113.20.108.11 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: CMC Telecom Infrastructure Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt from IP address 113.20.108.11 on Port 445(SMB)	2020-01-02 22:00:23

Comments on same subnet:

IP	Type	Details	Datetime
113.20.108.120	attack	Port scan denied	2020-07-13 23:54:24
113.20.108.223	attackspambots	20/7/9@23:53:59: FAIL: Alarm-Intrusion address from=113.20.108.223 ...	2020-07-10 15:15:23
113.20.108.4	attackbotsspam	Honeypot attack, port: 445, PTR: static.cmcti.vn.	2020-07-09 13:41:15
113.20.108.120	attack	Attempted connection to port 23.	2020-05-30 19:20:25
113.20.108.211	attackspam	Unauthorized connection attempt from IP address 113.20.108.211 on Port 445(SMB)	2020-05-28 22:10:44
113.20.108.171	attackspam	Icarus honeypot on github	2020-04-28 18:08:14
113.20.108.19	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-03-13 02:28:45
113.20.108.146	attack	20/2/11@23:53:57: FAIL: Alarm-Network address from=113.20.108.146 20/2/11@23:53:57: FAIL: Alarm-Network address from=113.20.108.146 ...	2020-02-12 16:58:08
113.20.108.22	attackspam	Unauthorized connection attempt detected from IP address 113.20.108.22 to port 445 [T]	2020-01-09 02:19:57
113.20.108.171	attack	Unauthorized connection attempt detected from IP address 113.20.108.171 to port 445	2019-12-12 20:38:31
113.20.108.154	attackbots	Unauthorized connection attempt from IP address 113.20.108.154 on Port 445(SMB)	2019-07-09 13:03:47

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.20.108.11
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26833
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.20.108.11.			IN	A

;; AUTHORITY SECTION:
.			10800	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010200 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 100.100.2.136#53(100.100.2.136)
;; WHEN: Thu Jan 02 22:02:28 CST 2020
;; MSG SIZE  rcvd: 117

