116.58.251.242

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.58.251.228	attack	1583556742 - 03/07/2020 05:52:22 Host: 116.58.251.228/116.58.251.228 Port: 445 TCP Blocked	2020-03-07 18:21:29
116.58.251.161	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-19 20:21:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.58.251.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47429
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.58.251.242.			IN	A

;; AUTHORITY SECTION:
.			571	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Feb 07 21:12:26 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 242.251.58.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 242.251.58.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
46.38.145.249	attack	Jun 22 15:53:05 blackbee postfix/smtpd\[30020\]: warning: unknown\[46.38.145.249\]: SASL LOGIN authentication failed: authentication failure Jun 22 15:53:50 blackbee postfix/smtpd\[30012\]: warning: unknown\[46.38.145.249\]: SASL LOGIN authentication failed: authentication failure Jun 22 15:54:34 blackbee postfix/smtpd\[30019\]: warning: unknown\[46.38.145.249\]: SASL LOGIN authentication failed: authentication failure Jun 22 15:55:18 blackbee postfix/smtpd\[30019\]: warning: unknown\[46.38.145.249\]: SASL LOGIN authentication failed: authentication failure Jun 22 15:56:03 blackbee postfix/smtpd\[30019\]: warning: unknown\[46.38.145.249\]: SASL LOGIN authentication failed: authentication failure ...	2020-06-22 22:59:08
106.54.128.79	attackbots	Jun 22 14:06:07 host sshd[30171]: Invalid user docker from 106.54.128.79 port 33452 ...	2020-06-22 22:24:45
139.59.66.101	attackbots	2020-06-22T15:18:55.291294lavrinenko.info sshd[10817]: Failed password for invalid user mozilla from 139.59.66.101 port 45588 ssh2 2020-06-22T15:21:33.631705lavrinenko.info sshd[10961]: Invalid user banca from 139.59.66.101 port 57536 2020-06-22T15:21:33.639557lavrinenko.info sshd[10961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.66.101 2020-06-22T15:21:33.631705lavrinenko.info sshd[10961]: Invalid user banca from 139.59.66.101 port 57536 2020-06-22T15:21:35.958272lavrinenko.info sshd[10961]: Failed password for invalid user banca from 139.59.66.101 port 57536 ssh2 ...	2020-06-22 22:49:20
70.98.78.88	attackbots	Jun 22 14:16:34 mail.srvfarm.net postfix/smtpd[4136658]: NOQUEUE: reject: RCPT from unknown[70.98.78.88]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:16:34 mail.srvfarm.net postfix/smtpd[4137665]: NOQUEUE: reject: RCPT from unknown[70.98.78.88]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:22:33 mail.srvfarm.net postfix/smtpd[4152829]: NOQUEUE: reject: RCPT from terrify.drivebitz.com[70.98.78.88]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:24:31 mail.srvfarm.net postfix/smtpd[4152829]: NOQUEUE: reject: RCPT from un	2020-06-22 23:03:37
104.236.134.112	attackspam	firewall-block, port(s): 926/tcp	2020-06-22 23:02:56
106.13.63.215	attackbotsspam	Jun 22 06:05:52 Host-KLAX-C sshd[6461]: Invalid user git from 106.13.63.215 port 56344 ...	2020-06-22 22:40:34
45.138.74.161	attack	SpamScore above: 10.0	2020-06-22 22:46:16
113.172.17.34	attackspambots	Lines containing failures of 113.172.17.34 Jun 22 13:43:37 keyhelp sshd[12018]: Invalid user admin from 113.172.17.34 port 41643 Jun 22 13:43:37 keyhelp sshd[12018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.172.17.34 Jun 22 13:43:39 keyhelp sshd[12018]: Failed password for invalid user admin from 113.172.17.34 port 41643 ssh2 Jun 22 13:43:39 keyhelp sshd[12018]: Connection closed by invalid user admin 113.172.17.34 port 41643 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.172.17.34	2020-06-22 22:39:18
85.86.197.164	attack	2020-06-22T14:08:57.565120abusebot-6.cloudsearch.cf sshd[21746]: Invalid user service from 85.86.197.164 port 44978 2020-06-22T14:08:57.570776abusebot-6.cloudsearch.cf sshd[21746]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.85-86-197.dynamic.clientes.euskaltel.es 2020-06-22T14:08:57.565120abusebot-6.cloudsearch.cf sshd[21746]: Invalid user service from 85.86.197.164 port 44978 2020-06-22T14:08:59.315023abusebot-6.cloudsearch.cf sshd[21746]: Failed password for invalid user service from 85.86.197.164 port 44978 ssh2 2020-06-22T14:15:12.369006abusebot-6.cloudsearch.cf sshd[22153]: Invalid user linux from 85.86.197.164 port 44122 2020-06-22T14:15:12.375464abusebot-6.cloudsearch.cf sshd[22153]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=164.85-86-197.dynamic.clientes.euskaltel.es 2020-06-22T14:15:12.369006abusebot-6.cloudsearch.cf sshd[22153]: Invalid user linux from 85.86.197.164 port 44122 2020- ...	2020-06-22 23:08:39
78.128.113.108	attackspambots	(smtpauth) Failed SMTP AUTH login from 78.128.113.108 (BG/Bulgaria/ip-113-108.4vendeta.com): 5 in the last 3600 secs	2020-06-22 23:00:49
106.13.37.213	attackspambots	Jun 22 15:19:15 gestao sshd[28564]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.213 Jun 22 15:19:17 gestao sshd[28564]: Failed password for invalid user qyl from 106.13.37.213 port 54600 ssh2 Jun 22 15:23:15 gestao sshd[28680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.37.213 ...	2020-06-22 22:25:26
69.94.158.125	attackbotsspam	Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156079]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4156127]: NOQUEUE: reject: RCPT from medical.ifixheal.com[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:41:26 mail.srvfarm.net postfix/smtpd[4152946]: NOQUEUE: reject: RCPT from unknown[69.94.158.125]: 450 4.1.8 : Sender address rejected: Domain not found; from= to= proto=ESMTP helo= Jun 22 14:41:27 mail.srvfarm.net postfix/smtpd[4152191]: NOQUEUE: reject: RCPT from u	2020-06-22 22:58:48
200.45.147.129	attack	Jun 22 13:16:52 game-panel sshd[1315]: Failed password for root from 200.45.147.129 port 47330 ssh2 Jun 22 13:18:05 game-panel sshd[1430]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.45.147.129 Jun 22 13:18:07 game-panel sshd[1430]: Failed password for invalid user dmp from 200.45.147.129 port 40916 ssh2	2020-06-22 23:05:33
180.183.55.13	attackspambots	Honeypot attack, port: 445, PTR: mx-ll-180.183.55-13.dynamic.3bb.co.th.	2020-06-22 22:34:03
52.152.162.135	attackspambots	Unauthorized connection attempt from IP address 52.152.162.135 on Port 3389(RDP)	2020-06-22 22:31:47

Recently Reported IPs

3.101.190.164	179.127.130.16	42.224.158.142	187.163.138.252
189.231.97.1	23.111.191.58	103.42.73.130	20.113.136.91
52.174.162.213	36.74.250.177	104.40.78.147	45.87.240.173
109.74.157.127	182.90.91.190	14.241.245.17	189.186.44.238
211.155.228.226	87.155.21.182	80.234.6.51	156.194.63.240