202.29.20.117 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Thailand

Internet Service Provider: Uninet

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Oct 15 21:24:50 localhost sshd\[1595\]: Invalid user stidc from 202.29.20.117 port 48786 Oct 15 21:24:50 localhost sshd\[1595\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Oct 15 21:24:53 localhost sshd\[1595\]: Failed password for invalid user stidc from 202.29.20.117 port 48786 ssh2 Oct 15 21:29:31 localhost sshd\[1710\]: Invalid user akpevie from 202.29.20.117 port 55490 Oct 15 21:29:31 localhost sshd\[1710\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 ...	2019-10-16 05:30:03
attackspam	Oct 14 17:10:16 xtremcommunity sshd\[521636\]: Invalid user webmaster from 202.29.20.117 port 59036 Oct 14 17:10:16 xtremcommunity sshd\[521636\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Oct 14 17:10:17 xtremcommunity sshd\[521636\]: Failed password for invalid user webmaster from 202.29.20.117 port 59036 ssh2 Oct 14 17:14:46 xtremcommunity sshd\[521723\]: Invalid user zl from 202.29.20.117 port 40382 Oct 14 17:14:46 xtremcommunity sshd\[521723\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 ...	2019-10-15 07:04:07
attack	Oct 6 10:55:14 sachi sshd\[24209\]: Invalid user 123Bio from 202.29.20.117 Oct 6 10:55:14 sachi sshd\[24209\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Oct 6 10:55:16 sachi sshd\[24209\]: Failed password for invalid user 123Bio from 202.29.20.117 port 37320 ssh2 Oct 6 11:00:05 sachi sshd\[24597\]: Invalid user Heslo123!@\# from 202.29.20.117 Oct 6 11:00:05 sachi sshd\[24597\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117	2019-10-07 05:07:06
attackbotsspam	2019-10-06T09:31:54.523271abusebot-8.cloudsearch.cf sshd\[7925\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 user=root	2019-10-06 17:54:58
attackbotsspam	Sep 24 18:09:37 web1 sshd\[303\]: Invalid user bot from 202.29.20.117 Sep 24 18:09:37 web1 sshd\[303\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Sep 24 18:09:39 web1 sshd\[303\]: Failed password for invalid user bot from 202.29.20.117 port 49460 ssh2 Sep 24 18:14:19 web1 sshd\[821\]: Invalid user reseller from 202.29.20.117 Sep 24 18:14:19 web1 sshd\[821\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117	2019-09-25 12:27:58
attack	Sep 21 11:48:06 aiointranet sshd\[24075\]: Invalid user pmd from 202.29.20.117 Sep 21 11:48:06 aiointranet sshd\[24075\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Sep 21 11:48:09 aiointranet sshd\[24075\]: Failed password for invalid user pmd from 202.29.20.117 port 47640 ssh2 Sep 21 11:52:33 aiointranet sshd\[24450\]: Invalid user j from 202.29.20.117 Sep 21 11:52:33 aiointranet sshd\[24450\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117	2019-09-22 06:27:58
attackspambots	Sep 21 10:16:35 aiointranet sshd\[16090\]: Invalid user glassfish from 202.29.20.117 Sep 21 10:16:35 aiointranet sshd\[16090\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Sep 21 10:16:36 aiointranet sshd\[16090\]: Failed password for invalid user glassfish from 202.29.20.117 port 49838 ssh2 Sep 21 10:20:52 aiointranet sshd\[16446\]: Invalid user testuser from 202.29.20.117 Sep 21 10:20:52 aiointranet sshd\[16446\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117	2019-09-22 04:24:32
attack	Automatic report	2019-09-04 19:54:36
attackspam	Aug 17 22:31:41 localhost sshd\[18974\]: Invalid user gast from 202.29.20.117 port 53276 Aug 17 22:31:41 localhost sshd\[18974\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Aug 17 22:31:43 localhost sshd\[18974\]: Failed password for invalid user gast from 202.29.20.117 port 53276 ssh2	2019-08-18 04:46:02
attack	Aug 16 12:39:47 v22019058497090703 sshd[8965]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 Aug 16 12:39:48 v22019058497090703 sshd[8965]: Failed password for invalid user Inf3ct from 202.29.20.117 port 37238 ssh2 Aug 16 12:45:11 v22019058497090703 sshd[9382]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.117 ...	2019-08-16 22:24:17
attackspambots	Aug 13 20:53:05 XXX sshd[8956]: Invalid user gz from 202.29.20.117 port 54394	2019-08-14 05:19:25

Comments on same subnet:

