城市(city): Hanoi
省份(region): unknown
国家(country): Vietnam
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 42.113.135.154 | attack | Unauthorized connection attempt from IP address 42.113.135.154 on Port 445(SMB) |
2019-09-05 16:47:15 |
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '42.113.128.0 - 42.113.143.255'
% Abuse contact for '42.113.128.0 - 42.113.143.255' is 'hm-changed@vnnic.vn'
inetnum: 42.113.128.0 - 42.113.143.255
netname: FPTDYNAMICIP-NET
country: vn
descr: FPT Telecom Company
descr: 2nd floor FPT Building, Pham Hung Road, Cau Giay District, Hanoi
admin-c: LDP12-AP
tech-c: NOC21-AP
status: ALLOCATED NON-PORTABLE
remarks: For spamming matters, mail to abuse@fpt.vn
mnt-by: MAINT-VN-FPT
mnt-irt: IRT-VNNIC-AP
last-modified: 2022-01-17T02:11:05Z
source: APNIC
irt: IRT-VNNIC-AP
address: Ha Noi, VietNam
phone: +84-24-35564944
fax-no: +84-24-37821462
e-mail: hm-changed@vnnic.vn
abuse-mailbox: hm-changed@vnnic.vn
admin-c: NTTT1-AP
tech-c: NTTT1-AP
auth: # Filtered
mnt-by: MAINT-VN-VNNIC
last-modified: 2026-04-21T02:07:47Z
source: APNIC
person: Luong Duy Phuong
address: FPT-VN
country: VN
phone: +84-28-73002222
e-mail: phuongld@fpt.com
nic-hdl: LDP12-AP
mnt-by: MAINT-VN-FPT
last-modified: 2023-10-16T02:13:55Z
abuse-mailbox: abuse@fpt.net
source: APNIC
person: Network Operation Center
nic-hdl: NOC21-AP
e-mail: ftel.noc.net@fpt.com
address: FPT Telecom
phone: +84-28-73093388
fax-no: +84-28-73008889
country: VN
mnt-by: MAINT-VN-VNNIC
last-modified: 2023-10-16T01:44:54Z
source: APNIC
% Information related to '42.113.135.0/24AS18403'
route: 42.113.135.0/24
origin: AS18403
descr: Vietnam Internet Network Information Center (VNNIC)
18 Nguyen Du Str, Hai Ba Trung District, Hanoi City, Vietnam
10th floor, MITEC Tower, Duong Dinh Nghe, Cau Giay, Hanoi
mnt-by: MAINT-VN-FPT
last-modified: 2019-08-01T06:53:19Z
source: APNIC
% This query was served by the APNIC Whois Service version 1.88.48 (WHOIS-AU5); <<>> DiG 9.10.3-P4-Ubuntu <<>> 42.113.135.66
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37515
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;42.113.135.66. IN A
;; AUTHORITY SECTION:
. 30 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026042702 1800 900 604800 86400
;; Query time: 35 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Apr 28 05:00:33 CST 2026
;; MSG SIZE rcvd: 106Host 66.135.113.42.in-addr.arpa. not found: 3(NXDOMAIN)Server: 183.60.83.19
Address: 183.60.83.19#53
** server can't find 66.135.113.42.in-addr.arpa: NXDOMAIN| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 205.240.77.49 | attackspambots | Dovecot Brute-Force |
2019-10-07 05:46:53 |
| 122.15.82.83 | attackbotsspam | Oct 6 11:12:58 php1 sshd\[25589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.82.83 user=root Oct 6 11:13:00 php1 sshd\[25589\]: Failed password for root from 122.15.82.83 port 36740 ssh2 Oct 6 11:17:33 php1 sshd\[25989\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.82.83 user=root Oct 6 11:17:35 php1 sshd\[25989\]: Failed password for root from 122.15.82.83 port 46622 ssh2 Oct 6 11:22:11 php1 sshd\[26368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.15.82.83 user=root |
2019-10-07 05:42:09 |
