46 plex sshd[14098]: Invalid user lauritz from 1.179.220.208 port 55678	2019-09-22 00:17:30
46.109.208.171	attackbotsspam	" "	2019-09-22 00:07:19
159.224.110.184	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 21-09-2019 13:55:22.	2019-09-22 00:38:28
77.247.108.220	attack	\[2019-09-21 11:29:00\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password \[2019-09-21 11:29:00\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:00.822-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c1c4788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/6796",Challenge="502bfb2e",ReceivedChallenge="502bfb2e",ReceivedHash="6e44134dea64af6f0c8a48bfd0ac1362" \[2019-09-21 11:29:01\] NOTICE\[2270\] chan_sip.c: Registration from '"4009" \' failed for '77.247.108.220:6796' - Wrong password \[2019-09-21 11:29:01\] SECURITY\[2283\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-21T11:29:01.030-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="4009",SessionID="0x7fcd8c409238",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4	2019-09-22 00:09:55
165.22.58.247	attackbotsspam	Sep 21 16:12:44 venus sshd\[23702\]: Invalid user I2b2demodata2 from 165.22.58.247 port 46828 Sep 21 16:12:44 venus sshd\[23702\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=165.22.58.247 Sep 21 16:12:47 venus sshd\[23702\]: Failed password for invalid user I2b2demodata2 from 165.22.58.247 port 46828 ssh2 ...	2019-09-22 00:13:54
190.220.147.114	attackbotsspam	Attempt to attack host OS, exploiting network vulnerabilities, on 21-09-2019 13:55:24.	2019-09-22 00:35:23
58.150.46.6	attackspam	2019-09-21T16:15:36.058279abusebot-7.cloudsearch.cf sshd\[16636\]: Invalid user developer from 58.150.46.6 port 38898	2019-09-22 00:25:06
181.113.61.2	attackspambots	Attempt to attack host OS, exploiting network vulnerabilities, on 21-09-2019 13:55:24.	2019-09-22 00:36:06
58.59.12.99	attack	SMB Server BruteForce Attack	2019-09-22 00:41:09
116.31.140.220	attackbotsspam	FTP: login Brute Force attempt, PTR: PTR record not found	2019-09-22 00:12:20
43.225.180.227	attackbotsspam	2019-09-21T12:55:25.185821abusebot-7.cloudsearch.cf sshd\[15877\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.225.180.227 user=root	2019-09-22 00:36:31
220.85.233.145	attack	Sep 21 10:54:24 ny01 sshd[17337]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145 Sep 21 10:54:26 ny01 sshd[17337]: Failed password for invalid user xdn from 220.85.233.145 port 38680 ssh2 Sep 21 10:59:34 ny01 sshd[18791]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.85.233.145	2019-09-22 00:13:03
219.135.194.77	attack	Sep 21 18:23:27 mail postfix/smtpd[10851]: warning: unknown[219.135.194.77]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 18:23:35 mail postfix/smtpd[10851]: warning: unknown[219.135.194.77]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 21 18:23:48 mail postfix/smtpd[10851]: warning: unknown[219.135.194.77]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-09-22 00:48:23
1.196.223.50	attack	[Aegis] @ 2019-09-21 15:58:12 0100 -> Attempted Administrator Privilege Gain: ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack	2019-09-22 00:25:25
78.133.136.142	attack	Sep 21 05:58:19 eddieflores sshd\[19313\]: Invalid user office from 78.133.136.142 Sep 21 05:58:20 eddieflores sshd\[19313\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxy.biomed.lublin.pl Sep 21 05:58:22 eddieflores sshd\[19313\]: Failed password for invalid user office from 78.133.136.142 port 55330 ssh2 Sep 21 06:03:07 eddieflores sshd\[19752\]: Invalid user admire from 78.133.136.142 Sep 21 06:03:07 eddieflores sshd\[19752\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=proxy.biomed.lublin.pl	2019-09-22 00:06:19

Recently Reported IPs

116.209.52.14	116.209.52.146	114.105.21.4	116.209.52.144
116.209.52.150	116.209.52.152	116.209.52.158	116.209.52.154
116.209.52.156	116.209.52.16	116.209.52.148	114.105.220.106
116.209.52.160	114.105.220.120	114.105.220.133	114.105.220.135
138.108.21.174	114.105.220.138	114.105.220.143	114.105.220.15