Must be a valid IPv4 or IPv6 ip address, e.g. 127.0.0.1 or 2001:DB8:0:0:8:800:200C:417A
Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:
No discussion about this IP yet. Click above link to make one.
Comments on same subnet:
IP Type Details Datetime
116.58.242.174 attack
1433/tcp
[2019-10-31]1pkt
2019-10-31 18:02:39
116.58.242.150 attackbots
Port Scan
2019-10-29 21:18:48
116.58.242.13 attack
@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 02:26:28,328 INFO [amun_request_handler] PortScan Detected on Port: 445 (116.58.242.13)
2019-07-11 16:43:25
Whois info:
b
Dig info:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.58.242.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10586
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.58.242.3.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 54 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 04 19:32:17 CST 2022
;; MSG SIZE  rcvd: 105
Host info
Host 3.242.58.116.in-addr.arpa. not found: 3(NXDOMAIN)
Nslookup info:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 3.242.58.116.in-addr.arpa: NXDOMAIN
Related IP info:
Related comments:
IP Type Details Datetime
79.137.79.167 attack
SSH brutforce
2020-06-16 12:58:33
104.236.33.155 attack
2020-06-16T05:57:38+0200 Failed SSH Authentication/Brute Force Attack. (Server 9)
2020-06-16 12:40:32
212.70.149.2 attackbots
2020-06-16T06:39:43.164295www postfix/smtpd[10989]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-16T06:40:20.424147www postfix/smtpd[10989]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
2020-06-16T06:40:57.278876www postfix/smtpd[10989]: warning: unknown[212.70.149.2]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...
2020-06-16 12:41:34
14.232.160.213 attackbotsspam
2020-06-16T04:39:42.503589shield sshd\[467\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.160.213  user=root
2020-06-16T04:39:43.960733shield sshd\[467\]: Failed password for root from 14.232.160.213 port 35260 ssh2
2020-06-16T04:43:51.934870shield sshd\[1068\]: Invalid user usr01 from 14.232.160.213 port 35638
2020-06-16T04:43:51.940882shield sshd\[1068\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.232.160.213
2020-06-16T04:43:53.583393shield sshd\[1068\]: Failed password for invalid user usr01 from 14.232.160.213 port 35638 ssh2
2020-06-16 12:44:38
218.92.0.175 attackspam
Jun 16 06:05:31 tuxlinux sshd[10909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175  user=root
Jun 16 06:05:33 tuxlinux sshd[10909]: Failed password for root from 218.92.0.175 port 29540 ssh2
Jun 16 06:05:31 tuxlinux sshd[10909]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.175  user=root
Jun 16 06:05:33 tuxlinux sshd[10909]: Failed password for root from 218.92.0.175 port 29540 ssh2
...
2020-06-16 12:18:19
58.69.251.165 attack
Brute forcing RDP port 3389
2020-06-16 12:55:51
83.209.255.221 attack
Telnet Honeypot -> Telnet Bruteforce / Login
2020-06-16 12:55:30
142.93.211.52 attackspambots
Jun 16 05:54:36 debian-2gb-nbg1-2 kernel: \[14538380.792052\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=142.93.211.52 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=56604 PROTO=TCP SPT=52723 DPT=4151 WINDOW=1024 RES=0x00 SYN URGP=0
2020-06-16 12:51:47
80.211.3.20 attack
2020-06-16T03:50:43.553263shield sshd\[22441\]: Invalid user file from 80.211.3.20 port 47444
2020-06-16T03:50:43.557667shield sshd\[22441\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.3.20
2020-06-16T03:50:45.206143shield sshd\[22441\]: Failed password for invalid user file from 80.211.3.20 port 47444 ssh2
2020-06-16T03:54:51.841717shield sshd\[23472\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.3.20  user=root
2020-06-16T03:54:53.539907shield sshd\[23472\]: Failed password for root from 80.211.3.20 port 47518 ssh2
2020-06-16 12:37:35
222.186.175.216 attackspambots
2020-06-16T07:17:52.252776lavrinenko.info sshd[9845]: Failed password for root from 222.186.175.216 port 47478 ssh2
2020-06-16T07:17:57.165535lavrinenko.info sshd[9845]: Failed password for root from 222.186.175.216 port 47478 ssh2
2020-06-16T07:18:01.890124lavrinenko.info sshd[9845]: Failed password for root from 222.186.175.216 port 47478 ssh2
2020-06-16T07:18:06.750796lavrinenko.info sshd[9845]: Failed password for root from 222.186.175.216 port 47478 ssh2
2020-06-16T07:18:11.820375lavrinenko.info sshd[9845]: Failed password for root from 222.186.175.216 port 47478 ssh2
...
2020-06-16 12:20:45
216.6.201.3 attackspam
SSH brute-force: detected 18 distinct username(s) / 29 distinct password(s) within a 24-hour window.
2020-06-16 12:38:35
153.121.43.228 attackbots
Jun 16 06:21:09 buvik sshd[27496]: Failed password for invalid user dstat from 153.121.43.228 port 33881 ssh2
Jun 16 06:24:34 buvik sshd[27899]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.121.43.228  user=root
Jun 16 06:24:35 buvik sshd[27899]: Failed password for root from 153.121.43.228 port 33880 ssh2
...
2020-06-16 12:29:22
87.251.74.48 attack
Jun 16 04:38:19 *** sshd[2325]: Did not receive identification string from 87.251.74.48
2020-06-16 12:39:06
39.156.9.132 attackbotsspam
Jun 16 03:49:37 ip-172-31-62-245 sshd\[29928\]: Failed password for root from 39.156.9.132 port 42964 ssh2\
Jun 16 03:52:20 ip-172-31-62-245 sshd\[29936\]: Invalid user dolores from 39.156.9.132\
Jun 16 03:52:22 ip-172-31-62-245 sshd\[29936\]: Failed password for invalid user dolores from 39.156.9.132 port 46394 ssh2\
Jun 16 03:55:02 ip-172-31-62-245 sshd\[29963\]: Invalid user smb from 39.156.9.132\
Jun 16 03:55:04 ip-172-31-62-245 sshd\[29963\]: Failed password for invalid user smb from 39.156.9.132 port 49808 ssh2\
2020-06-16 12:27:57
108.53.9.228 attack
Port scan
2020-06-16 12:53:33

Recently Reported IPs

116.58.242.26 116.58.242.250 116.58.242.254 116.58.242.35
12.108.243.113 116.58.242.30 114.106.227.73 116.58.242.32
116.58.242.40 116.58.242.51 116.58.242.45 116.58.242.52
116.58.242.36 114.106.227.98 114.106.4.239 114.106.53.141
114.106.6.121 114.106.7.131 116.58.246.76 116.58.246.87