116.212.150.205

Basic Info

City: Phnom Penh

Region: Phnom Penh

Country: Cambodia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.212.150.99	attack	Automatic report - Port Scan Attack	2019-07-16 07:44:20
116.212.150.7	attack	Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: CONNECT from [116.212.150.7]:53257 to [176.31.12.44]:25 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4314]: addr 116.212.150.7 listed by domain zen.spamhaus.org as 127.0.0.3 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4314]: addr 116.212.150.7 listed by domain zen.spamhaus.org as 127.0.0.4 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4347]: addr 116.212.150.7 listed by domain cbl.abuseat.org as 127.0.0.2 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4315]: addr 116.212.150.7 listed by domain bl.spamcop.net as 127.0.0.2 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4348]: addr 116.212.150.7 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2 Jun 17 07:23:16 mxgate1 postfix/dnsblog[4316]: addr 116.212.150.7 listed by domain b.barracudacentral.org as 127.0.0.2 Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: PREGREET 22 after 0.52 from [116.212.150.7]:53257: EHLO 1122gilford.com Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: DNSBL rank 6 for [116........ -------------------------------	2019-06-22 04:36:27

Type

Details

Datetime

116.212.150.99

attack

Automatic report - Port Scan Attack

2019-07-16 07:44:20

116.212.150.7

attack

Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: CONNECT from [116.212.150.7]:53257 to [176.31.12.44]:25
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4314]: addr 116.212.150.7 listed by domain zen.spamhaus.org as 127.0.0.3
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4314]: addr 116.212.150.7 listed by domain zen.spamhaus.org as 127.0.0.4
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4347]: addr 116.212.150.7 listed by domain cbl.abuseat.org as 127.0.0.2
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4315]: addr 116.212.150.7 listed by domain bl.spamcop.net as 127.0.0.2
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4348]: addr 116.212.150.7 listed by domain ix.dnsbl.xxxxxx.net as 127.0.0.2
Jun 17 07:23:16 mxgate1 postfix/dnsblog[4316]: addr 116.212.150.7 listed by domain b.barracudacentral.org as 127.0.0.2
Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: PREGREET 22 after 0.52 from [116.212.150.7]:53257: EHLO 1122gilford.com

Jun 17 07:23:16 mxgate1 postfix/postscreen[3992]: DNSBL rank 6 for [116........
-------------------------------

2019-06-22 04:36:27

Whois info:

Dig info:

b'
; <<>> DiG 9.11.3-1ubuntu1.15-Ubuntu <<>> 116.212.150.205
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30340
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 65494
;; QUESTION SECTION:
;116.212.150.205.		IN	A

;; Query time: 1 msec
;; SERVER: 127.0.0.53#53(127.0.0.53)
;; WHEN: Sat Jun 26 18:10:40 CST 2021
;; MSG SIZE  rcvd: 44

'

Host info

Host 205.150.212.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 205.150.212.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.30.76	attackspam	Apr 6 09:39:05 santamaria sshd\[30133\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root Apr 6 09:39:07 santamaria sshd\[30133\]: Failed password for root from 222.186.30.76 port 15068 ssh2 Apr 6 09:39:09 santamaria sshd\[30133\]: Failed password for root from 222.186.30.76 port 15068 ssh2 ...	2020-04-06 15:42:25
106.13.233.102	attack	$f2bV_matches	2020-04-06 15:48:29
198.20.103.242	attackspambots	Unauthorized connection attempt detected from IP address 198.20.103.242 to port 8443	2020-04-06 16:00:21
85.96.191.90	attackspam	Automatic report - Port Scan Attack	2020-04-06 16:34:07
37.159.137.186	attackspambots	DATE:2020-04-06 05:53:43, IP:37.159.137.186, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-04-06 15:46:30
182.54.159.246	attack	Apr 6 08:45:29 * sshd[7756]: Failed password for root from 182.54.159.246 port 35684 ssh2	2020-04-06 15:43:23
150.109.147.145	attackspam	2020-04-06T05:46:28.849285rocketchat.forhosting.nl sshd[17362]: Failed password for root from 150.109.147.145 port 35564 ssh2 2020-04-06T05:52:58.598842rocketchat.forhosting.nl sshd[17581]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.109.147.145 user=root 2020-04-06T05:53:01.505420rocketchat.forhosting.nl sshd[17581]: Failed password for root from 150.109.147.145 port 47404 ssh2 ...	2020-04-06 16:23:14
157.55.39.159	attackbotsspam	Automatic report - Banned IP Access	2020-04-06 16:01:12
100.0.240.94	attackbotsspam	Unauthorized connection attempt detected from IP address 100.0.240.94 to port 445	2020-04-06 16:22:46
83.36.48.61	attackbots	Apr 6 05:19:14 ws24vmsma01 sshd[97057]: Failed password for root from 83.36.48.61 port 43966 ssh2 ...	2020-04-06 16:34:59
117.66.243.77	attackbotsspam	Apr 6 05:57:41 vps333114 sshd[26755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.66.243.77 user=root Apr 6 05:57:43 vps333114 sshd[26755]: Failed password for root from 117.66.243.77 port 50144 ssh2 ...	2020-04-06 15:54:20
62.210.246.117	attackspambots	Automatic report - Port Scan	2020-04-06 16:02:35
218.31.112.50	attackspambots	2020-04-06T05:48:48.297993rocketchat.forhosting.nl sshd[17436]: Failed password for root from 218.31.112.50 port 49007 ssh2 2020-04-06T05:53:28.198135rocketchat.forhosting.nl sshd[17601]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.31.112.50 user=root 2020-04-06T05:53:30.553178rocketchat.forhosting.nl sshd[17601]: Failed password for root from 218.31.112.50 port 38015 ssh2 ...	2020-04-06 15:57:04
183.89.215.68	attackbotsspam	(imapd) Failed IMAP login from 183.89.215.68 (TH/Thailand/mx-ll-183.89.215-68.dynamic.3bb.in.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Apr 6 08:23:27 ir1 dovecot[566034]: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=, method=PLAIN, rip=183.89.215.68, lip=5.63.12.44, TLS: Connection closed, session=	2020-04-06 15:49:25
98.212.194.0	attackspambots	Apr 6 05:53:04 mout sshd[14894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=98.212.194.0 user=pi Apr 6 05:53:07 mout sshd[14894]: Failed password for pi from 98.212.194.0 port 49308 ssh2 Apr 6 05:53:07 mout sshd[14894]: Connection closed by 98.212.194.0 port 49308 [preauth]	2020-04-06 16:19:15

Recently Reported IPs

13.92.91.107	31.6.96.215	133.32.224.203	175.158.36.167
146.70.25.16	195.215.121.12	173.235.224.49	104.228.102.128
54.194.25.162	185.129.113.153	98.222.214.32	186.145.234.60
177.188.50.176	112.211.13.115	179.43.145.246	222.252.127.182
174.253.128.104	162.158.63.19	80.82.76.46	196.19.136.113