113.161.38.34 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: Viet Nam

Internet Service Provider: Vietnam Posts and Telecommunications Group

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-13 10:52:11,280 INFO [amun_request_handler] PortScan Detected on Port: 445 (113.161.38.34)	2019-09-14 04:51:24

Comments on same subnet:

IP	Type	Details	Datetime
113.161.38.5	attackspam	Unauthorized connection attempt from IP address 113.161.38.5 on Port 445(SMB)	2020-05-26 19:11:13
113.161.38.5	attack	Unauthorized connection attempt from IP address 113.161.38.5 on Port 445(SMB)	2020-05-07 21:24:34
113.161.38.190	attack	1582677859 - 02/26/2020 01:44:19 Host: 113.161.38.190/113.161.38.190 Port: 8080 TCP Blocked	2020-02-26 11:25:05
113.161.38.190	attackspam	Unauthorized connection attempt detected from IP address 113.161.38.190 to port 8081 [J]	2020-01-07 09:15:12
113.161.38.62	attackbotsspam	Honeypot attack, port: 139, PTR: static.vnpt.vn.	2019-12-18 16:17:57
113.161.38.190	attackbots	Automatic report - Banned IP Access	2019-09-29 20:05:01

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.161.38.34
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7500
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.161.38.34.			IN	A

;; AUTHORITY SECTION:
.			3123	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019091302 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Sat Sep 14 04:51:18 CST 2019
;; MSG SIZE  rcvd: 117

Host info

34.38.161.113.in-addr.arpa domain name pointer static.vnpt.vn.

Nslookup info:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
34.38.161.113.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
148.251.10.183	attackspambots	20 attempts against mh-misbehave-ban on storm	2020-05-27 05:37:39
189.27.76.50	attackbots	Invalid user gmotor from 189.27.76.50 port 48344	2020-05-27 04:56:38
129.211.45.88	attack	May 26 22:40:40 itv-usvr-02 sshd[12106]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.45.88 user=root May 26 22:45:28 itv-usvr-02 sshd[12236]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.45.88 user=root May 26 22:50:01 itv-usvr-02 sshd[12358]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.45.88	2020-05-27 05:13:39
106.12.27.213	attack	May 26 21:55:06 prod4 sshd\[19441\]: Failed password for root from 106.12.27.213 port 60058 ssh2 May 26 21:59:11 prod4 sshd\[20683\]: Invalid user redis from 106.12.27.213 May 26 21:59:13 prod4 sshd\[20683\]: Failed password for invalid user redis from 106.12.27.213 port 58580 ssh2 ...	2020-05-27 04:59:16
185.179.188.32	attackbots	" "	2020-05-27 05:37:21
185.165.169.168	attackbots	2020-05-26T11:50:19.298796devel sshd[10022]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.165.169.168 2020-05-26T11:50:19.295850devel sshd[10022]: Invalid user a from 185.165.169.168 port 37908 2020-05-26T11:50:21.411541devel sshd[10022]: Failed password for invalid user a from 185.165.169.168 port 37908 ssh2	2020-05-27 05:03:28
37.49.226.212	attackspambots	May 26 22:57:51 tor-proxy-06 sshd\[6125\]: User root from 37.49.226.212 not allowed because not listed in AllowUsers May 26 22:58:09 tor-proxy-06 sshd\[6127\]: Invalid user admin from 37.49.226.212 port 55664 May 26 22:58:26 tor-proxy-06 sshd\[6129\]: Invalid user administrator from 37.49.226.212 port 51938 ...	2020-05-27 05:08:47
181.44.79.42	attackbots	Unauthorized connection attempt detected from IP address 181.44.79.42 to port 23	2020-05-27 04:57:11
130.61.118.231	attackspambots	...	2020-05-27 05:31:55
221.156.126.1	attackspam	May 26 21:13:38 ovpn sshd\[2149\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.156.126.1 user=root May 26 21:13:40 ovpn sshd\[2149\]: Failed password for root from 221.156.126.1 port 46764 ssh2 May 26 21:24:10 ovpn sshd\[4789\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.156.126.1 user=root May 26 21:24:11 ovpn sshd\[4789\]: Failed password for root from 221.156.126.1 port 34022 ssh2 May 26 21:27:24 ovpn sshd\[5542\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=221.156.126.1 user=root	2020-05-27 05:22:24
85.105.160.34	attack	TCP (SYN) 85.105.160.34:24536 -> port 23, len 44	2020-05-27 05:16:52
159.89.201.59	attackspam	$f2bV_matches	2020-05-27 05:05:09
181.55.188.187	attackspambots	leo_www	2020-05-27 05:26:09
89.186.15.122	attackbotsspam	Autoban 89.186.15.122 AUTH/CONNECT	2020-05-27 05:33:25
222.65.249.48	attack	May 26 18:17:08 vps sshd[265988]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48 May 26 18:17:09 vps sshd[265988]: Failed password for invalid user art from 222.65.249.48 port 46240 ssh2 May 26 18:22:33 vps sshd[288835]: Invalid user phpmy from 222.65.249.48 port 7968 May 26 18:22:33 vps sshd[288835]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.65.249.48 May 26 18:22:35 vps sshd[288835]: Failed password for invalid user phpmy from 222.65.249.48 port 7968 ssh2 ...	2020-05-27 05:27:03

Recently Reported IPs

87.238.237.109	1.41.148.158	132.148.246.254	122.160.96.175
164.42.112.204	71.81.43.251	189.175.242.90	178.89.122.209
123.195.224.61	253.61.37.35	93.118.249.172	64.186.244.248
127.61.183.244	28.143.146.214	161.17.153.21	192.108.105.194
99.58.99.92	240.65.199.108	187.249.13.204	22.122.46.211