113.161.1.204 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackbotsspam	1583211303 - 03/03/2020 05:55:03 Host: 113.161.1.204/113.161.1.204 Port: 445 TCP Blocked	2020-03-03 16:24:07

Comments on same subnet:

IP	Type	Details	Datetime
113.161.160.8	attackspam	TCP ports : 445 / 1433	2020-09-29 04:17:24
113.161.160.8	attack	TCP ports : 445 / 1433	2020-09-28 20:31:34
113.161.160.8	attackbotsspam	firewall-block, port(s): 1433/tcp	2020-09-28 12:37:40
113.161.151.29	attackspambots	(imapd) Failed IMAP login from 113.161.151.29 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep 11 19:38:39 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=113.161.151.29, lip=5.63.12.44, TLS: Connection closed, session=	2020-09-12 00:57:18
113.161.151.29	attackspambots	Distributed brute force attack	2020-09-11 16:54:00
113.161.151.29	attackbotsspam	Distributed brute force attack	2020-09-11 09:07:08
113.161.150.162	attackbots	Icarus honeypot on github	2020-08-30 05:01:33
113.161.161.141	attack	445/tcp 445/tcp 445/tcp... [2020-07-06/08-28]4pkt,1pt.(tcp)	2020-08-28 18:54:33
113.161.176.14	attack	firewall-block, port(s): 445/tcp	2020-08-26 19:02:04
113.161.128.158	attackbots	20/8/23@23:52:07: FAIL: Alarm-Network address from=113.161.128.158 ...	2020-08-24 16:31:09
113.161.144.254	attack	Aug 22 05:51:45 root sshd[2872]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.144.254 Aug 22 05:51:47 root sshd[2872]: Failed password for invalid user divya from 113.161.144.254 port 2442 ssh2 Aug 22 05:55:47 root sshd[3385]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.144.254 ...	2020-08-22 12:26:35
113.161.128.192	attack	srvr1: (mod_security) mod_security (id:942100) triggered by 113.161.128.192 (VN/-/static.vnpt.vn): 1 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_MODSEC; Logs: 2020/08/21 12:05:47 [error] 482759#0: 840589 [client 113.161.128.192] ModSecurity: Access denied with code 406 (phase 2). [file "/etc/modsecurity.d/REQUEST-942-APPLICATION-ATTACK-SQLI.conf"] [line "45"] [id "942100"] [rev ""] [msg ""] [redacted] [severity "0"] [ver "OWASP_CRS/3.3.0"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-sqli"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/152/248/66"] [tag "PCI/6.5.2"] [redacted] [uri "/forum/viewthread.php"] [unique_id "159801154742.003820"] [ref ""], client: 113.161.128.192, [redacted] request: "GET /forum/viewthread.php?thread_id=1122%27%29%29+OR+++%28%286544%3D0 HTTP/1.1" [redacted]	2020-08-21 22:41:19
113.161.186.193	attackbotsspam	2 Attack(s) Detected [DoS Attack: RST Scan] from source: 113.161.186.193, port 38380, Wednesday, August 19, 2020 04:51:25 [DoS Attack: RST Scan] from source: 113.161.186.193, port 36684, Wednesday, August 19, 2020 04:49:48	2020-08-20 18:17:41
113.161.144.254	attack	Aug 19 23:58:08 itv-usvr-01 sshd[6697]: Invalid user document from 113.161.144.254 Aug 19 23:58:08 itv-usvr-01 sshd[6697]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.161.144.254 Aug 19 23:58:08 itv-usvr-01 sshd[6697]: Invalid user document from 113.161.144.254 Aug 19 23:58:10 itv-usvr-01 sshd[6697]: Failed password for invalid user document from 113.161.144.254 port 47062 ssh2	2020-08-20 02:42:09
113.161.198.166	attack	1597722501 - 08/18/2020 05:48:21 Host: 113.161.198.166/113.161.198.166 Port: 445 TCP Blocked	2020-08-18 19:26:12

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.161.1.204
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 47139
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.161.1.204.			IN	A

;; AUTHORITY SECTION:
.			391	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030202 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 03 16:24:01 CST 2020
;; MSG SIZE  rcvd: 117

