117.2.6.12 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: Viettel Group

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.2.64.117	attackspambots	TCP (SYN) 117.2.64.117:63070 -> port 445, len 52	2020-08-13 02:41:19
117.2.64.45	attackspam	1596340316 - 08/02/2020 05:51:56 Host: 117.2.64.45/117.2.64.45 Port: 445 TCP Blocked	2020-08-02 15:16:45
117.2.64.46	attackbots	Unauthorized connection attempt from IP address 117.2.64.46 on Port 445(SMB)	2020-05-20 22:10:28
117.2.66.19	attack	[Mon May 11 07:40:33 2020] - Syn Flood From IP: 117.2.66.19 Port: 64682	2020-05-12 01:35:55
117.2.62.32	attackbots	Honeypot attack, port: 445, PTR: localhost.	2020-04-01 03:40:20
117.2.64.42	attackbots	1576731337 - 12/19/2019 05:55:37 Host: 117.2.64.42/117.2.64.42 Port: 445 TCP Blocked	2019-12-19 13:18:55
117.2.62.13	attackbots	Unauthorized connection attempt detected from IP address 117.2.62.13 to port 445	2019-12-19 04:28:28
117.2.60.28	attackspambots	1576223232 - 12/13/2019 08:47:12 Host: 117.2.60.28/117.2.60.28 Port: 445 TCP Blocked	2019-12-13 16:58:22

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.2.6.12
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 49115
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.2.6.12.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019040201 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.3#53(67.207.67.3)
;; WHEN: Wed Apr 03 11:32:14 +08 2019
;; MSG SIZE  rcvd: 114

Host info

12.6.2.117.in-addr.arpa domain name pointer localhost.

Nslookup info:

Server:		67.207.67.3
Address:	67.207.67.3#53

Non-authoritative answer:
12.6.2.117.in-addr.arpa	name = localhost.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
104.244.74.98	attackbotsspam	Jan 8 03:33:45 mercury kernel: [UFW ALLOW] IN=eth0 OUT= MAC=f2:3c:91:bc:4d:f8:84:78:ac:0d:8f:41:08:00 SRC=104.244.74.98 DST=109.74.200.221 LEN=37 TOS=0x08 PREC=0x20 TTL=56 ID=0 DF PROTO=UDP SPT=49034 DPT=123 LEN=17 ...	2020-03-04 02:07:28
106.13.63.41	attack	Brute-force attempt banned	2020-03-04 02:14:51
43.252.120.142	attackspam	Spam from no-reply@mote.keepran.com	2020-03-04 01:47:03
107.189.11.193	attackspambots	Port 22 (SSH) access denied	2020-03-04 02:01:56
103.208.200.222	attack	Feb 11 10:41:48 mercury wordpress(www.learnargentinianspanish.com)[6365]: XML-RPC authentication attempt for unknown user chris from 103.208.200.222 ...	2020-03-04 02:13:30
220.73.134.138	attack	Mar 2 18:31:59 liveconfig01 sshd[15502]: Invalid user ftpuser from 220.73.134.138 Mar 2 18:31:59 liveconfig01 sshd[15502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.73.134.138 Mar 2 18:32:01 liveconfig01 sshd[15502]: Failed password for invalid user ftpuser from 220.73.134.138 port 38852 ssh2 Mar 2 18:32:01 liveconfig01 sshd[15502]: Received disconnect from 220.73.134.138 port 38852:11: Normal Shutdown [preauth] Mar 2 18:32:01 liveconfig01 sshd[15502]: Disconnected from 220.73.134.138 port 38852 [preauth] Mar 2 18:36:36 liveconfig01 sshd[15708]: Invalid user luett from 220.73.134.138 Mar 2 18:36:36 liveconfig01 sshd[15708]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.73.134.138 Mar 2 18:36:38 liveconfig01 sshd[15708]: Failed password for invalid user luett from 220.73.134.138 port 36628 ssh2 Mar 2 18:36:38 liveconfig01 sshd[15708]: Received disconnect from 220.73.1........ -------------------------------	2020-03-04 01:52:47
102.152.27.161	attackbots	2020-01-27T17:03:04.344Z CLOSE host=102.152.27.161 port=50243 fd=4 time=20.083 bytes=25 ...	2020-03-04 02:13:55
185.230.82.40	attackbots	Invalid user otrs from 185.230.82.40 port 40500	2020-03-04 01:46:08
47.180.63.37	attack	Banned by Fail2Ban.	2020-03-04 01:45:27
103.114.10.238	attackbots	Jan 6 17:19:12 mercury wordpress(www.learnargentinianspanish.com)[11143]: XML-RPC authentication failure for luke from 103.114.10.238 ...	2020-03-04 02:03:30
108.161.143.225	attack	Feb 2 20:49:51 mercury smtpd[1162]: d838dc7d8522c357 smtp event=failed-command address=108.161.143.225 host=108.161.143.225 command="RCPT TO:" result="550 Invalid recipient" ...	2020-03-04 02:26:26
41.234.66.22	attackbotsspam	Mar 3 18:57:03 localhost sshd\[27787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22 user=root Mar 3 18:57:05 localhost sshd\[27791\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.234.66.22 user=root Mar 3 18:57:06 localhost sshd\[27787\]: Failed password for root from 41.234.66.22 port 49685 ssh2 Mar 3 18:57:07 localhost sshd\[27791\]: Failed password for root from 41.234.66.22 port 33250 ssh2 Mar 3 18:57:08 localhost sshd\[27793\]: Invalid user ubuntu from 41.234.66.22 ...	2020-03-04 02:03:58
103.130.172.57	attack	Jan 5 10:07:27 mercury wordpress(www.learnargentinianspanish.com)[27357]: XML-RPC authentication failure for luke from 103.130.172.57 ...	2020-03-04 01:56:48
103.73.102.130	attack	[Thu Nov 21 09:06:31.194975 2019] [access_compat:error] [pid 14650] [client 103.73.102.130:50224] AH01797: client denied by server configuration: /var/www/html/josh/wp-login.php ...	2020-03-04 02:05:47
222.186.42.136	attackbots	Mar 3 19:09:39 debian64 sshd[6926]: Failed password for root from 222.186.42.136 port 21940 ssh2 Mar 3 19:09:42 debian64 sshd[6926]: Failed password for root from 222.186.42.136 port 21940 ssh2 ...	2020-03-04 02:20:01

Recently Reported IPs

92.118.160.1	113.58.61.243	77.48.26.27	50.246.38.98
46.61.247.122	65.61.122.99	175.223.33.120	49.176.175.223
119.160.167.192	83.144.92.94	14.161.44.202	159.65.12.204
222.35.8.61	119.29.227.222	103.250.157.39	82.165.85.249
193.32.163.52	80.82.77.33	179.124.21.10	175.176.186.26