123.20.6.21 - IPInfo

Basic Info

City: Ho Chi Minh City

Region: Ho Chi Minh

Country: Vietnam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: VNPT Corp

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Aug 10 15:16:23 srv-4 sshd\[31948\]: Invalid user admin from 123.20.6.21 Aug 10 15:16:23 srv-4 sshd\[31948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.6.21 Aug 10 15:16:25 srv-4 sshd\[31948\]: Failed password for invalid user admin from 123.20.6.21 port 52740 ssh2 ...	2019-08-11 01:33:45

Type

Details

Datetime

attack

Aug 10 15:16:23 srv-4 sshd\[31948\]: Invalid user admin from 123.20.6.21
Aug 10 15:16:23 srv-4 sshd\[31948\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.6.21
Aug 10 15:16:25 srv-4 sshd\[31948\]: Failed password for invalid user admin from 123.20.6.21 port 52740 ssh2
...

2019-08-11 01:33:45

Comments on same subnet:

IP	Type	Details	Datetime
123.20.63.228	attackbots	failed_logins	2020-05-23 06:55:36
123.20.60.213	attackbots	Brute force attempt	2020-03-04 17:13:50
123.20.6.18	attackspam	Jan 13 22:13:14 pl2server sshd[28280]: Invalid user admin from 123.20.6.18 Jan 13 22:13:14 pl2server sshd[28280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.20.6.18 Jan 13 22:13:15 pl2server sshd[28280]: Failed password for invalid user admin from 123.20.6.18 port 45257 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.20.6.18	2020-01-14 07:34:50
123.20.63.240	attackspam	Dec 30 01:27:51 web1 postfix/smtpd[6652]: warning: unknown[123.20.63.240]: SASL PLAIN authentication failed: authentication failure ...	2019-12-30 16:53:26
123.20.61.122	attack	Lines containing failures of 123.20.61.122 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.20.61.122	2019-10-18 06:47:50

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.20.6.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 60507
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.20.6.21.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019081000 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sun Aug 11 01:33:35 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 21.6.20.123.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 21.6.20.123.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
193.95.247.90	attackbots	Invalid user xwj from 193.95.247.90 port 60426	2020-09-04 17:51:28
45.6.18.65	attackspambots	2020-07-31 05:27:08,324 fail2ban.actions [18606]: NOTICE [sshd] Ban 45.6.18.65 2020-07-31 05:47:12,803 fail2ban.actions [18606]: NOTICE [sshd] Ban 45.6.18.65 2020-07-31 06:07:16,482 fail2ban.actions [18606]: NOTICE [sshd] Ban 45.6.18.65 2020-07-31 06:27:06,416 fail2ban.actions [18606]: NOTICE [sshd] Ban 45.6.18.65 2020-07-31 06:47:23,282 fail2ban.actions [18606]: NOTICE [sshd] Ban 45.6.18.65 ...	2020-09-04 17:39:01
77.123.248.42	attackspambots	Honeypot attack, port: 445, PTR: 77.123.248.42.itvk-sim.ru.	2020-09-04 17:51:59
177.136.39.254	attackbotsspam	Sep 4 10:29:41 nextcloud sshd\[21845\]: Invalid user joanna from 177.136.39.254 Sep 4 10:29:41 nextcloud sshd\[21845\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.136.39.254 Sep 4 10:29:43 nextcloud sshd\[21845\]: Failed password for invalid user joanna from 177.136.39.254 port 7074 ssh2	2020-09-04 18:04:18
162.142.125.35	attackspam	Automatic report - Banned IP Access	2020-09-04 17:44:34
144.91.78.125	attackbots	Unauthorized connection attempt from IP address 144.91.78.125 on Port 445(SMB)	2020-09-04 17:41:50
170.84.163.206	attack	Sep 3 18:44:57 mellenthin postfix/smtpd[20408]: NOQUEUE: reject: RCPT from unknown[170.84.163.206]: 554 5.7.1 Service unavailable; Client host [170.84.163.206] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/170.84.163.206; from= to= proto=ESMTP helo=<206.163.84.170.ampernet.com.br>	2020-09-04 18:06:48
113.190.34.227	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-09-04 18:07:39
71.41.100.178	attackspam	Honeypot attack, port: 81, PTR: rrcs-71-41-100-178.se.biz.rr.com.	2020-09-04 17:38:10
14.161.12.119	attackspam	Sep 4 12:15:24 itv-usvr-02 sshd[30676]: Invalid user admin from 14.161.12.119 port 43725 Sep 4 12:15:24 itv-usvr-02 sshd[30676]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.161.12.119 Sep 4 12:15:24 itv-usvr-02 sshd[30676]: Invalid user admin from 14.161.12.119 port 43725 Sep 4 12:15:26 itv-usvr-02 sshd[30676]: Failed password for invalid user admin from 14.161.12.119 port 43725 ssh2 Sep 4 12:19:52 itv-usvr-02 sshd[30860]: Invalid user vinci from 14.161.12.119 port 43991	2020-09-04 18:03:45
150.136.160.141	attackspambots	Sep 4 03:47:31 PorscheCustomer sshd[6186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=150.136.160.141 Sep 4 03:47:33 PorscheCustomer sshd[6186]: Failed password for invalid user andres from 150.136.160.141 port 39538 ssh2 Sep 4 03:51:11 PorscheCustomer sshd[6244]: Failed password for root from 150.136.160.141 port 44570 ssh2 ...	2020-09-04 17:49:47
171.113.39.27	attack	Unauthorised access (Sep 3) SRC=171.113.39.27 LEN=40 TTL=53 ID=35200 TCP DPT=23 WINDOW=7342 SYN	2020-09-04 17:59:04
129.211.10.111	attackspambots	2020-08-15 13:28:52,576 fail2ban.actions [1312]: NOTICE [sshd] Ban 129.211.10.111 2020-08-15 13:46:45,575 fail2ban.actions [1312]: NOTICE [sshd] Ban 129.211.10.111 2020-08-15 14:04:12,482 fail2ban.actions [1312]: NOTICE [sshd] Ban 129.211.10.111 2020-08-15 14:21:32,503 fail2ban.actions [1312]: NOTICE [sshd] Ban 129.211.10.111 2020-08-15 14:38:42,886 fail2ban.actions [1312]: NOTICE [sshd] Ban 129.211.10.111 ...	2020-09-04 17:59:33
116.68.205.75	attackbotsspam	Unauthorized connection attempt from IP address 116.68.205.75 on Port 445(SMB)	2020-09-04 17:59:51
1.55.207.97	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-09-04 18:14:16

Recently Reported IPs

17.240.37.255	87.122.216.147	85.148.133.20	169.255.59.92
212.129.238.20	191.53.197.189	123.247.15.50	61.176.41.250
138.97.115.141	207.199.46.233	174.247.143.156	143.208.248.222
200.65.145.60	23.59.127.132	200.3.18.143	172.106.148.1
44.116.84.235	125.8.103.209	141.223.177.85	166.133.126.96