113.161.196.104

Basic Info

City: unknown

Region: unknown

Country: Vietnam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Sat, 20 Jul 2019 21:54:30 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 13:07:28

Comments on same subnet:

IP	Type	Details	Datetime
113.161.196.222	attackspam	20/8/2@23:49:20: FAIL: Alarm-Network address from=113.161.196.222 ...	2020-08-03 19:10:22
113.161.196.113	attackspambots	12/13/2019-08:45:35.096678 113.161.196.113 Protocol: 6 ET SCAN Suspicious inbound to MSSQL port 1433	2019-12-13 19:05:28
113.161.196.166	attack	445/tcp [2019-07-30]1pkt	2019-07-31 06:36:43

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.161.196.104
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60537
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.161.196.104.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072001 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 13:07:14 CST 2019
;; MSG SIZE  rcvd: 119

Host info

104.196.161.113.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
104.196.161.113.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
119.75.32.18	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-14 15:11:44
59.102.253.191	attack	Feb 14 06:12:08 ms-srv sshd[19843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.102.253.191	2020-02-14 15:37:25
185.40.4.120	attack	[2020-02-14 02:41:08] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.40.4.120:55494' - Wrong password [2020-02-14 02:41:08] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-14T02:41:08.657-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="188",SessionID="0x7fd82c7af4d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.120/55494",Challenge="0a750df5",ReceivedChallenge="0a750df5",ReceivedHash="0b9de1731bd6f9c7c9537f64ea6c39be" [2020-02-14 02:42:27] NOTICE[1148] chan_sip.c: Registration from '' failed for '185.40.4.120:58230' - Wrong password [2020-02-14 02:42:27] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-14T02:42:27.932-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="277",SessionID="0x7fd82cdc4bd8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.40.4.120/58230", ...	2020-02-14 15:44:48
125.25.90.103	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-02-14 15:46:23
1.1.184.121	attackspam	2020-02-14T04:56:00.345Z CLOSE host=1.1.184.121 port=58905 fd=4 time=20.015 bytes=3 ...	2020-02-14 15:50:54
164.132.111.76	attackspambots	2020-02-13T23:38:17.8932941495-001 sshd[1485]: Invalid user cassarah from 164.132.111.76 port 45380 2020-02-13T23:38:17.9006731495-001 sshd[1485]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.ip-164-132-111.eu 2020-02-13T23:38:17.8932941495-001 sshd[1485]: Invalid user cassarah from 164.132.111.76 port 45380 2020-02-13T23:38:19.6627391495-001 sshd[1485]: Failed password for invalid user cassarah from 164.132.111.76 port 45380 ssh2 2020-02-13T23:40:44.6061881495-001 sshd[1625]: Invalid user axel from 164.132.111.76 port 39690 2020-02-13T23:40:44.6140641495-001 sshd[1625]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=76.ip-164-132-111.eu 2020-02-13T23:40:44.6061881495-001 sshd[1625]: Invalid user axel from 164.132.111.76 port 39690 2020-02-13T23:40:46.7822881495-001 sshd[1625]: Failed password for invalid user axel from 164.132.111.76 port 39690 ssh2 2020-02-13T23:43:09.9983191495-001 sshd[1704]: Inv ...	2020-02-14 15:17:22
45.188.66.81	attackspambots	Automatic report - Banned IP Access	2020-02-14 15:47:25
154.126.184.240	attack	port scan and connect, tcp 80 (http)	2020-02-14 15:17:48
54.36.241.186	attackbots	Feb 14 05:55:56 lnxmysql61 sshd[11586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.36.241.186	2020-02-14 15:56:03
45.43.29.52	attackbotsspam	Portscan detected	2020-02-14 15:29:14
46.101.27.6	attackbots	Feb 14 05:54:21 dev0-dcde-rnet sshd[23084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.27.6 Feb 14 05:54:23 dev0-dcde-rnet sshd[23084]: Failed password for invalid user vbox from 46.101.27.6 port 48202 ssh2 Feb 14 05:56:42 dev0-dcde-rnet sshd[23106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.27.6	2020-02-14 15:19:19
125.227.62.145	attack	Feb 14 06:18:17 vps691689 sshd[5773]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.227.62.145 Feb 14 06:18:19 vps691689 sshd[5773]: Failed password for invalid user postuser from 125.227.62.145 port 52086 ssh2 ...	2020-02-14 15:43:01
95.9.35.222	attack	Automatic report - Port Scan Attack	2020-02-14 15:31:58
78.131.11.10	attackspambots	Invalid user pi from 78.131.11.10 port 39342	2020-02-14 15:32:15
103.139.44.174	attackbots	firewall-block, port(s): 3389/tcp	2020-02-14 15:49:29

Recently Reported IPs

177.43.15.224	79.129.40.177	41.140.220.174	1.52.65.180
222.124.127.144	197.200.100.93	186.88.54.83	91.140.89.33
27.72.153.117	190.201.230.116	177.139.179.190	94.69.228.149
79.130.43.211	61.94.38.30	163.53.196.114	123.28.0.20
115.84.105.92	36.91.194.193	5.133.24.165	194.125.224.17