| 185.176.27.178 | attackbots | Oct 6 21:24:15 mail kernel: [1773586.399417] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=12989 PROTO=TCP SPT=47805 DPT=16131 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 21:24:24 mail kernel: [1773595.602514] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=26795 PROTO=TCP SPT=47805 DPT=38993 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 21:24:39 mail kernel: [1773611.331088] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=49237 PROTO=TCP SPT=47805 DPT=24335 WINDOW=1024 RES=0x00 SYN URGP=0 Oct 6 21:24:59 mail kernel: [1773630.447986] [UFW BLOCK] IN=eth0 OUT= MAC=fa:16:3e:d3:64:42:4c:5e:0c:c9:30:5f:08:00 SRC=185.176.27.178 DST=185.101.93.72 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=64892 PROTO=TCP SPT=47805 DPT=24077 WINDOW=1024 RES=0 |
2019-10-07 05:36:41 |
| 85.159.27.40 | attack | Unauthorised access (Oct 6) SRC=85.159.27.40 LEN=40 TTL=247 ID=7305 TCP DPT=445 WINDOW=1024 SYN |
2019-10-07 05:39:10 |
| 92.63.194.121 | attackspambots | Oct 6 23:47:09 andromeda sshd\[51903\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.63.194.121 user=root Oct 6 23:47:12 andromeda sshd\[51903\]: Failed password for root from 92.63.194.121 port 46114 ssh2 Oct 6 23:47:25 andromeda sshd\[51997\]: Invalid user c.loewe from 92.63.194.121 port 54518 |
2019-10-07 05:48:35 |
| 134.19.218.134 | attack | 2019-10-06T19:46:11.546723shield sshd\[27760\]: Invalid user 123Dell from 134.19.218.134 port 48398 2019-10-06T19:46:11.552146shield sshd\[27760\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.19.218.134 2019-10-06T19:46:13.679783shield sshd\[27760\]: Failed password for invalid user 123Dell from 134.19.218.134 port 48398 ssh2 2019-10-06T19:50:36.617562shield sshd\[28332\]: Invalid user Webmaster!@\#\$% from 134.19.218.134 port 60034 2019-10-06T19:50:36.622347shield sshd\[28332\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=134.19.218.134 |
2019-10-07 05:58:26 |
| 31.186.185.113 | attack | 3389BruteforceFW21 |
2019-10-07 05:53:58 |
| 49.88.41.123 | attackbots | Unauthorised access (Oct 6) SRC=49.88.41.123 LEN=40 TOS=0x10 PREC=0x40 TTL=49 ID=19675 TCP DPT=8080 WINDOW=33697 SYN |
2019-10-07 05:39:27 |
| 103.253.107.43 | attack | Automatic report - SSH Brute-Force Attack |
2019-10-07 05:51:21 |
| 139.198.12.65 | attackbots | Oct 6 17:34:25 plusreed sshd[17649]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.12.65 user=root Oct 6 17:34:27 plusreed sshd[17649]: Failed password for root from 139.198.12.65 port 42510 ssh2 ... |
2019-10-07 05:45:17 |
| 185.209.0.90 | attackbots | 10/06/2019-23:13:43.196472 185.209.0.90 Protocol: 6 ET DROP Dshield Block Listed Source group 1 |
2019-10-07 05:51:47 |
| 51.38.65.243 | attackbots | Oct 6 21:46:50 dev0-dcde-rnet sshd[24404]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.65.243 Oct 6 21:46:53 dev0-dcde-rnet sshd[24404]: Failed password for invalid user Welcome@1 from 51.38.65.243 port 49192 ssh2 Oct 6 21:50:46 dev0-dcde-rnet sshd[24414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.38.65.243 |
2019-10-07 05:52:16 |
| 182.61.148.116 | attackspambots | Oct 7 03:02:50 areeb-Workstation sshd[7799]: Failed password for root from 182.61.148.116 port 48708 ssh2 ... |
2019-10-07 05:37:12 |
| 173.249.20.68 | attackbotsspam | Oct 6 19:51:13 anodpoucpklekan sshd[100364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=173.249.20.68 user=root Oct 6 19:51:15 anodpoucpklekan sshd[100364]: Failed password for root from 173.249.20.68 port 38846 ssh2 ... |
2019-10-07 05:38:43 |
| 222.186.175.147 | attackspambots | Oct 6 17:30:22 ny01 sshd[16761]: Failed password for root from 222.186.175.147 port 42538 ssh2 Oct 6 17:30:39 ny01 sshd[16761]: error: maximum authentication attempts exceeded for root from 222.186.175.147 port 42538 ssh2 [preauth] Oct 6 17:30:49 ny01 sshd[16851]: Failed password for root from 222.186.175.147 port 44154 ssh2 |
2019-10-07 05:35:07 |