117.2.104.3 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Vietnam

Internet Service Provider: Viettel Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Aug 16 14:26:31 *** sshd[20942]: Failed password for invalid user tit0nich from 117.2.104.3 port 60003 ssh2	2019-08-17 09:14:25

Comments on same subnet:

IP	Type	Details	Datetime
117.2.104.202	attackbotsspam	SSH bruteforce	2020-05-21 19:53:17
117.2.104.150	attackbots	DATE:2020-02-02 16:07:37, IP:117.2.104.150, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-02-03 03:42:15
117.2.104.240	attackspambots	1578431936 - 01/07/2020 22:18:56 Host: 117.2.104.240/117.2.104.240 Port: 445 TCP Blocked	2020-01-08 06:53:01
117.2.104.191	attackbotsspam	Unauthorized connection attempt from IP address 117.2.104.191 on Port 445(SMB)	2019-12-11 07:54:35
117.2.104.145	attack	Unauthorized connection attempt from IP address 117.2.104.145 on Port 445(SMB)	2019-09-09 23:00:40

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.2.104.3
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 13878
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.2.104.3.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081601 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Aug 17 09:14:19 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 3.104.2.117.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
*** Can't find 3.104.2.117.in-addr.arpa.: No answer

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
84.38.186.29	attackspambots	Unauthorised access (Jun 10) SRC=84.38.186.29 LEN=40 TTL=248 ID=27475 TCP DPT=3389 WINDOW=1024 SYN	2020-06-11 02:08:55
209.95.52.184	attack	Invalid user oe from 209.95.52.184 port 57931	2020-06-11 02:19:14
71.6.232.6	attackbotsspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-06-11 02:44:22
31.6.121.113	attack	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-11 02:12:19
14.241.239.37	attackspam	Honeypot attack, port: 445, PTR: PTR record not found	2020-06-11 02:27:20
36.229.56.82	attackspam	Unauthorised access (Jun 10) SRC=36.229.56.82 LEN=40 TTL=46 ID=45844 TCP DPT=8080 WINDOW=22526 SYN	2020-06-11 02:04:05
120.71.146.217	attackbotsspam	k+ssh-bruteforce	2020-06-11 02:28:29
89.248.172.123	attackspam	Jun 10 20:08:17 ns3042688 courier-pop3d: LOGIN FAILED, user=contato@alycotools.biz, ip=\[::ffff:89.248.172.123\] ...	2020-06-11 02:23:18
192.119.110.42	attack	TCP (SYN) 192.119.110.42:54709 -> port 23, len 40	2020-06-11 02:21:41
138.68.81.162	attack	Jun 10 20:39:54 vpn01 sshd[20270]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.81.162 Jun 10 20:39:57 vpn01 sshd[20270]: Failed password for invalid user zdq from 138.68.81.162 port 39996 ssh2 ...	2020-06-11 02:41:37
188.131.239.119	attack	Jun 10 16:18:47 vps sshd[919478]: Failed password for root from 188.131.239.119 port 35976 ssh2 Jun 10 16:21:03 vps sshd[931427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.239.119 user=root Jun 10 16:21:05 vps sshd[931427]: Failed password for root from 188.131.239.119 port 60400 ssh2 Jun 10 16:23:20 vps sshd[938599]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=188.131.239.119 user=root Jun 10 16:23:23 vps sshd[938599]: Failed password for root from 188.131.239.119 port 56640 ssh2 ...	2020-06-11 02:43:13
179.185.78.91	attackbots	$f2bV_matches	2020-06-11 02:30:14
129.204.44.231	attackspam	Jun 9 12:09:30 olgosrv01 sshd[12644]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.44.231 user=r.r Jun 9 12:09:32 olgosrv01 sshd[12644]: Failed password for r.r from 129.204.44.231 port 55842 ssh2 Jun 9 12:09:32 olgosrv01 sshd[12644]: Received disconnect from 129.204.44.231: 11: Bye Bye [preauth] Jun 9 12:15:35 olgosrv01 sshd[13292]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.44.231 user=r.r Jun 9 12:15:37 olgosrv01 sshd[13292]: Failed password for r.r from 129.204.44.231 port 34362 ssh2 Jun 9 12:15:37 olgosrv01 sshd[13292]: Received disconnect from 129.204.44.231: 11: Bye Bye [preauth] Jun 9 12:20:14 olgosrv01 sshd[13739]: Invalid user ghostnamelab-runner from 129.204.44.231 Jun 9 12:20:14 olgosrv01 sshd[13739]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.204.44.231 Jun 9 12:20:16 olgosrv01 sshd[13739]: Fail........ -------------------------------	2020-06-11 02:29:43
200.43.231.1	attackspam	(sshd) Failed SSH login from 200.43.231.1 (AR/Argentina/-): 5 in the last 3600 secs	2020-06-11 02:40:19
193.8.8.58	attack	"GET /wp-json/wp/v2/users HTTP/1.0"	2020-06-11 02:24:10

Recently Reported IPs

154.54.107.138	231.245.0.14	22.35.144.110	117.183.199.161
157.146.151.208	177.93.109.138	46.14.236.51	37.147.197.58
24.237.145.10	184.30.35.22	112.195.109.187	23.216.1.194
190.71.49.191	71.208.23.165	217.116.152.206	60.147.121.98
175.145.102.147	111.67.206.43	46.170.92.188	35.29.153.35