City: unknown
Region: unknown
Country: Viet Nam
Internet Service Provider: Vietnam Data Communication Company
Hostname: unknown
Organization: unknown
Usage Type: unknown
| Type | Details | Datetime |
|---|---|---|
| attackspam | Unauthorized connection attempt detected from IP address 203.162.13.242 to port 3389 |
2019-12-14 06:54:15 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 203.162.13.68 | attackbotsspam | (sshd) Failed SSH login from 203.162.13.68 (VN/Vietnam/static.vnpt.vn): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 16:44:46 ubnt-55d23 sshd[3956]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 user=root Jun 5 16:44:48 ubnt-55d23 sshd[3956]: Failed password for root from 203.162.13.68 port 43160 ssh2 |
2020-06-06 03:10:23 |
| 203.162.13.68 | attackbots | SSH Brute Force |
2020-05-28 16:47:21 |
| 203.162.13.68 | attack | May 23 17:07:45 vlre-nyc-1 sshd\[16348\]: Invalid user dqe from 203.162.13.68 May 23 17:07:45 vlre-nyc-1 sshd\[16348\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 May 23 17:07:46 vlre-nyc-1 sshd\[16348\]: Failed password for invalid user dqe from 203.162.13.68 port 51388 ssh2 May 23 17:11:45 vlre-nyc-1 sshd\[16431\]: Invalid user znh from 203.162.13.68 May 23 17:11:45 vlre-nyc-1 sshd\[16431\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 ... |
2020-05-24 03:37:38 |
| 203.162.13.68 | attackbots | 2020-05-20T11:19:30.408430ionos.janbro.de sshd[84748]: Invalid user lhd from 203.162.13.68 port 49326 2020-05-20T11:19:32.058932ionos.janbro.de sshd[84748]: Failed password for invalid user lhd from 203.162.13.68 port 49326 ssh2 2020-05-20T11:23:36.757585ionos.janbro.de sshd[84767]: Invalid user rnx from 203.162.13.68 port 57026 2020-05-20T11:23:37.092296ionos.janbro.de sshd[84767]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 2020-05-20T11:23:36.757585ionos.janbro.de sshd[84767]: Invalid user rnx from 203.162.13.68 port 57026 2020-05-20T11:23:39.030830ionos.janbro.de sshd[84767]: Failed password for invalid user rnx from 203.162.13.68 port 57026 ssh2 2020-05-20T11:27:57.044288ionos.janbro.de sshd[84774]: Invalid user jqa from 203.162.13.68 port 36520 2020-05-20T11:27:57.360047ionos.janbro.de sshd[84774]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 2020-05-20T11:27:57.0442 ... |
2020-05-20 23:41:01 |
| 203.162.13.68 | attackbotsspam | <6 unauthorized SSH connections |
2020-05-11 15:40:38 |
| 203.162.13.68 | attackspam | May 4 14:59:22 prox sshd[11241]: Failed password for root from 203.162.13.68 port 37372 ssh2 |
2020-05-04 21:58:46 |
| 203.162.13.68 | attackbots | May 4 11:14:50 ip-172-31-61-156 sshd[16968]: Failed password for invalid user myftp from 203.162.13.68 port 40198 ssh2 May 4 11:14:48 ip-172-31-61-156 sshd[16968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 May 4 11:14:48 ip-172-31-61-156 sshd[16968]: Invalid user myftp from 203.162.13.68 May 4 11:14:50 ip-172-31-61-156 sshd[16968]: Failed password for invalid user myftp from 203.162.13.68 port 40198 ssh2 May 4 11:17:37 ip-172-31-61-156 sshd[17040]: Invalid user testuser from 203.162.13.68 ... |
2020-05-04 19:38:23 |
