113.160.100.21

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	445/tcp 445/tcp [2019-08-16/23]2pkt	2019-08-24 02:30:12
attackspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 03:33:01,598 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.160.100.21)	2019-07-11 15:20:40

Type

Details

Datetime

attackbotsspam

445/tcp 445/tcp
[2019-08-16/23]2pkt

2019-08-24 02:30:12

attackspam

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-11 03:33:01,598 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.160.100.21)

2019-07-11 15:20:40

Comments on same subnet:

IP	Type	Details	Datetime
113.160.100.213	attack	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-02-11 15:17:25
113.160.100.201	attackspam	Unauthorised access (Aug 15) SRC=113.160.100.201 LEN=52 TTL=116 ID=32707 DF TCP DPT=445 WINDOW=8192 SYN	2019-08-16 07:25:42

Whois info:

Dig info:


; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.160.100.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 62866
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.160.100.21.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019052700 1800 900 604800 86400

;; Query time: 3 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon May 27 17:25:44 CST 2019
;; MSG SIZE  rcvd: 118

Host info

21.100.160.113.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
21.100.160.113.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
80.82.70.214	attack	Sep 11 16:55:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 11 16:55:26 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session=<9H/g3wqvOnRQUkbW> Sep 11 16:56:22 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 11 16:57:55 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=80.82.70.214, lip=185.118.198.210, session= Sep 11 16:58:25 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, m	2020-09-11 23:07:44
159.65.163.59	attackspambots	TCP port : 13613	2020-09-11 22:48:14
117.89.173.41	attack	2020-09-11T05:15:05.579518hostname sshd[28196]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.89.173.41 2020-09-11T05:15:05.562275hostname sshd[28196]: Invalid user dennis123 from 117.89.173.41 port 34114 2020-09-11T05:15:07.692460hostname sshd[28196]: Failed password for invalid user dennis123 from 117.89.173.41 port 34114 ssh2 ...	2020-09-11 22:55:33
217.55.75.111	attack	DATE:2020-09-10 18:54:30, IP:217.55.75.111, PORT:telnet Telnet brute force auth on honeypot server (epe-honey1-hq)	2020-09-11 23:14:08
123.207.11.65	attackspambots	Sep 11 09:32:28 root sshd[12366]: Failed password for root from 123.207.11.65 port 59622 ssh2 ...	2020-09-11 22:50:03
141.98.10.209	attackspambots	SSH Brute-Force attacks	2020-09-11 22:46:44
82.64.32.76	attackspam	(sshd) Failed SSH login from 82.64.32.76 (FR/France/82-64-32-76.subs.proxad.net): 5 in the last 3600 secs	2020-09-11 23:04:36
200.122.249.203	attackspambots	Sep 11 09:03:50 email sshd\[13164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.122.249.203 user=root Sep 11 09:03:52 email sshd\[13164\]: Failed password for root from 200.122.249.203 port 46435 ssh2 Sep 11 09:08:25 email sshd\[13965\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.122.249.203 user=root Sep 11 09:08:26 email sshd\[13965\]: Failed password for root from 200.122.249.203 port 52788 ssh2 Sep 11 09:12:58 email sshd\[14773\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.122.249.203 user=root ...	2020-09-11 22:56:49
45.164.8.244	attackbotsspam	Sep 11 14:48:30 instance-2 sshd[13634]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.164.8.244 Sep 11 14:48:32 instance-2 sshd[13634]: Failed password for invalid user oracle from 45.164.8.244 port 60022 ssh2 Sep 11 14:53:34 instance-2 sshd[13745]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=45.164.8.244	2020-09-11 23:16:38
178.62.12.192	attackspam	Time: Fri Sep 11 14:42:03 2020 +0000 IP: 178.62.12.192 (GB/United Kingdom/-) Failures: 5 (sshd) Interval: 3600 seconds Blocked: Permanent Block [LF_SSHD] Log entries: Sep 11 14:38:58 hosting sshd[16893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.12.192 user=root Sep 11 14:39:00 hosting sshd[16893]: Failed password for root from 178.62.12.192 port 52878 ssh2 Sep 11 14:40:54 hosting sshd[17031]: Invalid user ubnt from 178.62.12.192 port 48410 Sep 11 14:40:56 hosting sshd[17031]: Failed password for invalid user ubnt from 178.62.12.192 port 48410 ssh2 Sep 11 14:42:01 hosting sshd[17108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.12.192 user=root	2020-09-11 22:51:47
49.36.229.71	attack	Attempts against non-existent wp-login	2020-09-11 22:50:43
58.214.36.86	attackspambots	2020-09-10 UTC: (40x) - admin(3x),asiforis,automak,build_nms,debian,freeswitch,media,root(29x),rudy,smbread	2020-09-11 22:44:19
45.14.150.52	attackspambots	" "	2020-09-11 22:50:59
178.137.83.51	attackspambots	Scanned 3 times in the last 24 hours on port 22	2020-09-11 22:53:53
5.188.84.95	attackspambots	1,30-01/03 [bc01/m12] PostRequest-Spammer scoring: zurich	2020-09-11 23:09:58

Recently Reported IPs

208.96.137.66	199.195.251.37	186.249.231.74	175.184.248.229
173.177.190.90	171.25.175.17	72.45.101.200	108.191.235.163
172.7.72.240	155.61.255.137	230.121.168.143	202.151.15.184
149.169.15.117	46.229.168.138	36.224.57.31	223.25.83.118
142.93.78.85	49.7.54.100	132.147.110.131	81.16.125.202