113.23.42.158 - IPInfo

Basic Info

City: Hanoi

Region: Hanoi

Country: Vietnam

Internet Service Provider: FPT Telecom

Hostname: unknown

Organization: unknown

Usage Type: Fixed Line ISP

Comments:

Make a comment on this IP

Type	Details	Datetime
attack	Unauthorized connection attempt from IP address 113.23.42.158 on Port 445(SMB)	2020-07-07 07:27:12

Comments on same subnet:

IP	Type	Details	Datetime
113.23.42.13	attackbotsspam	Unauthorized connection attempt from IP address 113.23.42.13 on Port 445(SMB)	2020-03-14 06:46:11
113.23.42.116	attackbots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-08 20:31:32
113.23.42.31	attackspam	Jan 10 13:51:53 grey postfix/smtpd\[26110\]: NOQUEUE: reject: RCPT from unknown\[113.23.42.31\]: 554 5.7.1 Service unavailable\; Client host \[113.23.42.31\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[113.23.42.31\]\; from=\ to=\ proto=ESMTP helo=\<\[113.23.42.31\]\> ...	2020-01-11 04:29:10
113.23.42.107	attackbotsspam	Unauthorized connection attempt from IP address 113.23.42.107 on Port 445(SMB)	2019-11-01 19:29:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 113.23.42.158
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 3839
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;113.23.42.158.			IN	A

;; AUTHORITY SECTION:
.			120	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020070601 1800 900 604800 86400

;; Query time: 111 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jul 07 07:27:09 CST 2020
;; MSG SIZE  rcvd: 117

Host info

Host 158.42.23.113.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 158.42.23.113.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
49.88.112.55	attackspambots	SSH bruteforce	2019-12-25 16:53:18
64.50.186.5	attackbots	xmlrpc attack	2019-12-25 17:01:18
112.162.191.160	attackbotsspam	Dec 25 09:07:10 minden010 sshd[16417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.162.191.160 Dec 25 09:07:13 minden010 sshd[16417]: Failed password for invalid user 9999999 from 112.162.191.160 port 48806 ssh2 Dec 25 09:10:45 minden010 sshd[17693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.162.191.160 ...	2019-12-25 16:47:57
79.124.62.28	attackbots	Dec 25 09:51:34 mc1 kernel: \[1422694.787863\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=79.124.62.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=42608 DPT=2223 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 25 09:51:34 mc1 kernel: \[1422694.812400\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=79.124.62.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=42609 DPT=2223 WINDOW=65535 RES=0x00 SYN URGP=0 Dec 25 09:51:34 mc1 kernel: \[1422694.826219\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=79.124.62.28 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=54321 PROTO=TCP SPT=42610 DPT=2223 WINDOW=65535 RES=0x00 SYN URGP=0 ...	2019-12-25 17:11:50
139.59.172.23	attackspambots	WordPress login Brute force / Web App Attack on client site.	2019-12-25 16:42:08
121.123.46.84	attackspambots	1577255203 - 12/25/2019 07:26:43 Host: 121.123.46.84/121.123.46.84 Port: 445 TCP Blocked	2019-12-25 16:55:16
37.255.192.255	attackspam	Portscan or hack attempt detected by psad/fwsnort	2019-12-25 17:18:24
204.93.193.178	attack	Dec 25 11:26:13 gw1 sshd[31033]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.93.193.178 Dec 25 11:26:15 gw1 sshd[31033]: Failed password for invalid user wahbe from 204.93.193.178 port 55162 ssh2 ...	2019-12-25 17:15:38
103.45.102.124	attackbots	Dec 25 08:38:17 silence02 sshd[18269]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.102.124 Dec 25 08:38:19 silence02 sshd[18269]: Failed password for invalid user muguette from 103.45.102.124 port 55958 ssh2 Dec 25 08:42:30 silence02 sshd[18369]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.45.102.124	2019-12-25 17:06:10
58.254.132.239	attack	Dec 25 07:26:21 zulu412 sshd\[792\]: Invalid user marlon from 58.254.132.239 port 22118 Dec 25 07:26:21 zulu412 sshd\[792\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.239 Dec 25 07:26:23 zulu412 sshd\[792\]: Failed password for invalid user marlon from 58.254.132.239 port 22118 ssh2 ...	2019-12-25 17:10:29
45.136.108.123	attack	Triggered: repeated knocking on closed ports.	2019-12-25 16:58:35
144.217.190.197	attack	xmlrpc attack	2019-12-25 16:41:48
162.144.46.28	attack	162.144.46.28 - - [25/Dec/2019:06:49:34 +0000] "POST /wp-login.php HTTP/1.1" 200 6393 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 162.144.46.28 - - [25/Dec/2019:06:49:36 +0000] "POST /xmlrpc.php HTTP/1.1" 200 403 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2019-12-25 17:14:16
132.232.107.248	attackbotsspam	Dec 25 09:30:21 MK-Soft-VM7 sshd[3395]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.107.248 Dec 25 09:30:23 MK-Soft-VM7 sshd[3395]: Failed password for invalid user hung from 132.232.107.248 port 55058 ssh2 ...	2019-12-25 17:16:30
14.98.215.178	attackbotsspam	Dec 25 01:43:24 plusreed sshd[8621]: Invalid user idcsea from 14.98.215.178 ...	2019-12-25 17:18:37

Recently Reported IPs

70.125.180.48	134.84.36.124	147.242.56.3	190.136.5.7
104.35.164.42	243.125.33.36	102.80.234.135	36.195.112.124
69.47.145.47	24.234.180.221	213.89.255.140	82.154.254.120
86.108.212.25	196.72.161.212	11.229.97.0	177.19.69.255
87.130.156.85	196.135.241.240	179.99.188.217	124.105.161.38