117.6.2.120 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
117.6.211.161	attack	Brute forcing RDP port 3389	2020-09-30 09:52:09
117.6.211.161	attackspam	Brute forcing RDP port 3389	2020-09-30 02:43:42
117.6.211.161	attack	Brute forcing RDP port 3389	2020-09-29 18:47:00
117.6.211.41	attackspambots	1599471819 - 09/07/2020 11:43:39 Host: 117.6.211.41/117.6.211.41 Port: 445 TCP Blocked	2020-09-07 23:04:11
117.6.211.41	attack	20/9/6@12:52:05: FAIL: Alarm-Network address from=117.6.211.41 ...	2020-09-07 14:41:32
117.6.211.41	attackspambots	20/9/6@12:52:05: FAIL: Alarm-Network address from=117.6.211.41 ...	2020-09-07 07:11:34
117.6.215.134	attackspambots	Unauthorized connection attempt from IP address 117.6.215.134 on Port 445(SMB)	2020-08-31 20:19:49
117.6.219.104	attackbotsspam	20/8/27@23:53:42: FAIL: Alarm-Intrusion address from=117.6.219.104 ...	2020-08-28 14:23:27
117.6.240.170	attack	Aug 20 06:07:27 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=117.6.240.170, lip=185.198.26.142, TLS, session= ...	2020-08-20 21:23:28
117.6.240.17	attack	#6895 - [117.6.240.170] Closing connection (IP still banned) #6895 - [117.6.240.170] Closing connection (IP still banned) #6895 - [117.6.240.170] Closing connection (IP still banned) #6895 - [117.6.240.170] Closing connection (IP still banned) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=117.6.240.17	2020-08-17 22:17:08
117.6.206.212	attack	Unauthorized connection attempt from IP address 117.6.206.212 on Port 445(SMB)	2020-07-29 07:39:08
117.6.208.218	attackspambots	1593741742 - 07/03/2020 04:02:22 Host: 117.6.208.218/117.6.208.218 Port: 445 TCP Blocked	2020-07-04 00:21:33
117.6.247.166	attackbotsspam	unauthorized connection attempt	2020-07-01 15:28:41
117.6.235.114	attack	20/6/30@08:20:55: FAIL: Alarm-Network address from=117.6.235.114 20/6/30@08:20:55: FAIL: Alarm-Network address from=117.6.235.114 ...	2020-07-01 01:32:46
117.6.227.127	attack	Hit honeypot r.	2020-06-30 18:43:32

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 117.6.2.120
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 53972
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;117.6.2.120.			IN	A

;; AUTHORITY SECTION:
.			568	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070101 1800 900 604800 86400

;; Query time: 108 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Jul 01 15:09:13 CST 2020
;; MSG SIZE  rcvd: 115

