117.102.66.210

Basic Info

City: unknown

Region: unknown

Country: Indonesia

Internet Service Provider: Biznet ISP

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	1578632217 - 01/10/2020 05:56:57 Host: 117.102.66.210/117.102.66.210 Port: 445 TCP Blocked	2020-01-10 14:14:26

Comments on same subnet:

IP	Type	Details	Datetime
117.102.66.149	attack	20/4/1@23:54:39: FAIL: Alarm-Network address from=117.102.66.149 ...	2020-04-02 17:34:11
117.102.66.234	attackspam	Unauthorized connection attempt from IP address 117.102.66.234 on Port 445(SMB)	2020-03-14 03:08:04
117.102.66.187	attack	Unauthorized connection attempt from IP address 117.102.66.187 on Port 445(SMB)	2020-02-13 19:29:36
117.102.66.211	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-06 19:11:07
117.102.66.21	attackbots	(sshd) Failed SSH login from 117.102.66.21 (ID/Indonesia/East Java/Malang/-/[AS17451 BIZNET NETWORKS]): 1 in the last 3600 secs	2019-12-13 16:08:02
117.102.66.150	attackbotsspam	19/10/9@23:48:41: FAIL: Alarm-Intrusion address from=117.102.66.150 ...	2019-10-10 16:39:08
117.102.66.149	attack	Attempt to attack host OS, exploiting network vulnerabilities, on 28-09-2019 21:50:13.	2019-09-29 07:28:27
117.102.66.22	attackbotsspam	Sun, 21 Jul 2019 18:26:52 +0000 likely compromised host or open proxy. ddos rate spidering	2019-07-22 09:44:02
117.102.66.46	attack	19/7/6@09:24:20: FAIL: Alarm-Intrusion address from=117.102.66.46 19/7/6@09:24:21: FAIL: Alarm-Intrusion address from=117.102.66.46 ...	2019-07-07 03:26:56
117.102.66.128	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2019-07-01 18:48:11

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.102.66.210
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60761
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.102.66.210.			IN	A

;; AUTHORITY SECTION:
.			438	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010901 1800 900 604800 86400

;; Query time: 72 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jan 10 14:14:18 CST 2020
;; MSG SIZE  rcvd: 118