Host info

204.1.161.113.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
204.1.161.113.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
113.31.102.157	attackbotsspam	Dec 18 23:48:08 itv-usvr-01 sshd[28121]: Invalid user amount from 113.31.102.157 Dec 18 23:48:08 itv-usvr-01 sshd[28121]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.31.102.157 Dec 18 23:48:08 itv-usvr-01 sshd[28121]: Invalid user amount from 113.31.102.157 Dec 18 23:48:09 itv-usvr-01 sshd[28121]: Failed password for invalid user amount from 113.31.102.157 port 52342 ssh2 Dec 18 23:55:59 itv-usvr-01 sshd[28414]: Invalid user zabielski from 113.31.102.157	2019-12-19 05:15:21
79.124.62.28	attackspambots	Scanning for open ports	2019-12-19 05:27:39
146.185.180.19	attack	Dec 19 03:33:37 webhost01 sshd[31223]: Failed password for root from 146.185.180.19 port 57581 ssh2 ...	2019-12-19 04:54:53
43.255.71.195	attackbotsspam	Dec 18 05:37:50 kapalua sshd\[27558\]: Invalid user tzila from 43.255.71.195 Dec 18 05:37:50 kapalua sshd\[27558\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.71.195 Dec 18 05:37:52 kapalua sshd\[27558\]: Failed password for invalid user tzila from 43.255.71.195 port 54436 ssh2 Dec 18 05:44:02 kapalua sshd\[28328\]: Invalid user aakaak345678 from 43.255.71.195 Dec 18 05:44:02 kapalua sshd\[28328\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.255.71.195	2019-12-19 04:53:28
162.243.165.39	attack	2019-12-18T20:07:39.074883homeassistant sshd[4870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.243.165.39 user=root 2019-12-18T20:07:41.398590homeassistant sshd[4870]: Failed password for root from 162.243.165.39 port 44214 ssh2 ...	2019-12-19 05:10:34
182.253.188.59	attack	12,41-02/01 [bc01/m68] PostRequest-Spammer scoring: maputo01_x2b	2019-12-19 05:13:16
41.78.82.100	attack	Unauthorized connection attempt from IP address 41.78.82.100 on Port 445(SMB)	2019-12-19 04:50:33
79.110.192.122	attackbots	Dec 18 20:04:42 work-partkepr sshd\[18060\]: Invalid user mall from 79.110.192.122 port 34694 Dec 18 20:04:42 work-partkepr sshd\[18060\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=79.110.192.122 ...	2019-12-19 05:22:03
110.44.126.83	attackspambots	Dec 18 21:42:51 localhost sshd\[12894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.44.126.83 user=root Dec 18 21:42:52 localhost sshd\[12894\]: Failed password for root from 110.44.126.83 port 49250 ssh2 Dec 18 21:49:07 localhost sshd\[17156\]: Invalid user guest from 110.44.126.83 port 58380	2019-12-19 04:55:06
140.213.11.91	attack	Unauthorized connection attempt from IP address 140.213.11.91 on Port 445(SMB)	2019-12-19 05:07:59
198.98.62.107	attack	Dec 18 20:49:56 vpn01 sshd[8007]: Failed password for root from 198.98.62.107 port 53046 ssh2 Dec 18 20:50:04 vpn01 sshd[8007]: Failed password for root from 198.98.62.107 port 53046 ssh2 ...	2019-12-19 05:24:06
77.233.4.133	attackspambots	2019-12-18T20:52:15.661523abusebot-7.cloudsearch.cf sshd\[18894\]: Invalid user ftpuser from 77.233.4.133 port 37734 2019-12-18T20:52:15.665559abusebot-7.cloudsearch.cf sshd\[18894\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=mail.nceco.ru 2019-12-18T20:52:18.026414abusebot-7.cloudsearch.cf sshd\[18894\]: Failed password for invalid user ftpuser from 77.233.4.133 port 37734 ssh2 2019-12-18T20:57:10.921065abusebot-7.cloudsearch.cf sshd\[18920\]: Invalid user kuhlow from 77.233.4.133 port 40079	2019-12-19 05:22:27
140.213.20.14	attack	Email address rejected	2019-12-19 05:18:07
104.236.31.227	attackbots	Invalid user webadmin from 104.236.31.227 port 41317	2019-12-19 05:02:07
40.92.10.36	attackspam	Dec 18 21:35:45 debian-2gb-vpn-nbg1-1 kernel: [1072508.589782] [UFW BLOCK] IN=eth0 OUT= MAC=96:00:00:38:96:44:d2:74:7f:6e:37:e3:08:00 SRC=40.92.10.36 DST=78.46.192.101 LEN=48 TOS=0x00 PREC=0x00 TTL=105 ID=19317 DF PROTO=TCP SPT=23942 DPT=25 WINDOW=8192 RES=0x00 SYN URGP=0	2019-12-19 04:57:58

Recently Reported IPs

45.133.99.5	182.53.202.202	223.16.24.207	114.26.97.123
70.25.161.49	200.38.231.161	127.239.232.84	121.121.93.107
151.77.0.107	149.202.115.158	182.52.23.94	79.105.115.12
103.96.12.61	36.92.104.19	34.80.248.92	103.207.169.24
111.229.219.7	159.192.96.156	112.206.3.241	14.226.47.84