Host info

11.108.20.113.in-addr.arpa domain name pointer static.cmcti.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
11.108.20.113.in-addr.arpa	name = static.cmcti.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
123.51.152.54	attack	Dec 30 10:02:21 debian-2gb-nbg1-2 kernel: \[1349248.581768\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=123.51.152.54 DST=195.201.40.59 LEN=57 TOS=0x00 PREC=0x00 TTL=239 ID=54321 PROTO=UDP SPT=58309 DPT=53413 LEN=37	2019-12-30 17:33:51
139.59.94.225	attack	Dec 30 06:40:04 kmh-wsh-001-nbg03 sshd[20023]: Invalid user reuschel from 139.59.94.225 port 34066 Dec 30 06:40:04 kmh-wsh-001-nbg03 sshd[20023]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225 Dec 30 06:40:06 kmh-wsh-001-nbg03 sshd[20023]: Failed password for invalid user reuschel from 139.59.94.225 port 34066 ssh2 Dec 30 06:40:07 kmh-wsh-001-nbg03 sshd[20023]: Received disconnect from 139.59.94.225 port 34066:11: Bye Bye [preauth] Dec 30 06:40:07 kmh-wsh-001-nbg03 sshd[20023]: Disconnected from 139.59.94.225 port 34066 [preauth] Dec 30 06:58:34 kmh-wsh-001-nbg03 sshd[22879]: Invalid user server from 139.59.94.225 port 56078 Dec 30 06:58:34 kmh-wsh-001-nbg03 sshd[22879]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225 Dec 30 06:58:36 kmh-wsh-001-nbg03 sshd[22879]: Failed password for invalid user server from 139.59.94.225 port 56078 ssh2 Dec 30 06:58:36 kmh-wsh-0........ -------------------------------	2019-12-30 17:18:10
185.220.101.69	attackbots	Automatic report - XMLRPC Attack	2019-12-30 17:07:43
107.170.244.110	attackspambots	Dec 30 09:42:13 markkoudstaal sshd[6325]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.244.110 Dec 30 09:42:15 markkoudstaal sshd[6325]: Failed password for invalid user helenas from 107.170.244.110 port 42340 ssh2 Dec 30 09:45:25 markkoudstaal sshd[6597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=107.170.244.110	2019-12-30 17:31:21
49.88.112.61	attack	Dec 30 10:11:10 v22018076622670303 sshd\[19310\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.61 user=root Dec 30 10:11:12 v22018076622670303 sshd\[19310\]: Failed password for root from 49.88.112.61 port 29767 ssh2 Dec 30 10:11:15 v22018076622670303 sshd\[19310\]: Failed password for root from 49.88.112.61 port 29767 ssh2 ...	2019-12-30 17:15:30
43.240.125.195	attackspam	2019-12-30T07:27:34.7835631240 sshd\[20951\]: Invalid user gjert from 43.240.125.195 port 56444 2019-12-30T07:27:34.7862381240 sshd\[20951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.240.125.195 2019-12-30T07:27:37.0336661240 sshd\[20951\]: Failed password for invalid user gjert from 43.240.125.195 port 56444 ssh2 ...	2019-12-30 17:04:36
74.217.93.206	attackspambots	Chat Spam	2019-12-30 17:18:58
185.209.0.91	attack	Dec 30 09:28:34 debian-2gb-nbg1-2 kernel: \[1347222.523481\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.209.0.91 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=26850 PROTO=TCP SPT=52971 DPT=57389 WINDOW=1024 RES=0x00 SYN URGP=0	2019-12-30 17:08:09
146.88.240.4	attackspambots	unauthorized access on port 443 [https] FO	2019-12-30 17:28:10
218.157.174.102	attack	Unauthorized connection attempt detected from IP address 218.157.174.102 to port 4567	2019-12-30 17:10:53
140.143.30.117	attack	Dec 30 09:22:55 minden010 sshd[27730]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.117 Dec 30 09:22:56 minden010 sshd[27730]: Failed password for invalid user amour from 140.143.30.117 port 49440 ssh2 Dec 30 09:27:24 minden010 sshd[29107]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=140.143.30.117 ...	2019-12-30 17:00:57
223.242.228.121	attackspambots	Dec 30 07:27:36 grey postfix/smtpd\[12419\]: NOQUEUE: reject: RCPT from unknown\[223.242.228.121\]: 554 5.7.1 Service unavailable\; Client host \[223.242.228.121\] blocked using dul.dnsbl.sorbs.net\; Dynamic IP Addresses See: http://www.sorbs.net/lookup.shtml\?223.242.228.121\; from=\ to=\ proto=ESMTP helo=\ ...	2019-12-30 17:05:04
14.169.21.119	attackspambots	Dec 30 08:52:39 debian-2gb-nbg1-2 kernel: \[1345067.489509\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=14.169.21.119 DST=195.201.40.59 LEN=44 TOS=0x00 PREC=0x00 TTL=51 ID=42362 PROTO=TCP SPT=19682 DPT=9000 WINDOW=46575 RES=0x00 SYN URGP=0	2019-12-30 16:58:51
95.105.233.209	attackspam	Unauthorized connection attempt detected from IP address 95.105.233.209 to port 22	2019-12-30 17:00:24
113.73.6.166	attackspambots	Scanning	2019-12-30 17:01:19

Recently Reported IPs

5.101.14.15	168.50.235.157	66.114.56.97	87.193.35.187
24.71.33.88	161.69.25.146	46.223.1.28	85.211.174.67
148.133.42.171	77.112.137.94	217.20.244.118	141.93.197.167
61.166.31.70	60.169.49.157	49.145.201.148	47.106.169.201
42.113.229.134	96.84.178.136	42.51.66.69	227.209.202.52