116.212.139.45

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.212.139.203	attack	Jun 16 05:52:14 prod4 vsftpd\[14225\]: \[anonymous\] FAIL LOGIN: Client "116.212.139.203" Jun 16 05:52:17 prod4 vsftpd\[14232\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203" Jun 16 05:52:20 prod4 vsftpd\[14236\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203" Jun 16 05:52:31 prod4 vsftpd\[14243\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203" Jun 16 05:52:47 prod4 vsftpd\[14283\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203" ...	2020-06-16 14:05:47

Type

Details

Datetime

116.212.139.203

attack

Jun 16 05:52:14 prod4 vsftpd\[14225\]: \[anonymous\] FAIL LOGIN: Client "116.212.139.203"
Jun 16 05:52:17 prod4 vsftpd\[14232\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203"
Jun 16 05:52:20 prod4 vsftpd\[14236\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203"
Jun 16 05:52:31 prod4 vsftpd\[14243\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203"
Jun 16 05:52:47 prod4 vsftpd\[14283\]: \[lac-blanc\] FAIL LOGIN: Client "116.212.139.203"
...

2020-06-16 14:05:47

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.212.139.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14750
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.212.139.45.			IN	A

;; AUTHORITY SECTION:
.			362	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022001 1800 900 604800 86400

;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 21 05:46:59 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 45.139.212.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 45.139.212.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
177.44.88.168	attack	REQUESTED PAGE: /wp-admin/admin.php?page=newsletters-history&wpmlmethod=exportdownload&file=../wp-config.php	2020-03-04 02:42:22
123.148.209.236	attackbots	123.148.209.236 - - [30/Dec/2019:03:08:57 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 123.148.209.236 - - [30/Dec/2019:03:08:58 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" ...	2020-03-04 02:09:28
104.152.52.39	attackspambots	Nov 28 16:47:24 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:5a:1a:41:08:00 SRC=104.152.52.39 DST=109.74.200.221 LEN=76 TOS=0x00 PREC=0x00 TTL=243 ID=1141 PROTO=UDP SPT=59552 DPT=123 LEN=56 ...	2020-03-04 02:29:47
123.20.179.114	attack	Dec 1 02:05:40 mercury auth[29123]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=123.20.179.114 ...	2020-03-04 02:22:09
113.64.92.19	attackbotsspam	Jan 23 22:36:29 mercury smtpd[1181]: 7f951e37bd386b47 smtp event=failed-command address=113.64.92.19 host=113.64.92.19 command="RCPT TO:" result="550 Invalid recipient" ...	2020-03-04 02:10:00
103.127.65.40	attackspam	Jan 5 19:09:18 mercury wordpress(www.learnargentinianspanish.com)[25692]: XML-RPC authentication failure for josh from 103.127.65.40 ...	2020-03-04 01:59:13
103.73.102.130	attack	[Thu Nov 21 09:06:31.194975 2019] [access_compat:error] [pid 14650] [client 103.73.102.130:50224] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2020-03-04 02:05:47
103.111.83.26	attack	Feb 11 18:54:46 mercury wordpress(www.learnargentinianspanish.com)[14449]: XML-RPC authentication failure for josh from 103.111.83.26 ...	2020-03-04 02:16:00
139.196.236.152	attackbotsspam	REQUESTED PAGE: /wp-admin/edit.php?page=wp-db-backup.php&backup=../wp-config.php	2020-03-04 02:35:46
123.20.25.109	attackspambots	Jan 19 02:20:50 mercury auth[10049]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=123.20.25.109 ...	2020-03-04 02:17:20
138.97.3.139	attack	Nov 26 11:31:27 mercury auth[30111]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=josh@learnargentinianspanish.com rhost=138.97.3.139 ...	2020-03-04 02:09:09
123.148.145.1	attack	123.148.145.1 - - [16/Dec/2019:02:44:50 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" 123.148.145.1 - - [16/Dec/2019:02:44:51 +0000] "POST /xmlrpc.php HTTP/1.1" 301 596 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36" ...	2020-03-04 02:39:53
112.196.23.52	attackspam	Feb 6 20:46:09 mercury smtpd[1166]: dfd1119160807f03 smtp event=failed-command address=112.196.23.52 host=112.196.23.52 command="RCPT to:" result="550 Invalid recipient" ...	2020-03-04 02:11:20
180.250.162.9	attackbots	Mar 3 17:20:16 lnxweb62 sshd[4038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.162.9 Mar 3 17:20:16 lnxweb62 sshd[4038]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.250.162.9	2020-03-04 02:23:22
45.129.3.91	attack	SSH Brute Force	2020-03-04 02:31:02

Recently Reported IPs

116.204.230.20	116.212.190.255	116.206.59.30	116.206.59.140
116.22.132.1	116.224.98.103	116.227.233.60	116.227.244.42
116.228.55.177	116.23.16.145	116.230.30.31	116.235.119.108
116.235.128.159	116.238.78.157	116.24.101.144	116.24.153.192
116.24.189.183	116.24.56.172	116.241.45.46	116.24.59.216