117.4.242.75 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Viettel Corporation

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbots	Unauthorized connection attempt from IP address 117.4.242.75 on Port 445(SMB)	2020-05-05 22:57:32

Comments on same subnet:

IP	Type	Details	Datetime
117.4.242.27	attackbotsspam	2020-05-26T15:54:04Z - RDP login failed multiple times. (117.4.242.27)	2020-05-27 02:54:17
117.4.242.101	attack	Unauthorized connection attempt from IP address 117.4.242.101 on Port 445(SMB)	2020-04-26 23:52:05
117.4.242.176	attackspam	1433/tcp [2019-11-01]1pkt	2019-11-01 14:39:26
117.4.242.101	attack	Unauthorized connection attempt from IP address 117.4.242.101 on Port 445(SMB)	2019-11-01 00:33:54
117.4.242.176	attack	/public/index.php?s=index\/think\app/invokefunction&function=call_user_func_array&vars[0]=phpinfo&vars[1][]=1	2019-10-06 01:01:35
117.4.242.204	attackspambots	Oct 5 02:32:44 hpm sshd\[13048\]: Invalid user Queen123 from 117.4.242.204 Oct 5 02:32:44 hpm sshd\[13048\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.4.242.204 Oct 5 02:32:45 hpm sshd\[13048\]: Failed password for invalid user Queen123 from 117.4.242.204 port 56396 ssh2 Oct 5 02:37:11 hpm sshd\[13434\]: Invalid user 123Bike from 117.4.242.204 Oct 5 02:37:11 hpm sshd\[13434\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.4.242.204	2019-10-05 20:47:08
117.4.242.93	attackspambots	Unauthorized connection attempt from IP address 117.4.242.93 on Port 445(SMB)	2019-08-31 17:00:52
117.4.242.36	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-06-26 09:07:32,333 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.4.242.36)	2019-06-27 05:03:14

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.4.242.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 22102
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.4.242.75.			IN	A

;; AUTHORITY SECTION:
.			193	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020050500 1800 900 604800 86400

;; Query time: 110 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue May 05 22:57:27 CST 2020
;; MSG SIZE  rcvd: 116

Host info

75.242.4.117.in-addr.arpa domain name pointer localhost.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
75.242.4.117.in-addr.arpa	name = localhost.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.72	attackbotsspam	Jun 9 07:11:32 game-panel sshd[4190]: Failed password for root from 49.88.112.72 port 15049 ssh2 Jun 9 07:18:08 game-panel sshd[4530]: Failed password for root from 49.88.112.72 port 34498 ssh2	2020-06-09 15:27:06
193.169.255.18	attackspambots	Jun 9 09:33:26 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session= Jun 9 09:34:50 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session= Jun 9 09:37:44 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=<9FJ8zaGnLunBqf8S> Jun 9 09:38:02 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, session=<2udKzqGnzkHBqf8S> Jun 9 09:39:51 server dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=193.169.255.18, lip=172.104.140.148, ...	2020-06-09 15:44:49
185.39.11.47	attackspam	TCP (SYN) 185.39.11.47:52416 -> port 35041, len 44	2020-06-09 15:50:13
106.12.214.145	attack	Jun 9 04:05:35 game-panel sshd[25860]: Failed password for root from 106.12.214.145 port 43816 ssh2 Jun 9 04:12:26 game-panel sshd[26275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.214.145 Jun 9 04:12:28 game-panel sshd[26275]: Failed password for invalid user vagrant from 106.12.214.145 port 39292 ssh2	2020-06-09 15:38:50
52.231.54.157	attack	SSH bruteforce	2020-06-09 15:36:55
119.45.142.15	attackbots	bruteforce detected	2020-06-09 15:53:26
200.68.12.164	attackspam	Unauthorized connection attempt detected from IP address 200.68.12.164 to port 9530	2020-06-09 15:29:53
141.98.81.207	attack	2020-06-09T07:58:27.521267homeassistant sshd[5334]: Invalid user admin from 141.98.81.207 port 10057 2020-06-09T07:58:27.530295homeassistant sshd[5334]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.98.81.207 ...	2020-06-09 16:10:41
58.220.39.133	attackspam	Jun 9 07:55:49 nextcloud sshd\[31411\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.39.133 user=root Jun 9 07:55:51 nextcloud sshd\[31411\]: Failed password for root from 58.220.39.133 port 44526 ssh2 Jun 9 07:59:25 nextcloud sshd\[2754\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.220.39.133 user=root	2020-06-09 16:07:52
49.232.16.241	attackbots	Jun 9 05:53:54 ns3033917 sshd[11439]: Invalid user vlad from 49.232.16.241 port 39624 Jun 9 05:53:57 ns3033917 sshd[11439]: Failed password for invalid user vlad from 49.232.16.241 port 39624 ssh2 Jun 9 05:59:59 ns3033917 sshd[11469]: Invalid user tkim from 49.232.16.241 port 41278 ...	2020-06-09 15:36:10
51.254.156.114	attack	Jun 8 19:38:09 sachi sshd\[22383\]: Invalid user caoyan from 51.254.156.114 Jun 8 19:38:09 sachi sshd\[22383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip114.ip-51-254-156.eu Jun 8 19:38:10 sachi sshd\[22383\]: Failed password for invalid user caoyan from 51.254.156.114 port 48598 ssh2 Jun 8 19:47:17 sachi sshd\[23188\]: Invalid user user4 from 51.254.156.114 Jun 8 19:47:17 sachi sshd\[23188\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip114.ip-51-254-156.eu	2020-06-09 15:48:57
117.50.34.131	attack	Jun 9 12:12:46 dhoomketu sshd[593010]: Failed password for invalid user olga from 117.50.34.131 port 52010 ssh2 Jun 9 12:15:12 dhoomketu sshd[593053]: Invalid user upload from 117.50.34.131 port 51212 Jun 9 12:15:12 dhoomketu sshd[593053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.50.34.131 Jun 9 12:15:12 dhoomketu sshd[593053]: Invalid user upload from 117.50.34.131 port 51212 Jun 9 12:15:14 dhoomketu sshd[593053]: Failed password for invalid user upload from 117.50.34.131 port 51212 ssh2 ...	2020-06-09 16:05:52
118.31.111.216	attack	Malicious/Probing: /admin/themes/simplebootx/Public/assets/css/admin_login.css	2020-06-09 15:46:51
167.172.178.216	attackspambots	ssh brute force	2020-06-09 16:09:28
118.25.176.15	attack	Jun 9 06:58:50 vps639187 sshd\[17685\]: Invalid user ftpuser from 118.25.176.15 port 37532 Jun 9 06:58:50 vps639187 sshd\[17685\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.176.15 Jun 9 06:58:52 vps639187 sshd\[17685\]: Failed password for invalid user ftpuser from 118.25.176.15 port 37532 ssh2 ...	2020-06-09 15:41:34

Recently Reported IPs

223.26.18.160	82.209.135.85	70.74.7.1	113.165.91.72
207.9.210.175	12.21.35.197	213.28.87.200	232.83.104.6
133.250.144.2	238.198.95.98	182.184.73.103	216.57.74.63
1.241.49.70	50.6.182.16	9.143.95.90	125.231.222.197
104.248.56.150	103.99.17.117	14.102.6.180	217.219.163.1