116.110.117.42

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspam	Nov 1 17:59:34 sauna sshd[160687]: Failed password for root from 116.110.117.42 port 17138 ssh2 ...	2019-11-02 00:00:10
attackspambots	Oct 31 12:14:38 mail sshd\[30762\]: Invalid user admin from 116.110.117.42 Oct 31 12:14:39 mail sshd\[30762\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 31 12:14:40 mail sshd\[30762\]: Failed password for invalid user admin from 116.110.117.42 port 55646 ssh2 ...	2019-10-31 19:15:45
attack	Oct 30 10:56:38 webhost01 sshd[13556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 30 10:56:40 webhost01 sshd[13556]: Failed password for invalid user admin from 116.110.117.42 port 47242 ssh2 ...	2019-10-30 12:36:17
attackbotsspam	Invalid user user from 116.110.117.42 port 61600	2019-10-30 07:09:15
attack	Oct 29 10:47:36 markkoudstaal sshd[13845]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 29 10:47:38 markkoudstaal sshd[13845]: Failed password for invalid user admin from 116.110.117.42 port 55972 ssh2 Oct 29 10:50:10 markkoudstaal sshd[14128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42	2019-10-29 17:58:33
attackspambots	SSH Server BruteForce Attack	2019-10-29 07:56:42
attackspam	2019-10-23 13:02:22 -> 2019-10-25 12:37:01 : 110 login attempts (116.110.117.42)	2019-10-26 05:39:20
attackbots	2019-10-25T18:32:38.496010shiva sshd[17166]: Invalid user user from 116.110.117.42 port 9558 2019-10-25T18:33:34.789606shiva sshd[17197]: Invalid user admin from 116.110.117.42 port 16132 2019-10-25T18:33:38.031447shiva sshd[17199]: Invalid user guest from 116.110.117.42 port 35472 ...	2019-10-26 00:44:05
attackbots	Invalid user service from 116.110.117.42 port 5048	2019-10-25 06:58:58
attackbotsspam	Oct 24 17:33:51 areeb-Workstation sshd[11367]: Failed password for root from 116.110.117.42 port 24428 ssh2 ...	2019-10-24 20:06:42
attackbots	SSH Brute-Force reported by Fail2Ban	2019-10-22 23:25:03
attack	Oct 22 00:48:25 rotator sshd\[13011\]: Invalid user admin from 116.110.117.42Oct 22 00:48:27 rotator sshd\[13028\]: Invalid user cisco from 116.110.117.42Oct 22 00:48:27 rotator sshd\[13011\]: Failed password for invalid user admin from 116.110.117.42 port 42524 ssh2Oct 22 00:48:29 rotator sshd\[13028\]: Failed password for invalid user cisco from 116.110.117.42 port 52242 ssh2Oct 22 00:48:30 rotator sshd\[13030\]: Failed password for root from 116.110.117.42 port 61954 ssh2Oct 22 00:48:37 rotator sshd\[13032\]: Invalid user guest from 116.110.117.42 ...	2019-10-22 06:50:52
attack	Oct 20 16:23:44 vps691689 sshd[8341]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 20 16:23:46 vps691689 sshd[8341]: Failed password for invalid user ubnt from 116.110.117.42 port 6050 ssh2 ...	2019-10-20 22:27:21
attack	frenzy	2019-10-19 23:06:46
