116.75.242.145

Basic Info

City: unknown

Region: unknown

Country: None

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.75.242.76	attack	firewall-block, port(s): 2323/tcp	2020-09-12 03:40:55
116.75.242.76	attack	firewall-block, port(s): 2323/tcp	2020-09-11 19:45:01
116.75.242.192	attackspambots	116.75.242.192 - - [30/Aug/2020:16:35:05 -0400] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 116.75.242.192 - - [30/Aug/2020:16:35:06 -0400] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" 116.75.242.192 - - [30/Aug/2020:16:35:07 -0400] "POST /blog/xmlrpc.php HTTP/1.1" 404 213 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36" ...	2020-08-31 07:14:16

Type

Details

Datetime

116.75.242.76

attack

firewall-block, port(s): 2323/tcp

2020-09-12 03:40:55

116.75.242.76

attack

firewall-block, port(s): 2323/tcp

2020-09-11 19:45:01

116.75.242.192

attackspambots

116.75.242.192 - - [30/Aug/2020:16:35:05 -0400] "POST /xmlrpc.php HTTP/1.1" 404 208 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
116.75.242.192 - - [30/Aug/2020:16:35:06 -0400] "POST /wordpress/xmlrpc.php HTTP/1.1" 404 218 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
116.75.242.192 - - [30/Aug/2020:16:35:07 -0400] "POST /blog/xmlrpc.php HTTP/1.1" 404 213 "-" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.2309.372 Safari/537.36"
...

2020-08-31 07:14:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.75.242.145
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33100
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;116.75.242.145.			IN	A

;; AUTHORITY SECTION:
.			241	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030400 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Mar 05 05:12:55 CST 2022
;; MSG SIZE  rcvd: 107

Host info

Host 145.242.75.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 145.242.75.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
132.232.32.228	attackbotsspam	Feb 18 20:03:39 firewall sshd[13008]: Invalid user cpanellogin from 132.232.32.228 Feb 18 20:03:41 firewall sshd[13008]: Failed password for invalid user cpanellogin from 132.232.32.228 port 36716 ssh2 Feb 18 20:06:11 firewall sshd[13165]: Invalid user yangx from 132.232.32.228 ...	2020-02-19 07:23:51
185.153.198.249	attackbots	ET DROP Dshield Block Listed Source group 1 - port: 5555 proto: TCP cat: Misc Attack	2020-02-19 07:19:39
144.22.108.33	attackspambots	Feb 18 11:55:01 : SSH login attempts with invalid user	2020-02-19 07:29:03
46.105.244.17	attack	Feb 18 22:46:11 server sshd[479690]: Failed password for invalid user gitlab-prometheus from 46.105.244.17 port 60120 ssh2 Feb 18 22:58:59 server sshd[489370]: Failed password for invalid user guest from 46.105.244.17 port 51910 ssh2 Feb 18 23:01:29 server sshd[491194]: Failed password for invalid user administrator from 46.105.244.17 port 53932 ssh2	2020-02-19 07:18:49
173.245.239.174	attackspam	IMAP brute force ...	2020-02-19 07:40:37
201.76.189.186	attackbotsspam	Unauthorized connection attempt from IP address 201.76.189.186 on Port 445(SMB)	2020-02-19 07:27:53
103.227.119.43	attackbotsspam	TCP Port Scanning	2020-02-19 07:35:42
93.93.246.143	attackspam	Fail2Ban Ban Triggered	2020-02-19 07:44:25
1.193.108.90	attack	multiple RDP login attempts on non standard port	2020-02-19 07:28:34
189.250.217.177	attackbots	Unauthorized connection attempt from IP address 189.250.217.177 on Port 3389(RDP)	2020-02-19 07:31:40
52.59.242.163	attackspam	Automatic report - SSH Brute-Force Attack	2020-02-19 07:21:11
111.231.75.5	attack	Invalid user tsbot from 111.231.75.5 port 44454	2020-02-19 07:36:49
189.86.254.38	attackspam	Unauthorized connection attempt from IP address 189.86.254.38 on Port 445(SMB)	2020-02-19 07:10:42
164.77.56.96	attack	Feb 18 23:01:09 grey postfix/smtpd\[24952\]: NOQUEUE: reject: RCPT from unknown\[164.77.56.96\]: 554 5.7.1 Service unavailable\; Client host \[164.77.56.96\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?164.77.56.96\; from=\ to=\ proto=SMTP helo=\ ...	2020-02-19 07:36:37
36.37.94.197	attack	Unauthorized connection attempt from IP address 36.37.94.197 on Port 445(SMB)	2020-02-19 07:37:16

Recently Reported IPs

116.75.242.146	116.75.242.159	116.75.242.225	116.75.242.248
116.75.243.76	116.75.244.154	116.75.242.64	116.75.242.86
117.199.173.104	116.75.247.11	116.75.37.49	116.75.64.29
116.75.65.54	116.75.78.165	116.75.85.238	116.80.14.215
116.80.10.74	116.80.72.200	116.80.72.243	117.199.173.12