116.100.244.149

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Sat, 20 Jul 2019 21:56:17 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-21 08:23:03

Comments on same subnet:

IP	Type	Details	Datetime
116.100.244.200	attack	1585972398 - 04/04/2020 05:53:18 Host: 116.100.244.200/116.100.244.200 Port: 445 TCP Blocked	2020-04-04 18:18:44

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.100.244.149
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33472
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.100.244.149.		IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072001 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Jul 21 08:22:57 CST 2019
;; MSG SIZE  rcvd: 119

Host info

Host 149.244.100.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 149.244.100.116.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
125.212.203.113	attackspam	2020-04-19T13:57:33.866752vps751288.ovh.net sshd\[28964\]: Invalid user ke from 125.212.203.113 port 49408 2020-04-19T13:57:33.875729vps751288.ovh.net sshd\[28964\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.203.113 2020-04-19T13:57:35.401953vps751288.ovh.net sshd\[28964\]: Failed password for invalid user ke from 125.212.203.113 port 49408 ssh2 2020-04-19T14:02:36.964731vps751288.ovh.net sshd\[29020\]: Invalid user vs from 125.212.203.113 port 34184 2020-04-19T14:02:36.974503vps751288.ovh.net sshd\[29020\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=125.212.203.113	2020-04-19 23:16:18
119.122.113.53	attackspambots	Unauthorized connection attempt detected from IP address 119.122.113.53 to port 445 [T]	2020-04-19 23:47:59
103.145.12.41	attackspam	[2020-04-19 11:26:17] NOTICE[1170] chan_sip.c: Registration from '"3003" ' failed for '103.145.12.41:6084' - Wrong password [2020-04-19 11:26:17] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-19T11:26:17.682-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3003",SessionID="0x7f6c0817f3c8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.41/6084",Challenge="49bb6d58",ReceivedChallenge="49bb6d58",ReceivedHash="83b93849226133b8849d583e6b2398ce" [2020-04-19 11:26:17] NOTICE[1170] chan_sip.c: Registration from '"3003" ' failed for '103.145.12.41:6084' - Wrong password [2020-04-19 11:26:17] SECURITY[1184] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-19T11:26:17.793-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="3003",SessionID="0x7f6c08341c08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/10 ...	2020-04-19 23:33:22
138.197.147.128	attack	Apr 19 13:57:59 legacy sshd[7133]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.147.128 Apr 19 13:58:01 legacy sshd[7133]: Failed password for invalid user admin from 138.197.147.128 port 35610 ssh2 Apr 19 14:02:08 legacy sshd[7201]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.147.128 ...	2020-04-19 23:45:14
116.98.178.50	attackspambots	Unauthorized connection attempt from IP address 116.98.178.50 on Port 445(SMB)	2020-04-19 23:36:04
124.235.206.130	attackbotsspam	Apr 19 14:02:41 vpn01 sshd[28919]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=124.235.206.130 Apr 19 14:02:42 vpn01 sshd[28919]: Failed password for invalid user postgres from 124.235.206.130 port 64380 ssh2 ...	2020-04-19 23:10:59
47.9.192.211	attack	1587297741 - 04/19/2020 14:02:21 Host: 47.9.192.211/47.9.192.211 Port: 445 TCP Blocked	2020-04-19 23:29:16
113.107.139.68	attackspambots	" "	2020-04-19 23:21:02
45.55.86.19	attackbots	sshd jail - ssh hack attempt	2020-04-19 23:25:13
110.43.208.244	attackbotsspam	[MK-Root1] Blocked by UFW	2020-04-19 23:31:21
110.249.70.19	attackbots	Fail2Ban Ban Triggered	2020-04-19 23:14:14
152.168.246.29	attackspam	Apr 19 15:51:58 rotator sshd\[9312\]: Invalid user test from 152.168.246.29Apr 19 15:52:00 rotator sshd\[9312\]: Failed password for invalid user test from 152.168.246.29 port 46498 ssh2Apr 19 15:56:12 rotator sshd\[10079\]: Invalid user test from 152.168.246.29Apr 19 15:56:14 rotator sshd\[10079\]: Failed password for invalid user test from 152.168.246.29 port 45049 ssh2Apr 19 16:00:20 rotator sshd\[10855\]: Invalid user hr from 152.168.246.29Apr 19 16:00:23 rotator sshd\[10855\]: Failed password for invalid user hr from 152.168.246.29 port 43607 ssh2 ...	2020-04-19 23:13:51
134.175.91.198	attackbotsspam	Apr 19 21:24:13 our-server-hostname sshd[18886]: Invalid user kw from 134.175.91.198 Apr 19 21:24:13 our-server-hostname sshd[18886]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.91.198 Apr 19 21:24:15 our-server-hostname sshd[18886]: Failed password for invalid user kw from 134.175.91.198 port 34058 ssh2 Apr 19 21:45:47 our-server-hostname sshd[24006]: Invalid user ghostname from 134.175.91.198 Apr 19 21:45:47 our-server-hostname sshd[24006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.91.198 Apr 19 21:45:50 our-server-hostname sshd[24006]: Failed password for invalid user ghostname from 134.175.91.198 port 48734 ssh2 Apr 19 21:51:53 our-server-hostname sshd[25562]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.175.91.198 user=r.r Apr 19 21:51:55 our-server-hostname sshd[25562]: Failed password for r.r from 134.175.91.1........ -------------------------------	2020-04-19 23:26:20
42.113.3.254	attack	1587297735 - 04/19/2020 14:02:15 Host: 42.113.3.254/42.113.3.254 Port: 445 TCP Blocked	2020-04-19 23:36:24
212.95.154.101	attackbots	SSH invalid-user multiple login attempts	2020-04-19 23:30:04

Recently Reported IPs

41.68.245.140	27.255.254.13	179.125.45.224	144.205.221.254
79.31.148.10	90.64.122.165	213.93.97.192	83.219.117.136
106.198.147.170	229.251.135.82	86.165.133.243	45.237.151.140
88.122.145.120	158.18.13.83	36.79.129.205	185.34.93.121
154.126.167.253	98.217.11.24	90.153.172.118	72.252.241.210