116.58.242.13 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: CAT Telecom Public Company Ltd

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:26:28,328 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.58.242.13)	2019-07-11 16:43:25

Comments on same subnet:

IP	Type	Details	Datetime
116.58.242.174	attack	1433/tcp [2019-10-31]1pkt	2019-10-31 18:02:39
116.58.242.150	attackbots	Port Scan	2019-10-29 21:18:48

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.58.242.13
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18398
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.58.242.13.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071002 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Thu Jul 11 16:43:19 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 13.242.58.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 13.242.58.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.72	attackbotsspam	Sep 27 17:49:34 pkdns2 sshd\[28707\]: Failed password for root from 49.88.112.72 port 55029 ssh2Sep 27 17:51:38 pkdns2 sshd\[28811\]: Failed password for root from 49.88.112.72 port 15954 ssh2Sep 27 17:57:48 pkdns2 sshd\[29082\]: Failed password for root from 49.88.112.72 port 37399 ssh2Sep 27 17:57:50 pkdns2 sshd\[29082\]: Failed password for root from 49.88.112.72 port 37399 ssh2Sep 27 17:57:52 pkdns2 sshd\[29082\]: Failed password for root from 49.88.112.72 port 37399 ssh2Sep 27 17:58:49 pkdns2 sshd\[29115\]: Failed password for root from 49.88.112.72 port 45475 ssh2 ...	2020-09-27 23:14:56
187.146.33.125	attackspambots	445/tcp [2020-09-26]1pkt	2020-09-27 22:55:44
198.27.82.155	attackspam	SSH BruteForce Attack	2020-09-27 23:10:37
106.13.47.6	attackspambots	Sep 27 07:41:09 mail sshd\[44993\]: Invalid user student from 106.13.47.6 Sep 27 07:41:09 mail sshd\[44993\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.47.6 ...	2020-09-27 23:06:20
59.23.248.85	attackbotsspam	23/tcp [2020-09-26]1pkt	2020-09-27 23:04:49
192.241.217.152	attackspam	192.241.217.152 - - [27/Sep/2020:15:13:51 +0100] "GET /owa/auth/logon.aspx?url=https%3a%2f%2f1%2fecp%2f HTTP/1.1" 401 188 "-" "Mozilla/5.0 zgrab/0.x"	2020-09-27 22:59:31
189.240.62.227	attackspambots	Sep 27 17:48:32 pkdns2 sshd\[28660\]: Invalid user noreply from 189.240.62.227Sep 27 17:48:35 pkdns2 sshd\[28660\]: Failed password for invalid user noreply from 189.240.62.227 port 43910 ssh2Sep 27 17:52:21 pkdns2 sshd\[28840\]: Invalid user lawrence from 189.240.62.227Sep 27 17:52:23 pkdns2 sshd\[28840\]: Failed password for invalid user lawrence from 189.240.62.227 port 52050 ssh2Sep 27 17:56:28 pkdns2 sshd\[29033\]: Invalid user avendoria from 189.240.62.227Sep 27 17:56:30 pkdns2 sshd\[29033\]: Failed password for invalid user avendoria from 189.240.62.227 port 60212 ssh2 ...	2020-09-27 23:11:09
89.248.168.220	attackspambots	TCP (SYN) 89.248.168.220:39792 -> port 9869, len 44	2020-09-27 22:56:28
124.131.142.255	attackbotsspam	23/tcp [2020-09-26]1pkt	2020-09-27 23:10:23
167.71.218.36	attack	Invalid user data from 167.71.218.36 port 50048	2020-09-27 23:13:31
61.135.152.130	attackspambots	Port probing on unauthorized port 1433	2020-09-27 23:21:41
213.5.17.190	attackbotsspam	Port Scan: TCP/445	2020-09-27 23:07:09
195.154.209.94	attackspam	"sipvicious";tag=3533393765393339313363340131313132383233333235	2020-09-27 23:11:35
13.73.229.162	attackbotsspam	(sshd) Failed SSH login from 13.73.229.162 (NL/Netherlands/-): 5 in the last 3600 secs	2020-09-27 23:03:04
168.63.16.141	attackspambots	Invalid user stemys from 168.63.16.141 port 17166	2020-09-27 23:18:00

Recently Reported IPs

62.28.37.182	219.65.71.10	119.47.178.17	36.84.65.78
78.238.103.249	221.201.212.190	179.42.210.120	186.90.190.190
183.190.130.32	85.96.203.135	42.85.5.59	224.153.14.142
49.143.180.125	177.55.250.228	103.43.76.52	183.62.23.42
68.75.2.18	66.140.170.253	114.31.244.3	190.145.154.164