118.172.204.21

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
118.172.204.96	attackspam	Unauthorised access (Mar 21) SRC=118.172.204.96 LEN=44 TTL=51 ID=24320 TCP DPT=8080 WINDOW=48 SYN Unauthorised access (Mar 20) SRC=118.172.204.96 LEN=44 TTL=51 ID=11010 TCP DPT=8080 WINDOW=48 SYN	2020-03-21 06:49:07
118.172.204.235	attackspambots	Unauthorized connection attempt from IP address 118.172.204.235 on Port 445(SMB)	2020-01-31 21:24:06
118.172.204.225	attackbotsspam	1576558590 - 12/17/2019 05:56:30 Host: 118.172.204.225/118.172.204.225 Port: 445 TCP Blocked	2019-12-17 13:25:31

Type

Details

Datetime

118.172.204.96

attackspam

Unauthorised access (Mar 21) SRC=118.172.204.96 LEN=44 TTL=51 ID=24320 TCP DPT=8080 WINDOW=48 SYN 
Unauthorised access (Mar 20) SRC=118.172.204.96 LEN=44 TTL=51 ID=11010 TCP DPT=8080 WINDOW=48 SYN

2020-03-21 06:49:07

118.172.204.235

attackspambots

Unauthorized connection attempt from IP address 118.172.204.235 on Port 445(SMB)

2020-01-31 21:24:06

118.172.204.225

attackbotsspam

1576558590 - 12/17/2019 05:56:30 Host: 118.172.204.225/118.172.204.225 Port: 445 TCP Blocked

2019-12-17 13:25:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 118.172.204.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 1037
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;118.172.204.21.			IN	A

;; AUTHORITY SECTION:
.			370	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030802 1800 900 604800 86400

;; Query time: 80 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 09 05:24:53 CST 2022
;; MSG SIZE  rcvd: 107

Host info

21.204.172.118.in-addr.arpa domain name pointer node-14b9.pool-118-172.dynamic.totinternet.net.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.204.172.118.in-addr.arpa	name = node-14b9.pool-118-172.dynamic.totinternet.net.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
188.191.201.174	attack	$f2bV_matches	2019-11-08 14:15:20
134.209.178.109	attackspambots	Nov 8 11:38:06 areeb-Workstation sshd[17369]: Failed password for root from 134.209.178.109 port 44124 ssh2 ...	2019-11-08 14:26:08
192.144.218.139	attack	2019-11-08T06:01:21.351538abusebot-4.cloudsearch.cf sshd\[4981\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.144.218.139 user=root	2019-11-08 14:25:53
202.112.51.124	attack	Automatic report - Port Scan	2019-11-08 14:43:19
45.113.200.69	attackspam	Automatic report - Port Scan Attack	2019-11-08 14:41:53
209.217.19.2	attackbotsspam	WordPress XMLRPC scan :: 209.217.19.2 0.176 BYPASS [08/Nov/2019:04:52:51 0000] [censored_4] "POST /xmlrpc.php HTTP/1.1" 200 236 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"	2019-11-08 14:23:17
138.201.225.196	attack	SSH Brute Force	2019-11-08 14:50:01
195.154.82.61	attackspam	Nov 8 07:28:13 localhost sshd\[26775\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.82.61 user=root Nov 8 07:28:16 localhost sshd\[26775\]: Failed password for root from 195.154.82.61 port 41878 ssh2 Nov 8 07:31:29 localhost sshd\[26995\]: Invalid user ahccadmin from 195.154.82.61 Nov 8 07:31:30 localhost sshd\[26995\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.154.82.61 Nov 8 07:31:32 localhost sshd\[26995\]: Failed password for invalid user ahccadmin from 195.154.82.61 port 50942 ssh2 ...	2019-11-08 14:49:02
46.38.144.17	attack	Nov 8 07:07:58 relay postfix/smtpd\[32581\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 8 07:08:17 relay postfix/smtpd\[20920\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 8 07:08:35 relay postfix/smtpd\[32582\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 8 07:08:55 relay postfix/smtpd\[24564\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 8 07:09:13 relay postfix/smtpd\[32437\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-11-08 14:09:40
218.92.0.189	attackspambots	$f2bV_matches	2019-11-08 14:02:22
103.1.239.135	attackspam	WordPress (CMS) attack attempts. Date: 2019 Nov 08. 05:39:24 Source IP: 103.1.239.135 Portion of the log(s): 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2418 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2412 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2411 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php HTTP/1.1" 200 2415 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 103.1.239.135 - [08/Nov/2019:05:39:23 +0100] "POST /wp-login.php	2019-11-08 14:13:59
188.16.71.5	attack	Chat Spam	2019-11-08 14:28:10
114.67.230.197	attackspam	F2B jail: sshd. Time: 2019-11-08 06:59:23, Reported by: VKReport	2019-11-08 14:08:19
81.28.107.54	attackbotsspam	Nov 8 05:52:47 exim[2081]: 2019-11-08 05:52:47 1iSwGM-0000XZ-Gj H=shrill.stop-snore-de.com (shrill.wpkaka.co) [81.28.107.54] F= rejected after DATA: This message scored 103.5 spam points.	2019-11-08 14:18:51
13.67.91.234	attackspam	Nov 7 20:27:00 web1 sshd\[9707\]: Invalid user btest from 13.67.91.234 Nov 7 20:27:00 web1 sshd\[9707\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.91.234 Nov 7 20:27:02 web1 sshd\[9707\]: Failed password for invalid user btest from 13.67.91.234 port 54029 ssh2 Nov 7 20:31:49 web1 sshd\[10166\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=13.67.91.234 user=root Nov 7 20:31:50 web1 sshd\[10166\]: Failed password for root from 13.67.91.234 port 45259 ssh2	2019-11-08 14:47:11

Recently Reported IPs

131.100.148.76	131.100.149.115	131.100.149.233	131.100.150.225
131.100.150.74	131.100.151.35	131.100.151.1	131.100.151.45
118.172.204.214	131.100.151.80	131.100.151.61	131.100.151.63
131.100.159.199	131.100.151.83	131.100.159.149	131.100.151.98
131.100.159.237	131.100.159.243	131.100.16.236	118.172.204.224