116.104.11.1 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Nov 21 16:46:44 ncomp sshd[30843]: Invalid user admin from 116.104.11.1 Nov 21 16:46:44 ncomp sshd[30843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.104.11.1 Nov 21 16:46:44 ncomp sshd[30843]: Invalid user admin from 116.104.11.1 Nov 21 16:46:46 ncomp sshd[30843]: Failed password for invalid user admin from 116.104.11.1 port 41453 ssh2	2019-11-22 06:18:03

Type

Details

Datetime

attackspam

Nov 21 16:46:44 ncomp sshd[30843]: Invalid user admin from 116.104.11.1
Nov 21 16:46:44 ncomp sshd[30843]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.104.11.1
Nov 21 16:46:44 ncomp sshd[30843]: Invalid user admin from 116.104.11.1
Nov 21 16:46:46 ncomp sshd[30843]: Failed password for invalid user admin from 116.104.11.1 port 41453 ssh2

2019-11-22 06:18:03

Comments on same subnet:

IP	Type	Details	Datetime
116.104.119.142	attackbotsspam	Unauthorised access (Jul 27) SRC=116.104.119.142 LEN=52 TTL=109 ID=7805 DF TCP DPT=445 WINDOW=8192 SYN	2020-07-27 15:18:09
116.104.117.107	attackspam	Brute force attempt	2019-12-06 20:52:22
116.104.114.169	attackbotsspam	445/tcp [2019-07-20]1pkt	2019-07-20 22:03:09

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.104.11.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64373
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.104.11.1.			IN	A

;; AUTHORITY SECTION:
.			598	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019112101 1800 900 604800 86400

;; Query time: 97 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Nov 22 06:18:00 CST 2019
;; MSG SIZE  rcvd: 116

Host info

1.11.104.116.in-addr.arpa domain name pointer dynamic-ip-adsl.viettel.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
1.11.104.116.in-addr.arpa	name = dynamic-ip-adsl.viettel.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.178.94.51	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-07 22:23:41,529 INFO [shellcode_manager] (113.178.94.51) no match, writing hexdump (375f7d082be53fab469affe6f5589225 :2222389) - MS17010 (EternalBlue)	2019-07-09 00:34:40
58.64.21.145	attack	TH from gw2.nsspt.co.th [58.64.21.145]:57903	2019-07-09 00:15:58
101.255.56.138	attackspambots	Unauthorized IMAP connection attempt.	2019-07-08 23:51:34
58.218.66.199	attack	firewall-block, port(s): 3306/tcp	2019-07-09 00:15:30
217.72.78.125	attack	proto=tcp . spt=52962 . dpt=25 . (listed on Blocklist de Jul 07) (322)	2019-07-09 00:18:32
75.149.175.180	attackbots	US from 75-149-175-180-washington.hfc.comcastbusiness.net [75.149.175.180]:34224 helo=samson.promolab.com	2019-07-09 00:31:04
72.210.252.137	attackspam	Jul 8 08:17:34 MK-Soft-VM3 sshd\[2005\]: Invalid user guest from 72.210.252.137 port 36896 Jul 8 08:17:34 MK-Soft-VM3 sshd\[2005\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=72.210.252.137 Jul 8 08:17:36 MK-Soft-VM3 sshd\[2005\]: Failed password for invalid user guest from 72.210.252.137 port 36896 ssh2 ...	2019-07-08 23:52:18
138.197.153.228	attack	SSH bruteforce (Triggered fail2ban)	2019-07-08 23:38:57
24.75.130.27	attackspam	US from [24.75.130.27] port=53308 helo=MH-DMSINDEX.McCandlish.biz	2019-07-09 00:42:09
102.165.51.206	attackbots	\[2019-07-08 17:56:56\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-08T17:56:56.929+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="285404932-1926167373-1416190500",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/102.165.51.206/62534",Challenge="1562601416/c2286f92bf0b95f063e316cc856a3dee",Response="b6ad3f788d621f01c2e6de1a1c9f49d0",ExpectedResponse="" \[2019-07-08 17:56:57\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-07-08T17:56:57.075+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="285404932-1926167373-1416190500",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/102.165.51.206/62534",Challenge="1562601416/c2286f92bf0b95f063e316cc856a3dee",Response="eaf4c745a01a0f6c89e4498946f606f1",ExpectedResponse="" \[2019-07-08 17:56:57\] SECURITY\[3671\] res_security_log.c: SecurityEvent="ChallengeRe	2019-07-09 00:16:39
92.207.113.3	attackspam	Attempts to probe web pages for vulnerable PHP or other applications	2019-07-08 23:37:54
223.197.216.112	attack	Jul 8 10:16:28 mail sshd\[25848\]: Invalid user graham from 223.197.216.112 Jul 8 10:16:28 mail sshd\[25848\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.197.216.112 Jul 8 10:16:30 mail sshd\[25848\]: Failed password for invalid user graham from 223.197.216.112 port 51612 ssh2 ...	2019-07-09 00:34:16
181.112.62.26	attack	Unauthorized IMAP connection attempt.	2019-07-09 00:44:31
106.13.43.242	attackspam	Brute force SMTP login attempted. ...	2019-07-08 23:47:59
165.227.151.59	attackbotsspam	Brute force SMTP login attempted. ...	2019-07-09 00:10:29

Recently Reported IPs

49.235.97.238	152.0.227.133	123.16.3.208	64.190.91.203
129.45.46.149	188.190.221.155	118.24.56.143	112.162.150.246
37.146.144.141	124.216.146.21	189.126.195.198	88.242.135.32
34.148.39.55	196.245.216.37	180.83.133.73	177.106.49.213
34.216.48.69	252.57.125.64	42.112.110.200	148.56.100.232