attack	Oct 16 20:22:02 icinga sshd[15546]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 16 20:22:03 icinga sshd[15546]: Failed password for invalid user admin from 116.110.117.42 port 23384 ssh2 Oct 16 20:22:21 icinga sshd[15595]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 ...	2019-10-17 03:00:54
attack	SSH Brute-Force reported by Fail2Ban	2019-10-15 21:17:30
attackspam	SSH Brute-Force reported by Fail2Ban	2019-10-14 21:07:39
attackspam	SSH brutforce	2019-10-13 01:37:01
attackbots	Oct 12 05:13:46 rotator sshd\[14047\]: Invalid user system from 116.110.117.42Oct 12 05:13:48 rotator sshd\[14047\]: Failed password for invalid user system from 116.110.117.42 port 37684 ssh2Oct 12 05:14:29 rotator sshd\[14063\]: Invalid user helpdesk from 116.110.117.42Oct 12 05:14:30 rotator sshd\[14061\]: Invalid user admin from 116.110.117.42Oct 12 05:14:32 rotator sshd\[14063\]: Failed password for invalid user helpdesk from 116.110.117.42 port 49878 ssh2Oct 12 05:14:32 rotator sshd\[14061\]: Failed password for invalid user admin from 116.110.117.42 port 54212 ssh2 ...	2019-10-12 11:40:45
attackspambots	Oct 11 15:35:46 saturn sshd[19918]: Invalid user user from 116.110.117.42 port 4646 Oct 11 15:35:49 saturn sshd[19922]: Invalid user service from 116.110.117.42 port 14922 Oct 11 15:36:09 saturn sshd[19930]: Invalid user admin from 116.110.117.42 port 46946 Oct 11 15:36:14 saturn sshd[19932]: Invalid user admin from 116.110.117.42 port 53686 Oct 11 15:36:20 saturn sshd[19934]: Invalid user guest from 116.110.117.42 port 17778	2019-10-11 21:44:37
attackspambots	2019-10-07 07:26:12 -> 2019-10-08 04:25:09 : 22 login attempts (116.110.117.42)	2019-10-09 05:04:35
attackspam	Oct 7 16:21:52 scivo sshd[32734]: Invalid user ftp from 116.110.117.42 Oct 7 16:21:53 scivo sshd[32734]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 7 16:21:54 scivo sshd[32734]: Failed password for invalid user ftp from 116.110.117.42 port 36722 ssh2 Oct 7 16:21:55 scivo sshd[32734]: Connection closed by 116.110.117.42 [preauth] Oct 7 16:22:23 scivo sshd[311]: Invalid user ubnt from 116.110.117.42 Oct 7 16:22:23 scivo sshd[311]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 7 16:22:26 scivo sshd[311]: Failed password for invalid user ubnt from 116.110.117.42 port 25008 ssh2 Oct 7 16:22:26 scivo sshd[311]: Connection closed by 116.110.117.42 [preauth] Oct 7 16:24:59 scivo sshd[468]: Invalid user username from 116.110.117.42 Oct 7 16:24:59 scivo sshd[468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= ........ -------------------------------	2019-10-09 00:32:22
attack	Oct 7 14:50:17 mail sshd[31134]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.110.117.42 Oct 7 14:50:18 mail sshd[31122]: Failed password for root from 116.110.117.42 port 24270 ssh2 Oct 7 14:50:19 mail sshd[31134]: Failed password for invalid user admin from 116.110.117.42 port 39264 ssh2	2019-10-07 20:52:11
attack	Oct 7 05:25:11 XXX sshd[31530]: Invalid user support from 116.110.117.42 port 13386	2019-10-07 14:22:15