| 203.162.13.68 | attackbots | May 2 16:18:11 v22018086721571380 sshd[19870]: Failed password for invalid user kiran from 203.162.13.68 port 50704 ssh2 |
2020-05-02 22:25:51 |
| 203.162.13.68 | attack | May 1 13:39:47 server sshd[11444]: Failed password for invalid user tracy from 203.162.13.68 port 48014 ssh2 May 1 13:46:34 server sshd[12892]: Failed password for invalid user port from 203.162.13.68 port 56766 ssh2 May 1 13:51:10 server sshd[13985]: Failed password for root from 203.162.13.68 port 36614 ssh2 |
2020-05-01 20:01:58 |
| 203.162.13.68 | attackbotsspam | Invalid user user from 203.162.13.68 port 60504 |
2020-04-16 06:57:40 |
| 203.162.13.68 | attackspambots | Unauthorised connection attempt detected at AUO NODE 1. System is sshd. Protected by AUO Stack Web Application Firewall (WAF) |
2020-04-15 06:51:34 |
| 203.162.13.68 | attack | SSH brute-force: detected 10 distinct usernames within a 24-hour window. |
2020-04-11 02:32:05 |
| 203.162.13.68 | attack | Apr 1 08:32:49 rotator sshd\[21227\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr 1 08:32:51 rotator sshd\[21227\]: Failed password for root from 203.162.13.68 port 60278 ssh2Apr 1 08:38:06 rotator sshd\[22048\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr 1 08:38:08 rotator sshd\[22048\]: Failed password for root from 203.162.13.68 port 41996 ssh2Apr 1 08:40:23 rotator sshd\[22843\]: Address 203.162.13.68 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!Apr 1 08:40:25 rotator sshd\[22843\]: Failed password for root from 203.162.13.68 port 45124 ssh2 ... |
2020-04-01 15:12:34 |
| 203.162.13.68 | attackspam | 2020-03-29T14:01:35.404073shield sshd\[5056\]: Invalid user frazer from 203.162.13.68 port 59956 2020-03-29T14:01:35.408236shield sshd\[5056\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 2020-03-29T14:01:37.738113shield sshd\[5056\]: Failed password for invalid user frazer from 203.162.13.68 port 59956 ssh2 2020-03-29T14:06:19.218279shield sshd\[6134\]: Invalid user igg from 203.162.13.68 port 39352 2020-03-29T14:06:19.227070shield sshd\[6134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 |
2020-03-30 01:11:37 |
| 203.162.13.68 | attackbots | Mar 28 19:10:11 hpm sshd\[13347\]: Invalid user qoo from 203.162.13.68 Mar 28 19:10:11 hpm sshd\[13347\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 Mar 28 19:10:12 hpm sshd\[13347\]: Failed password for invalid user qoo from 203.162.13.68 port 34322 ssh2 Mar 28 19:13:31 hpm sshd\[13652\]: Invalid user openvpn from 203.162.13.68 Mar 28 19:13:31 hpm sshd\[13652\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.162.13.68 |
2020-03-29 13:32:49 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 203.162.13.242
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 41339
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;203.162.13.242. IN A
;; AUTHORITY SECTION:
. 252 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2019121301 1800 900 604800 86400
;; Query time: 135 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Dec 14 06:54:12 CST 2019
;; MSG SIZE rcvd: 118242.13.162.203.in-addr.arpa domain name pointer static.vnpt.vn.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
242.13.162.203.in-addr.arpa name = static.vnpt.vn.
