116.58.252.149

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.58.252.89	attackspam	Jul 26 10:34:14 ip-172-31-10-178 sshd[27871]: Invalid user ubnt from 116.58.252.89 Jul 26 10:34:15 ip-172-31-10-178 sshd[27871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89 Jul 26 10:34:18 ip-172-31-10-178 sshd[27871]: Failed password for invalid user ubnt from 116.58.252.89 port 10841 ssh2 Jul 26 10:34:20 ip-172-31-10-178 sshd[27873]: Invalid user UBNT from 116.58.252.89 Jul 26 10:34:21 ip-172-31-10-178 sshd[27873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.58.252.89	2019-07-27 02:33:39

Type

Details

Datetime

116.58.252.89

attackspam

Jul 26 10:34:14 ip-172-31-10-178 sshd[27871]: Invalid user ubnt from 116.58.252.89
Jul 26 10:34:15 ip-172-31-10-178 sshd[27871]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89
Jul 26 10:34:18 ip-172-31-10-178 sshd[27871]: Failed password for invalid user ubnt from 116.58.252.89 port 10841 ssh2
Jul 26 10:34:20 ip-172-31-10-178 sshd[27873]: Invalid user UBNT from 116.58.252.89
Jul 26 10:34:21 ip-172-31-10-178 sshd[27873]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.58.252.89

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=116.58.252.89

2019-07-27 02:33:39

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.58.252.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1954
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.58.252.149.			IN	A

;; AUTHORITY SECTION:
.			218	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 75 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 10:03:47 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 149.252.58.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 149.252.58.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
45.225.160.235	attackbotsspam	Jul 16 21:43:17 eventyay sshd[21077]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.225.160.235 Jul 16 21:43:19 eventyay sshd[21077]: Failed password for invalid user teamspeak from 45.225.160.235 port 47540 ssh2 Jul 16 21:47:31 eventyay sshd[21271]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.225.160.235 ...	2020-07-17 04:06:08
113.161.54.47	attackspam	(imapd) Failed IMAP login from 113.161.54.47 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jul 16 18:14:52 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=113.161.54.47, lip=5.63.12.44, TLS, session=<9TJaPo+qS45xoTYv>	2020-07-17 04:01:33
104.237.226.100	attack	2020-07-16T17:43:27.986634sd-86998 sshd[48828]: Invalid user danny from 104.237.226.100 port 57000 2020-07-16T17:43:27.992153sd-86998 sshd[48828]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.237.226.100 2020-07-16T17:43:27.986634sd-86998 sshd[48828]: Invalid user danny from 104.237.226.100 port 57000 2020-07-16T17:43:30.185548sd-86998 sshd[48828]: Failed password for invalid user danny from 104.237.226.100 port 57000 ssh2 2020-07-16T17:45:12.991995sd-86998 sshd[49046]: Invalid user eggy from 104.237.226.100 port 52250 ...	2020-07-17 04:09:59
202.149.85.226	attackspam	Jul 16 20:57:57 ns41 sshd[19120]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.149.85.226	2020-07-17 03:49:23
95.213.132.163	attackbotsspam	apache exploit attempt	2020-07-17 03:52:59
112.85.42.232	attackbotsspam	Jul 16 21:32:17 abendstille sshd\[4072\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.232 user=root Jul 16 21:32:19 abendstille sshd\[4072\]: Failed password for root from 112.85.42.232 port 19305 ssh2 Jul 16 21:32:19 abendstille sshd\[4083\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.232 user=root Jul 16 21:32:21 abendstille sshd\[4083\]: Failed password for root from 112.85.42.232 port 23483 ssh2 Jul 16 21:32:22 abendstille sshd\[4072\]: Failed password for root from 112.85.42.232 port 19305 ssh2 ...	2020-07-17 03:47:15
200.129.242.4	attackspam	Jul 16 21:45:01 buvik sshd[28845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.129.242.4 Jul 16 21:45:03 buvik sshd[28845]: Failed password for invalid user odoouser from 200.129.242.4 port 1171 ssh2 Jul 16 21:52:37 buvik sshd[30046]: Invalid user deploy from 200.129.242.4 ...	2020-07-17 03:56:33
89.203.158.110	attack	89.203.158.110 - - [16/Jul/2020:15:15:32 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.203.158.110 - - [16/Jul/2020:15:15:33 +0100] "POST /wp-login.php HTTP/1.1" 200 5782 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" 89.203.158.110 - - [16/Jul/2020:15:33:58 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)" ...	2020-07-17 04:14:27
189.190.95.95	attackspam	2020-07-16T21:23:40.001385scmdmz1 sshd[17270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.190.95.95 2020-07-16T21:23:39.997368scmdmz1 sshd[17270]: Invalid user luser from 189.190.95.95 port 57432 2020-07-16T21:23:41.776444scmdmz1 sshd[17270]: Failed password for invalid user luser from 189.190.95.95 port 57432 ssh2 ...	2020-07-17 03:43:36
194.33.45.141	attackspam	port scan and connect, tcp 8000 (http-alt)	2020-07-17 04:03:19
106.52.57.120	attack	2020-07-16T21:50:21+0200 Failed SSH Authentication/Brute Force Attack. (Server 10)	2020-07-17 04:08:57
212.174.0.211	attackspam	Unauthorized connection attempt from IP address 212.174.0.211 on Port 445(SMB)	2020-07-17 03:41:44
84.123.13.17	attack	Jul 16 15:20:24 ns382633 sshd\[5401\]: Invalid user fuck from 84.123.13.17 port 49663 Jul 16 15:20:24 ns382633 sshd\[5401\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.123.13.17 Jul 16 15:20:27 ns382633 sshd\[5401\]: Failed password for invalid user fuck from 84.123.13.17 port 49663 ssh2 Jul 16 15:45:10 ns382633 sshd\[10639\]: Invalid user hadoop from 84.123.13.17 port 58414 Jul 16 15:45:10 ns382633 sshd\[10639\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.123.13.17	2020-07-17 03:44:50
3.128.229.227	attackbots	REQUESTED PAGE: /wp-login.php	2020-07-17 04:15:19
116.236.251.214	attackbotsspam	Jul 17 05:46:36 localhost sshd[492837]: Invalid user city from 116.236.251.214 port 10690 ...	2020-07-17 04:13:17

Recently Reported IPs

91.150.67.17	95.38.128.66	176.215.237.190	187.103.81.24
103.217.173.9	59.95.75.243	27.38.61.94	185.82.98.4
65.49.70.142	61.76.164.162	111.67.200.198	45.83.64.10
196.216.137.55	118.217.105.154	188.72.6.218	85.198.142.186
27.218.65.200	176.104.6.3	197.156.127.57	117.25.54.102