101.99.13.45 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: CMC Telecom Infrastructure Company

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 101.99.13.45 on Port 445(SMB)	2019-07-31 20:36:15

Comments on same subnet:

IP	Type	Details	Datetime
101.99.13.187	attackbotsspam	1598845991 - 08/31/2020 05:53:11 Host: 101.99.13.187/101.99.13.187 Port: 445 TCP Blocked	2020-08-31 16:15:16
101.99.13.152	attackspam	20/8/28@23:56:31: FAIL: Alarm-Network address from=101.99.13.152 ...	2020-08-29 15:09:48
101.99.13.29	attackspam	Brute forcing RDP port 3389	2020-07-07 15:51:49
101.99.13.2	attackspambots	Honeypot attack, port: 445, PTR: static.cmcti.vn.	2020-02-08 19:55:46
101.99.13.84	attackbots	Unauthorised access (Oct 26) SRC=101.99.13.84 LEN=52 TTL=112 ID=1823 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-27 00:58:37
101.99.13.17	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-20 20:46:34,588 INFO [amun_request_handler] PortScan Detected on Port: 445 (101.99.13.17)	2019-07-21 09:55:33
101.99.13.137	attack	445/tcp [2019-06-21]1pkt	2019-06-21 22:02:38

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 101.99.13.45
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54889
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;101.99.13.45.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019073100 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Wed Jul 31 20:36:05 CST 2019
;; MSG SIZE  rcvd: 116

Host info

45.13.99.101.in-addr.arpa domain name pointer static.cmcti.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
45.13.99.101.in-addr.arpa	name = static.cmcti.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
167.114.36.165	attack	Feb 28 19:17:05 ns382633 sshd\[6984\]: Invalid user dab from 167.114.36.165 port 44870 Feb 28 19:17:05 ns382633 sshd\[6984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.36.165 Feb 28 19:17:07 ns382633 sshd\[6984\]: Failed password for invalid user dab from 167.114.36.165 port 44870 ssh2 Feb 28 19:39:39 ns382633 sshd\[10418\]: Invalid user sammy from 167.114.36.165 port 50504 Feb 28 19:39:39 ns382633 sshd\[10418\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.36.165	2020-02-29 02:46:25
82.158.36.122	attackbotsspam	Feb 28 14:27:34 exim[16110]: [1\54] 1j7ffw-0004Bq-TV H=82.158.36.122.dyn.user.ono.com [82.158.36.122] F= rejected after DATA: This message scored 19.4 spam points.	2020-02-29 03:15:14
190.4.63.80	attack	Port probing on unauthorized port 1433	2020-02-29 02:58:12
118.96.213.121	attackbotsspam	Feb 28 15:57:42 MK-Soft-VM4 sshd[11541]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.96.213.121 Feb 28 15:57:44 MK-Soft-VM4 sshd[11541]: Failed password for invalid user naga from 118.96.213.121 port 50766 ssh2 ...	2020-02-29 02:59:15
89.46.86.65	attackbots	Feb 28 14:12:25 ws12vmsma01 sshd[28900]: Invalid user ftp from 89.46.86.65 Feb 28 14:12:27 ws12vmsma01 sshd[28900]: Failed password for invalid user ftp from 89.46.86.65 port 45130 ssh2 Feb 28 14:16:17 ws12vmsma01 sshd[29436]: Invalid user koeso from 89.46.86.65 ...	2020-02-29 03:03:29
42.113.229.202	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 03:01:58
198.27.81.94	attackspam	GET /wp-login.php	2020-02-29 02:50:35
112.85.42.181	attackspambots	(sshd) Failed SSH login from 112.85.42.181 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 28 20:15:48 amsweb01 sshd[30186]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.181 user=root Feb 28 20:15:50 amsweb01 sshd[30186]: Failed password for root from 112.85.42.181 port 61018 ssh2 Feb 28 20:15:54 amsweb01 sshd[30186]: Failed password for root from 112.85.42.181 port 61018 ssh2 Feb 28 20:15:57 amsweb01 sshd[30186]: Failed password for root from 112.85.42.181 port 61018 ssh2 Feb 28 20:16:01 amsweb01 sshd[30186]: Failed password for root from 112.85.42.181 port 61018 ssh2	2020-02-29 03:19:01
42.51.195.216	attack	DATE:2020-02-28 14:28:25, IP:42.51.195.216, PORT:1433 MSSQL brute force auth on honeypot server (honey-neo-dc)	2020-02-29 03:02:16
94.50.162.191	attackbotsspam	Icarus honeypot on github	2020-02-29 03:00:10
180.180.175.37	attackspambots	suspicious action Fri, 28 Feb 2020 10:28:51 -0300	2020-02-29 02:43:02
54.225.121.25	attackspambots	port	2020-02-29 03:13:50
222.186.175.163	attack	Feb 28 15:47:39 firewall sshd[8144]: Failed password for root from 222.186.175.163 port 44888 ssh2 Feb 28 15:48:00 firewall sshd[8144]: error: maximum authentication attempts exceeded for root from 222.186.175.163 port 44888 ssh2 [preauth] Feb 28 15:48:00 firewall sshd[8144]: Disconnecting: Too many authentication failures [preauth] ...	2020-02-29 02:48:21
112.85.42.180	attackspambots	Feb 28 20:10:27 Ubuntu-1404-trusty-64-minimal sshd\[20490\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Feb 28 20:10:28 Ubuntu-1404-trusty-64-minimal sshd\[20490\]: Failed password for root from 112.85.42.180 port 60109 ssh2 Feb 28 20:10:51 Ubuntu-1404-trusty-64-minimal sshd\[20692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root Feb 28 20:10:53 Ubuntu-1404-trusty-64-minimal sshd\[20692\]: Failed password for root from 112.85.42.180 port 22700 ssh2 Feb 28 20:11:17 Ubuntu-1404-trusty-64-minimal sshd\[20768\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.180 user=root	2020-02-29 03:14:48
42.113.229.114	attackbots	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-29 03:08:04

Recently Reported IPs

228.189.52.55	21.159.120.3	21.101.128.217	27.25.87.3
7.132.173.104	24.250.95.26	163.90.49.37	78.182.101.63
38.73.33.10	186.81.18.2	156.148.19.160	199.58.173.52
237.245.250.197	88.98.65.68	57.246.161.217	133.250.180.178
243.166.189.28	102.80.101.173	17.147.195.48	123.28.162.174