Authoritative answers can be found from:| IP | Type | Details | Datetime |
|---|---|---|---|
| 112.64.32.118 | attackbotsspam | 2020-07-03T23:06:55.794054vps773228.ovh.net sshd[24082]: Failed password for invalid user 123 from 112.64.32.118 port 35008 ssh2 2020-07-03T23:09:38.216884vps773228.ovh.net sshd[24108]: Invalid user cisco@123 from 112.64.32.118 port 58422 2020-07-03T23:09:38.226858vps773228.ovh.net sshd[24108]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.64.32.118 2020-07-03T23:09:38.216884vps773228.ovh.net sshd[24108]: Invalid user cisco@123 from 112.64.32.118 port 58422 2020-07-03T23:09:39.712674vps773228.ovh.net sshd[24108]: Failed password for invalid user cisco@123 from 112.64.32.118 port 58422 ssh2 ... |
2020-07-04 05:23:44 |
| 128.199.81.66 | attackbots | Jul 3 23:30:22 vps639187 sshd\[24650\]: Invalid user test from 128.199.81.66 port 35522 Jul 3 23:30:22 vps639187 sshd\[24650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.81.66 Jul 3 23:30:25 vps639187 sshd\[24650\]: Failed password for invalid user test from 128.199.81.66 port 35522 ssh2 ... |
2020-07-04 05:31:01 |
| 51.75.52.118 | attack | detected by Fail2Ban |
2020-07-04 05:38:01 |
| 140.249.19.110 | attackspambots | $f2bV_matches |
2020-07-04 05:25:42 |
| 165.227.66.224 | attackbots | $f2bV_matches |
2020-07-04 05:22:02 |
| 118.193.35.172 | attackspam | Jul 3 22:39:22 meumeu sshd[458099]: Invalid user dolphin from 118.193.35.172 port 60118 Jul 3 22:39:22 meumeu sshd[458099]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.35.172 Jul 3 22:39:22 meumeu sshd[458099]: Invalid user dolphin from 118.193.35.172 port 60118 Jul 3 22:39:24 meumeu sshd[458099]: Failed password for invalid user dolphin from 118.193.35.172 port 60118 ssh2 Jul 3 22:40:25 meumeu sshd[458125]: Invalid user nitin from 118.193.35.172 port 48024 Jul 3 22:40:25 meumeu sshd[458125]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.193.35.172 Jul 3 22:40:25 meumeu sshd[458125]: Invalid user nitin from 118.193.35.172 port 48024 Jul 3 22:40:28 meumeu sshd[458125]: Failed password for invalid user nitin from 118.193.35.172 port 48024 ssh2 Jul 3 22:41:30 meumeu sshd[458159]: Invalid user postgres from 118.193.35.172 port 35930 ... |
2020-07-04 05:55:28 |
| 123.138.199.66 | attackbotsspam | Dovecot Invalid User Login Attempt. |
2020-07-04 05:44:38 |
| 96.10.81.36 | attackbotsspam | Unauthorized connection attempt from IP address 96.10.81.36 on Port 445(SMB) |
2020-07-04 05:36:31 |
| 138.197.113.240 | attackbots | $f2bV_matches |
2020-07-04 06:00:40 |
| 106.13.71.1 | attack | 20 attempts against mh-ssh on cloud |
2020-07-04 05:50:09 |
| 218.92.0.184 | attackspam | Triggered by Fail2Ban at Ares web server |
2020-07-04 05:40:56 |
| 94.102.51.17 | attackbotsspam | Jul 3 23:28:10 debian-2gb-nbg1-2 kernel: \[16070312.352916\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=94.102.51.17 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=247 ID=59579 PROTO=TCP SPT=57661 DPT=28875 WINDOW=1024 RES=0x00 SYN URGP=0 |
2020-07-04 05:42:41 |
| 195.158.80.206 | attack | Automatic report - Banned IP Access |
2020-07-04 05:41:20 |
| 79.165.0.61 | attackbots | 79.165.0.61 - - [03/Jul/2020:22:06:51 +0100] "POST /wp-login.php HTTP/1.1" 200 1836 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.165.0.61 - - [03/Jul/2020:22:06:51 +0100] "POST /wp-login.php HTTP/1.1" 200 1815 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 79.165.0.61 - - [03/Jul/2020:22:06:52 +0100] "POST /wp-login.php HTTP/1.1" 200 1816 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ... |
2020-07-04 05:47:48 |
| 49.145.197.35 | attack | Unauthorized connection attempt from IP address 49.145.197.35 on Port 445(SMB) |
2020-07-04 05:34:38 |