City: unknown
Region: unknown
Country: Viet Nam
Internet Service Provider: FPT Telecom Company
Hostname: unknown
Organization: unknown
Usage Type: Fixed Line ISP
| Type | Details | Datetime |
|---|---|---|
| attackbots | Unauthorized connection attempt detected from IP address 42.113.136.219 to port 23 [J] |
2020-01-12 21:09:53 |
| IP | Type | Details | Datetime |
|---|---|---|---|
| 42.113.136.64 | attackspambots | Attempted connection to port 445. |
2020-06-14 20:14:37 |
| 42.113.136.117 | attackspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-02-11 00:45:52 |
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.113.136.219
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 7258
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;42.113.136.219. IN A
;; AUTHORITY SECTION:
. 493 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020011200 1800 900 604800 86400
;; Query time: 65 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Jan 12 21:09:47 CST 2020
;; MSG SIZE rcvd: 118Host 219.136.113.42.in-addr.arpa not found: 2(SERVFAIL);; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 219.136.113.42.in-addr.arpa: SERVFAIL| IP | Type | Details | Datetime |
|---|---|---|---|
| 92.53.65.95 | attackspam | Sep 10 18:03:17 lenivpn01 kernel: \[364201.623226\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=92.53.65.95 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=9517 PROTO=TCP SPT=46590 DPT=8389 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 19:11:43 lenivpn01 kernel: \[368308.187912\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=92.53.65.95 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=9037 PROTO=TCP SPT=46590 DPT=33849 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 10 23:02:22 lenivpn01 kernel: \[382146.330113\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=92.53.65.95 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=61677 PROTO=TCP SPT=46590 DPT=3351 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 01:01:14 lenivpn01 kernel: \[389277.949460\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=92.53.65.95 DST=195.201.121.15 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=34366 PRO ... |
2019-09-12 01:27:53 |
| 81.22.45.150 | attackspambots | 09/11/2019-06:23:49.128951 81.22.45.150 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 85 |
2019-09-12 02:03:45 |
| 207.226.155.196 | attackspambots | Unauthorised access (Sep 11) SRC=207.226.155.196 LEN=40 TTL=243 ID=55254 TCP DPT=445 WINDOW=1024 SYN |
2019-09-12 00:54:29 |
| 159.203.203.37 | attackspambots | Port scan |
2019-09-12 00:15:31 |
| 89.248.168.202 | attackbots | 09/11/2019-11:09:51.823318 89.248.168.202 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 100 |
2019-09-12 00:28:36 |
| 94.20.55.169 | attack | [SMB remote code execution attempt: port tcp/445] *(RWIN=1024)(09111103) |
2019-09-12 02:01:18 |
| 178.91.94.146 | attack | Unauthorised access (Sep 11) SRC=178.91.94.146 LEN=40 TTL=242 ID=42519 TCP DPT=445 WINDOW=1024 SYN |
2019-09-12 01:08:40 |
| 120.52.152.15 | attack | Sep 10 18:46:49 lenivpn01 kernel: \[366813.806785\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=120.52.152.15 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=233 ID=16512 PROTO=TCP SPT=58914 DPT=2086 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 02:57:44 lenivpn01 kernel: \[396268.203140\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=120.52.152.15 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=230 ID=4112 PROTO=TCP SPT=58914 DPT=179 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 04:01:27 lenivpn01 kernel: \[400091.360333\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=120.52.152.15 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=233 ID=38701 PROTO=TCP SPT=58914 DPT=1967 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 11 04:17:53 lenivpn01 kernel: \[401077.130392\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:2f:6c:1b:d2:74:7f:6e:37:e3:08:00 SRC=120.52.152.15 DST=195.201.121.15 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=41 ... |
2019-09-12 01:58:40 |
| 202.29.57.103 | attackspam | firewall-block, port(s): 8545/tcp |
2019-09-12 02:16:55 |
| 77.247.108.119 | attack | 5038/tcp 5038/tcp 5038/tcp... [2019-07-11/09-11]1685pkt,1pt.(tcp) |
2019-09-12 01:33:33 |
| 37.49.227.109 | attackbotsspam | 09/11/2019-12:11:13.980632 37.49.227.109 Protocol: 6 ET COMPROMISED Known Compromised or Hostile Host Traffic group 22 |
2019-09-12 00:50:04 |
| 61.85.40.112 | attack | SSH Brute-Force reported by Fail2Ban |
2019-09-12 02:11:28 |
| 125.64.94.212 | attack | Sep 9 22:14:21 postfix postfix/smtpd\[8190\]: lost connection after EHLO from unknown\[125.64.94.212\] Sep 9 22:14:22 postfix postfix/smtpd\[8190\]: lost connection after UNKNOWN from unknown\[125.64.94.212\] ... |
2019-09-12 01:56:17 |
| 184.105.139.84 | attackbotsspam | Port scan |
2019-09-12 01:53:28 |
| 185.176.27.114 | attackbots | 09/11/2019-13:44:35.334193 185.176.27.114 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-09-12 01:51:06 |