Friday, June 30, 2017

May be infected with Wannacry or similar: Port 445

Hosts hitting my network on port 445 in the past few minutes - may be infected by WannaCry or?

China and Vietnam

31.29.215.8

  • inetnum: 31.29.212.0 - 31.29.215.255
  • netname: CMST-ORENBURG-20130115
  • descr: Orenburg TsuS of Privolzhsky branch of CJS Komstar-Regiony
  • country: RU
  • admin-c: OMZ4-RIPE
  • tech-c: OMZ4-RIPE
  • status: ASSIGNED PA
  • mnt-by: OVERTA-MNT
  • created: 2013-01-15T06:28:42Z
  • last-modified: 2017-06-01T12:12:14Z
  • source: RIPE
  • person: Oleg M Zavalishin
  • address: 14, Karavannaya st., Orenburg
  • phone: +73532372111
  • nic-hdl: OMZ4-RIPE
  • notify: noc@itrtc.ru
  • mnt-by: OVERTA-MNT
  • created: 2013-01-15T06:21:59Z
  • last-modified: 2013-01-15T06:21:59Z
  • source: RIPE

 42.116.26.112

inetnum:42.116.16.0 - 42.116.31.255
netname:FPT-STATICIP-NET
country:vn
descr:FPT Telecom Company
descr:2nd floor FPT Building, Pham Hung Road, Cau Giay District, Hanoi
admin-c:TTH19-AP
tech-c:NOC21-AP
status:ALLOCATED NON-PORTABLE
remarks:For spamming matters, mail to abuse@fpt.vn
changed:hm-changed@vnnic.net.vn 20120809
mnt-by:MAINT-VN-FPT
mnt-irt:IRT-VNNIC-AP
source:APNIC
irt:IRT-VNNIC-AP
address:Ha Noi, VietNam
phone:+84-4-35564944
fax-no:+84-4-37821462
e-mail:hm-changed@vnnic.net.vn
abuse-mailbox:hm-changed@vnnic.net.vn
admin-c:PT174-AP
tech-c:NTTT1-AP
auth:# Filtered
mnt-by:MAINT-VN-VNNIC
changed:hm-changed@vnnic.net.vn 20101108
source:APNIC