116.104.93.66 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	[portscan] tcp/23 [TELNET] *(RWIN=43822)(08041230)	2019-08-05 03:42:27
attackspam	Honeypot attack, port: 23, PTR: dynamic-ip-adsl.viettel.vn.	2019-07-29 10:51:49

Comments on same subnet:

IP	Type	Details	Datetime
116.104.93.158	attack	Telnet Server BruteForce Attack	2020-03-06 02:39:43
116.104.93.7	attackspam	1581209221 - 02/09/2020 07:47:01 Host: dynamic-ip-adsl.viettel.vn/116.104.93.7 Port: 23 TCP Blocked ...	2020-02-09 09:42:36
116.104.93.171	attack	Unauthorized connection attempt detected from IP address 116.104.93.171 to port 23 [J]	2020-01-06 16:07:54
116.104.93.88	attackspambots	Unauthorised access (Oct 4) SRC=116.104.93.88 LEN=40 TTL=45 ID=9516 TCP DPT=23 WINDOW=64190 SYN	2019-10-04 12:29:11
116.104.93.43	attackspambots	Aug 28 23:51:11 MK-Soft-VM7 sshd\[9271\]: Invalid user admin from 116.104.93.43 port 47919 Aug 28 23:51:11 MK-Soft-VM7 sshd\[9271\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.104.93.43 Aug 28 23:51:13 MK-Soft-VM7 sshd\[9271\]: Failed password for invalid user admin from 116.104.93.43 port 47919 ssh2 ...	2019-08-29 10:51:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.104.93.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14830
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.104.93.66.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019072801 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 29 10:51:41 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 66.93.104.116.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 66.93.104.116.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
219.73.75.236	attack	TCP (SYN) 219.73.75.236:64877 -> port 23, len 40	2020-07-01 16:17:10
178.57.89.222	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-07-01 16:15:21
106.52.135.88	attack	Jun 30 16:27:51 roki sshd[25933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.135.88 user=root Jun 30 16:27:54 roki sshd[25933]: Failed password for root from 106.52.135.88 port 43942 ssh2 Jun 30 16:30:40 roki sshd[26141]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.135.88 user=root Jun 30 16:30:42 roki sshd[26141]: Failed password for root from 106.52.135.88 port 41726 ssh2 Jun 30 16:33:12 roki sshd[26318]: Invalid user csgoserver from 106.52.135.88 Jun 30 16:33:12 roki sshd[26318]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.52.135.88 ...	2020-07-01 16:02:32
37.229.85.211	attack	unauthorized connection attempt	2020-07-01 15:53:35
103.214.12.20	attack	Unauthorized connection attempt detected from IP address 103.214.12.20 to port 80	2020-07-01 16:25:51
177.126.139.249	attack	Unauthorized connection attempt detected from IP address 177.126.139.249 to port 23	2020-07-01 15:55:08
104.41.41.24	attackbotsspam	Jun 30 15:38:28 nextcloud sshd\[12330\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.41.24 user=root Jun 30 15:38:31 nextcloud sshd\[12330\]: Failed password for root from 104.41.41.24 port 1472 ssh2 Jun 30 16:00:41 nextcloud sshd\[8577\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.41.41.24 user=root	2020-07-01 15:45:13
200.233.88.228	attack	Unauthorized connection attempt detected from IP address 200.233.88.228 to port 8080	2020-07-01 15:49:44
2a01:4f8:162:24d5::2	attackbots	The IP has triggered Cloudflare WAF. CF-Ray: 5aae0c0388b3d6c1 \| WAF_Rule_ID: 1bd9f7863d3d4d8faf68c16295216fb5 \| WAF_Kind: firewall \| CF_Action: allow \| Country: DE \| CF_IPClass: unknown \| Protocol: HTTP/1.1 \| Method: GET \| Host: www.wevg.org \| User-Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/) \| CF_DC: FRA. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2020-07-01 16:27:52
220.132.155.224	attackspambots	TCP (SYN) 220.132.155.224:23017 -> port 23, len 40	2020-07-01 15:48:01
106.12.106.232	attackspambots	Invalid user prashant from 106.12.106.232 port 47500	2020-07-01 16:24:58
92.114.16.5	attackspambots	ET CINS Active Threat Intelligence Poor Reputation IP group 83 - port: 1433 proto: TCP cat: Misc Attack	2020-07-01 16:08:22
128.199.240.98	attack	Jun 30 19:01:38 pve1 sshd[29571]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.240.98 Jun 30 19:01:41 pve1 sshd[29571]: Failed password for invalid user jan from 128.199.240.98 port 39804 ssh2 ...	2020-07-01 15:58:21
106.12.21.124	attackspam	unauthorized connection attempt	2020-07-01 16:15:38
182.61.146.33	attackspam	portscan	2020-07-01 16:04:48

Recently Reported IPs

157.55.39.22	157.32.146.127	52.213.160.139	134.209.150.31
124.243.240.90	106.13.120.46	159.65.47.146	54.37.23.134
93.241.202.160	62.85.254.26	58.211.189.178	136.2.140.25
35.173.50.147	17.0.174.106	123.140.204.39	189.6.191.14
249.100.159.192	27.191.209.93	27.113.169.186	239.43.212.15