Comments on same subnet:

IP	Type	Details	Datetime
116.110.117.107	attackbotsspam	Automatic report - Port Scan Attack	2020-02-24 18:23:35
116.110.117.48	attackspambots	unauthorized connection attempt	2020-01-12 20:29:08
116.110.117.247	attack	8728/tcp 22/tcp 8291/tcp... [2019-12-12]4pkt,3pt.(tcp)	2019-12-13 02:26:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.110.117.42
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52123
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.110.117.42.			IN	A

;; AUTHORITY SECTION:
.			453	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100700 1800 900 604800 86400

;; Query time: 104 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Oct 07 14:22:12 CST 2019
;; MSG SIZE  rcvd: 118

Host info

Host 42.117.110.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
*** Can't find 42.117.110.116.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.240.1.0	attackbotsspam	May 31 05:40:12 electroncash sshd[18009]: Failed password for root from 222.240.1.0 port 31844 ssh2 May 31 05:42:58 electroncash sshd[18741]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.240.1.0 user=root May 31 05:43:00 electroncash sshd[18741]: Failed password for root from 222.240.1.0 port 23613 ssh2 May 31 05:45:41 electroncash sshd[19438]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.240.1.0 user=root May 31 05:45:43 electroncash sshd[19438]: Failed password for root from 222.240.1.0 port 44047 ssh2 ...	2020-05-31 20:05:39
124.158.7.61	attackbotsspam	Attempted connection to port 445.	2020-05-31 19:55:42
49.234.76.196	attackspam	Invalid user anthony from 49.234.76.196 port 48862	2020-05-31 19:29:57
92.63.196.3	attackbots	May 31 13:24:00 debian-2gb-nbg1-2 kernel: \[13183016.970735\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=92.63.196.3 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=34768 PROTO=TCP SPT=42889 DPT=34567 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-31 19:41:03
50.210.197.174	attackspambots	May 31 13:35:04 localhost sshd\[17373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.210.197.174 user=root May 31 13:35:06 localhost sshd\[17373\]: Failed password for root from 50.210.197.174 port 40648 ssh2 May 31 13:38:48 localhost sshd\[17498\]: Invalid user minecraft from 50.210.197.174 May 31 13:38:48 localhost sshd\[17498\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=50.210.197.174 May 31 13:38:50 localhost sshd\[17498\]: Failed password for invalid user minecraft from 50.210.197.174 port 46744 ssh2 ...	2020-05-31 19:46:49
110.77.148.247	attackspambots	Unauthorized connection attempt from IP address 110.77.148.247 on Port 445(SMB)	2020-05-31 20:00:03
113.164.236.59	attack	Unauthorized connection attempt from IP address 113.164.236.59 on Port 445(SMB)	2020-05-31 19:57:27
159.89.101.204	attackspam	159.89.101.204 - - [31/May/2020:04:46:14 +0100] "POST /wp-login.php HTTP/1.1" 200 1875 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.101.204 - - [31/May/2020:04:46:16 +0100] "POST /wp-login.php HTTP/1.1" 200 1860 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 159.89.101.204 - - [31/May/2020:04:46:16 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-05-31 19:35:15
117.9.181.189	attack	TCP (SYN) 117.9.181.189:46014 -> port 23, len 44	2020-05-31 20:06:00
152.136.224.46	attackbotsspam	May 31 18:16:09 itv-usvr-01 sshd[29852]: Invalid user engine from 152.136.224.46 May 31 18:16:09 itv-usvr-01 sshd[29852]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.224.46 May 31 18:16:09 itv-usvr-01 sshd[29852]: Invalid user engine from 152.136.224.46 May 31 18:16:11 itv-usvr-01 sshd[29852]: Failed password for invalid user engine from 152.136.224.46 port 60088 ssh2 May 31 18:22:12 itv-usvr-01 sshd[30076]: Invalid user sms from 152.136.224.46	2020-05-31 19:26:57
190.64.64.77	attackspambots	Automatic report - Banned IP Access	2020-05-31 19:56:36
58.215.235.146	attack	Unauthorized connection attempt detected from IP address 58.215.235.146 to port 1433	2020-05-31 19:36:42
176.98.241.118	attackspambots	Unauthorized connection attempt from IP address 176.98.241.118 on Port 445(SMB)	2020-05-31 19:52:50
78.62.199.18	attackspam	[MK-VM3] Blocked by UFW	2020-05-31 19:51:40
185.176.27.210	attackspam	TCP ports : 3411 / 3481 / 3489	2020-05-31 19:30:47

Recently Reported IPs

94.145.95.101	135.27.150.93	39.158.156.208	37.137.229.188
168.29.231.227	254.251.116.25	68.191.117.68	140.99.70.170
112.110.184.47	122.114.252.133	192.42.175.233	63.218.13.53
104.203.198.246	155.134.203.61	78.121.187.73	223.206.241.20
42.7.187.157	219.223.234.8	117.91.254.120	122.140.115.248