Host info

Host 210.66.102.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 210.66.102.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
218.92.0.248	attackspambots	Aug 27 23:55:45 gw1 sshd[24812]: Failed password for root from 218.92.0.248 port 24166 ssh2 Aug 27 23:55:56 gw1 sshd[24812]: error: maximum authentication attempts exceeded for root from 218.92.0.248 port 24166 ssh2 [preauth] ...	2020-08-28 03:09:33
189.62.69.106	attackspam	Aug 27 14:51:17 inter-technics sshd[12238]: Invalid user adeus from 189.62.69.106 port 57787 Aug 27 14:51:17 inter-technics sshd[12238]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.62.69.106 Aug 27 14:51:17 inter-technics sshd[12238]: Invalid user adeus from 189.62.69.106 port 57787 Aug 27 14:51:19 inter-technics sshd[12238]: Failed password for invalid user adeus from 189.62.69.106 port 57787 ssh2 Aug 27 14:57:33 inter-technics sshd[12757]: Invalid user testt from 189.62.69.106 port 32815 ...	2020-08-28 03:27:06
109.100.27.35	attack	TCP (SYN) 109.100.27.35:64122 -> port 23, len 44	2020-08-28 03:15:12
124.161.215.107	attack	Aug 24 14:59:38 debian-4gb-nbg1-mysql sshd[29347]: Invalid user hy from 124.161.215.107 port 33489 Aug 24 14:59:40 debian-4gb-nbg1-mysql sshd[29347]: Failed password for invalid user hy from 124.161.215.107 port 33489 ssh2 Aug 24 15:03:12 debian-4gb-nbg1-mysql sshd[29720]: Invalid user test from 124.161.215.107 port 56186 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=124.161.215.107	2020-08-28 03:11:07
193.112.143.80	attackbots	Aug 27 18:49:31 rush sshd[30212]: Failed password for root from 193.112.143.80 port 46501 ssh2 Aug 27 18:52:35 rush sshd[30352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.143.80 Aug 27 18:52:37 rush sshd[30352]: Failed password for invalid user anni from 193.112.143.80 port 35418 ssh2 ...	2020-08-28 03:09:58
58.250.44.53	attack	Invalid user chu from 58.250.44.53 port 30510	2020-08-28 02:52:12
139.59.146.28	attack	139.59.146.28 - - [27/Aug/2020:14:58:12 +0200] "GET /wp-login.php HTTP/1.1" 200 9040 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.146.28 - - [27/Aug/2020:14:58:13 +0200] "POST /wp-login.php HTTP/1.1" 200 9291 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 139.59.146.28 - - [27/Aug/2020:14:58:14 +0200] "POST /xmlrpc.php HTTP/1.1" 200 427 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2020-08-28 02:53:32
87.98.182.93	attack	Aug 27 20:36:53 mout sshd[26687]: Invalid user cd from 87.98.182.93 port 41618	2020-08-28 02:54:46
111.229.26.217	attackbots	$f2bV_matches	2020-08-28 03:16:38
101.236.60.31	attack	Aug 27 18:12:55 h2829583 sshd[17493]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.236.60.31	2020-08-28 03:18:11
103.246.240.30	attack	SSH BruteForce Attack	2020-08-28 02:57:25
222.186.15.62	attack	2020-08-27T19:10:10.932398shield sshd\[24967\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root 2020-08-27T19:10:13.210122shield sshd\[24967\]: Failed password for root from 222.186.15.62 port 60190 ssh2 2020-08-27T19:10:15.206146shield sshd\[24967\]: Failed password for root from 222.186.15.62 port 60190 ssh2 2020-08-27T19:10:17.462816shield sshd\[24967\]: Failed password for root from 222.186.15.62 port 60190 ssh2 2020-08-27T19:10:24.675303shield sshd\[25058\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.15.62 user=root	2020-08-28 03:13:13
150.95.153.82	attackbotsspam	2020-08-27T17:08:48.914711abusebot-5.cloudsearch.cf sshd[12174]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-153-82.a092.g.tyo1.static.cnode.io user=root 2020-08-27T17:08:50.505422abusebot-5.cloudsearch.cf sshd[12174]: Failed password for root from 150.95.153.82 port 42558 ssh2 2020-08-27T17:13:35.368705abusebot-5.cloudsearch.cf sshd[12191]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-153-82.a092.g.tyo1.static.cnode.io user=root 2020-08-27T17:13:36.693627abusebot-5.cloudsearch.cf sshd[12191]: Failed password for root from 150.95.153.82 port 57018 ssh2 2020-08-27T17:17:33.069950abusebot-5.cloudsearch.cf sshd[12253]: Invalid user sales from 150.95.153.82 port 36476 2020-08-27T17:17:33.077101abusebot-5.cloudsearch.cf sshd[12253]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=v150-95-153-82.a092.g.tyo1.static.cnode.io 2020-08-27T17:17:33.069950 ...	2020-08-28 03:05:32
81.4.110.153	attack	2020-08-25 16:02:14 server sshd[36952]: Failed password for invalid user luciano from 81.4.110.153 port 40194 ssh2	2020-08-28 03:18:41
192.241.235.13	attackbotsspam	Port scan: Attack repeated for 24 hours	2020-08-28 03:05:00

Recently Reported IPs

125.160.66.115	36.73.218.196	58.186.107.169	98.246.206.24
36.77.93.117	125.161.128.52	125.167.233.182	14.167.68.171
81.18.56.10	124.156.115.99	93.31.163.103	31.153.106.0
69.55.49.104	177.11.46.66	183.88.242.22	14.160.221.194
192.200.206.79	185.79.242.187	123.180.68.183	118.175.16.6