Host info

120.2.6.117.in-addr.arpa has no PTR record

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 120.2.6.117.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
40.126.229.102	attackspam	Mar 4 01:13:39 haigwepa sshd[12357]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.126.229.102 Mar 4 01:13:41 haigwepa sshd[12357]: Failed password for invalid user nijian from 40.126.229.102 port 39298 ssh2 ...	2020-03-04 10:16:25
35.210.44.6	attackspam	Mar 4 00:52:59 ArkNodeAT sshd\[23395\]: Invalid user daniel from 35.210.44.6 Mar 4 00:52:59 ArkNodeAT sshd\[23395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.210.44.6 Mar 4 00:53:00 ArkNodeAT sshd\[23395\]: Failed password for invalid user daniel from 35.210.44.6 port 33636 ssh2	2020-03-04 10:39:01
45.133.99.2	attackbotsspam	Mar 4 01:13:52 relay postfix/smtpd\[9554\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 4 01:16:26 relay postfix/smtpd\[9554\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 4 01:16:44 relay postfix/smtpd\[9556\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 4 01:19:03 relay postfix/smtpd\[13509\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Mar 4 01:19:23 relay postfix/smtpd\[9062\]: warning: unknown\[45.133.99.2\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-03-04 10:26:43
193.56.28.65	attack	Mar 3 23:06:11 jane sshd[7961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.56.28.65 Mar 3 23:06:13 jane sshd[7961]: Failed password for invalid user n from 193.56.28.65 port 56812 ssh2 ...	2020-03-04 10:02:54
117.6.97.138	attackspam	DATE:2020-03-04 01:09:59, IP:117.6.97.138, PORT:ssh SSH brute force auth (docker-dc)	2020-03-04 10:08:08
106.12.90.86	attack	Mar 3 15:33:31 hanapaa sshd\[26818\]: Invalid user jtsai from 106.12.90.86 Mar 3 15:33:31 hanapaa sshd\[26818\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.90.86 Mar 3 15:33:33 hanapaa sshd\[26818\]: Failed password for invalid user jtsai from 106.12.90.86 port 60349 ssh2 Mar 3 15:42:42 hanapaa sshd\[28132\]: Invalid user user from 106.12.90.86 Mar 3 15:42:42 hanapaa sshd\[28132\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.90.86	2020-03-04 10:14:03
200.57.250.120	attackspam	Automatic report - Port Scan Attack	2020-03-04 10:45:53
5.39.77.117	attackspambots	2020-03-04T01:51:33.030823shield sshd\[17387\]: Invalid user teamspeak from 5.39.77.117 port 57337 2020-03-04T01:51:33.035329shield sshd\[17387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3262586.ip-5-39-77.eu 2020-03-04T01:51:35.075400shield sshd\[17387\]: Failed password for invalid user teamspeak from 5.39.77.117 port 57337 ssh2 2020-03-04T01:58:56.539828shield sshd\[18468\]: Invalid user murali from 5.39.77.117 port 41451 2020-03-04T01:58:56.545631shield sshd\[18468\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3262586.ip-5-39-77.eu	2020-03-04 10:49:19
172.105.226.61	attackbots	Mar 3 23:05:43 debian-2gb-nbg1-2 kernel: \[5532320.343217\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=172.105.226.61 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=241 ID=54321 PROTO=TCP SPT=35177 DPT=9090 WINDOW=65535 RES=0x00 SYN URGP=0	2020-03-04 10:24:51
99.113.224.113	attackbots	Telnet Server BruteForce Attack	2020-03-04 10:33:25
47.91.232.165	attack	Mar 3 21:32:16 nxxxxxxx0 sshd[12915]: Invalid user kelly from 47.91.232.165 Mar 3 21:32:16 nxxxxxxx0 sshd[12915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.232.165 Mar 3 21:32:18 nxxxxxxx0 sshd[12915]: Failed password for invalid user kelly from 47.91.232.165 port 51136 ssh2 Mar 3 21:32:18 nxxxxxxx0 sshd[12915]: Received disconnect from 47.91.232.165: 11: Bye Bye [preauth] Mar 3 21:38:14 nxxxxxxx0 sshd[13393]: Invalid user chenhaixin from 47.91.232.165 Mar 3 21:38:14 nxxxxxxx0 sshd[13393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=47.91.232.165 Mar 3 21:38:16 nxxxxxxx0 sshd[13393]: Failed password for invalid user chenhaixin from 47.91.232.165 port 37674 ssh2 Mar 3 21:38:16 nxxxxxxx0 sshd[13393]: Received disconnect from 47.91.232.165: 11: Bye Bye [preauth] Mar 3 21:40:26 nxxxxxxx0 sshd[13565]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tt........ -------------------------------	2020-03-04 10:15:54
163.43.31.188	attackspam	2020-03-04T01:14:20.046817shield sshd\[12558\]: Invalid user martin from 163.43.31.188 port 40854 2020-03-04T01:14:20.051364shield sshd\[12558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.43.31.188 2020-03-04T01:14:22.199665shield sshd\[12558\]: Failed password for invalid user martin from 163.43.31.188 port 40854 ssh2 2020-03-04T01:21:55.199898shield sshd\[13491\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=163.43.31.188 user=root 2020-03-04T01:21:57.478623shield sshd\[13491\]: Failed password for root from 163.43.31.188 port 52516 ssh2	2020-03-04 10:04:18
45.12.220.208	attack	B: Magento admin pass test (wrong country)	2020-03-04 09:55:13
185.9.226.28	attack	2020-03-04T00:48:22.445509vps773228.ovh.net sshd[9278]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.226.28 2020-03-04T00:48:22.429452vps773228.ovh.net sshd[9278]: Invalid user demo from 185.9.226.28 port 56710 2020-03-04T00:48:24.489679vps773228.ovh.net sshd[9278]: Failed password for invalid user demo from 185.9.226.28 port 56710 ssh2 2020-03-04T01:49:06.658739vps773228.ovh.net sshd[11103]: Invalid user mailman from 185.9.226.28 port 51114 2020-03-04T01:49:06.670226vps773228.ovh.net sshd[11103]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.9.226.28 2020-03-04T01:49:06.658739vps773228.ovh.net sshd[11103]: Invalid user mailman from 185.9.226.28 port 51114 2020-03-04T01:49:08.638307vps773228.ovh.net sshd[11103]: Failed password for invalid user mailman from 185.9.226.28 port 51114 ssh2 2020-03-04T01:56:53.650201vps773228.ovh.net sshd[11359]: Invalid user sunlei from 185.9.226.28 port 53934 20 ...	2020-03-04 09:53:13
54.38.160.4	attackbots	Mar 3 15:35:52 wbs sshd\[24237\]: Invalid user tpgit from 54.38.160.4 Mar 3 15:35:52 wbs sshd\[24237\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4.ip-54-38-160.eu Mar 3 15:35:54 wbs sshd\[24237\]: Failed password for invalid user tpgit from 54.38.160.4 port 34620 ssh2 Mar 3 15:42:01 wbs sshd\[24810\]: Invalid user user9 from 54.38.160.4 Mar 3 15:42:01 wbs sshd\[24810\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip4.ip-54-38-160.eu	2020-03-04 10:12:33

Recently Reported IPs

252.164.204.120	24.213.216.252	173.27.149.58	36.88.100.243
174.120.55.119	17.113.208.58	6.170.9.169	176.25.87.98
181.161.160.128	209.201.194.223	175.212.131.155	227.231.208.10
189.213.93.213	35.10.130.70	158.216.185.164	117.245.13.54
73.44.105.195	105.176.132.243	171.35.119.136	139.180.218.161