IP	Type	Details	Datetime
202.29.20.214	attackspam	Nov 20 10:37:09 vps01 sshd[27181]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 Nov 20 10:37:11 vps01 sshd[27181]: Failed password for invalid user mosely from 202.29.20.214 port 51752 ssh2 Nov 20 10:41:17 vps01 sshd[27199]: Failed password for messagebus from 202.29.20.214 port 58302 ssh2	2019-11-20 19:53:14
202.29.20.214	attack	$f2bV_matches	2019-11-20 00:46:56
202.29.20.214	attackbotsspam	Nov 17 09:23:00 XXX sshd[19226]: Invalid user web from 202.29.20.214 port 39420	2019-11-17 18:00:27
202.29.20.214	attackspambots	Nov 10 07:22:56 srv01 sshd[16268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:22:58 srv01 sshd[16268]: Failed password for root from 202.29.20.214 port 60994 ssh2 Nov 10 07:27:15 srv01 sshd[16530]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:27:17 srv01 sshd[16530]: Failed password for root from 202.29.20.214 port 41248 ssh2 Nov 10 07:31:32 srv01 sshd[16731]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.214 user=root Nov 10 07:31:34 srv01 sshd[16731]: Failed password for root from 202.29.20.214 port 49744 ssh2 ...	2019-11-10 15:41:15
202.29.20.252	attackspam	Oct 17 00:07:33 xtremcommunity sshd\[594974\]: Invalid user ij from 202.29.20.252 port 21205 Oct 17 00:07:33 xtremcommunity sshd\[594974\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.252 Oct 17 00:07:35 xtremcommunity sshd\[594974\]: Failed password for invalid user ij from 202.29.20.252 port 21205 ssh2 Oct 17 00:11:48 xtremcommunity sshd\[595101\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.252 user=root Oct 17 00:11:50 xtremcommunity sshd\[595101\]: Failed password for root from 202.29.20.252 port 9712 ssh2 ...	2019-10-17 13:47:52
202.29.20.252	attack	Oct 16 11:49:32 web9 sshd\[28066\]: Invalid user hanuman from 202.29.20.252 Oct 16 11:49:32 web9 sshd\[28066\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.252 Oct 16 11:49:34 web9 sshd\[28066\]: Failed password for invalid user hanuman from 202.29.20.252 port 18899 ssh2 Oct 16 11:54:04 web9 sshd\[28697\]: Invalid user z584897593 from 202.29.20.252 Oct 16 11:54:04 web9 sshd\[28697\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.29.20.252	2019-10-17 06:30:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 202.29.20.117
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 29026
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;202.29.20.117.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073002 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 12:40:31 CST 2019
;; MSG SIZE  rcvd: 117

Host info

Host 117.20.29.202.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

** server can't find 117.20.29.202.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
222.186.175.154	attack	Sep 25 17:10:01 router sshd[25078]: Failed password for root from 222.186.175.154 port 54418 ssh2 Sep 25 17:10:07 router sshd[25078]: Failed password for root from 222.186.175.154 port 54418 ssh2 Sep 25 17:10:11 router sshd[25078]: Failed password for root from 222.186.175.154 port 54418 ssh2 Sep 25 17:10:14 router sshd[25078]: Failed password for root from 222.186.175.154 port 54418 ssh2 ...	2020-09-25 23:19:26
204.12.226.26	attack	20 attempts against mh-misbehave-ban on wood	2020-09-25 23:07:10
141.98.80.191	attack	Sep 25 17:15:07 cho postfix/smtpd[3654943]: warning: unknown[141.98.80.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 17:15:27 cho postfix/smtpd[3654997]: warning: unknown[141.98.80.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 17:15:58 cho postfix/smtpd[3655000]: warning: unknown[141.98.80.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 17:16:17 cho postfix/smtpd[3655043]: warning: unknown[141.98.80.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 17:16:18 cho postfix/smtpd[3655000]: warning: unknown[141.98.80.191]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2020-09-25 23:18:08
211.253.129.225	attackspam	Invalid user mapred from 211.253.129.225 port 50670	2020-09-25 23:23:33
186.154.34.226	attack	TCP (SYN) 186.154.34.226:52166 -> port 23, len 44	2020-09-25 23:44:38
190.64.68.178	attack	Sep 25 16:32:43 santamaria sshd\[15927\]: Invalid user test from 190.64.68.178 Sep 25 16:32:43 santamaria sshd\[15927\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.64.68.178 Sep 25 16:32:45 santamaria sshd\[15927\]: Failed password for invalid user test from 190.64.68.178 port 5644 ssh2 ...	2020-09-25 23:12:52
223.150.152.181	attackspam	Brute force blocker - service: proftpd1 - aantal: 35 - Wed Sep 5 05:05:14 2018	2020-09-25 23:28:05
219.146.242.110	attack	TCP (SYN) 219.146.242.110:52929 -> port 14269, len 44	2020-09-25 23:01:51
51.140.14.90	attackspambots	failed root login	2020-09-25 23:36:36
31.40.90.39	attack	445/tcp [2020-09-24]1pkt	2020-09-25 23:34:03
46.105.167.198	attack	Invalid user aaa from 46.105.167.198 port 57298	2020-09-25 23:04:07
180.164.58.165	attack	SSH Brute Force	2020-09-25 23:05:23
103.141.46.154	attackbots	Sep 25 11:42:04 marvibiene sshd[18702]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.141.46.154 Sep 25 11:42:07 marvibiene sshd[18702]: Failed password for invalid user snow from 103.141.46.154 port 59630 ssh2 Sep 25 11:54:44 marvibiene sshd[19650]: Failed password for root from 103.141.46.154 port 35078 ssh2	2020-09-25 23:40:26
159.65.85.131	attackbots	fail2ban detected brute force on sshd	2020-09-25 23:34:22
161.35.164.37	attackbotsspam	Sep 24 21:42:09 email sshd\[31740\]: Invalid user j from 161.35.164.37 Sep 24 21:42:09 email sshd\[31740\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.164.37 Sep 24 21:42:11 email sshd\[31740\]: Failed password for invalid user j from 161.35.164.37 port 46286 ssh2 Sep 24 21:46:09 email sshd\[32484\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=161.35.164.37 user=root Sep 24 21:46:11 email sshd\[32484\]: Failed password for root from 161.35.164.37 port 59944 ssh2 ...	2020-09-25 23:24:10

Recently Reported IPs

61.1.134.230	37.59.89.97	222.189.199.184	89.133.126.22
46.246.182.183	37.59.180.186	73.186.195.177	116.206.132.133
37.252.75.174	109.102.158.14	14.246.36.103	212.47.254.39
92.39.55.73	42.232.221.58	171.234.31.114	178.94.59.99
110.153.199.250	31.145.1.146	206.214.2.106	42.228.106.16