A10 Defend Threat Control Report

Periodic IP Check Results

11 October 2023 - 09 January 2024

| Security Research
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Table of Contents

Title Page

Periodic IP Check 3

Page 1
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Filter Name Filter Value

IP/Network 81.19.209.0/13, 156.248.38.0/13

Filter Type ATTACKED

Lookback Period 90 days

Total Count 135

 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2024-01-09 156.251.239.0 145 min 29 United

10:41:56 /24 CNSERVERS Attacked ARM sec States

2024-01-09 156.250.131.0 POWER LINE South

07:36:23 /24 DATACENTER Attacked NTP 0 min 48 sec Africa

2024-01-09 156.250.131.0 POWER LINE South

02:36:47 /24 DATACENTER Attacked NTP 2 min 45 sec Africa

2024-01-09 156.250.131.0 POWER LINE South

02:08:27 /24 DATACENTER Attacked NTP 2 min 13 sec Africa

2024-01-08 156.251.239.0 United

15:42:05 /24 CNSERVERS Attacked NTP 1 min 33 sec States

2024-01-08 156.250.131.0 POWER LINE South

12:30:24 /24 DATACENTER Attacked NTP 10 min 24 sec Africa

2024-01-08 156.250.131.0 POWER LINE South

11:12:30 /24 DATACENTER Attacked NTP 1 min 25 sec Africa

2024-01-08 156.250.131.0 POWER LINE South

10:38:49 /24 DATACENTER Attacked NTP 2 min 49 sec Africa

2024-01-08 156.255.180.0
09:41:46 /24 MOACK.Co.LTD Attacked NTP 1 min 32 sec Hong Kong

2024-01-08 156.255.180.0
08:55:43 /24 MOACK.Co.LTD Attacked NTP 10 min 15 sec Hong Kong

2024-01-08 156.255.210.0
08:51:46 /24 MOACK.Co.LTD Attacked NTP 2 min 13 sec Hong Kong

2024-01-08 156.250.131.0 POWER LINE South

07:14:00 /24 DATACENTER Attacked NTP 1 min 24 sec Africa

2024-01-08 156.250.131.0 POWER LINE South

06:46:50 /24 DATACENTER Attacked NTP 1 min 24 sec Africa

2024-01-08 156.250.131.0 POWER LINE South

06:26:44 /24 DATACENTER Attacked NTP 1 min 29 sec Africa

2024-01-07 156.250.131.0 POWER LINE South

07:21:11 /24 DATACENTER Attacked NTP 1 min 32 sec Africa

2024-01-07 156.250.131.0 POWER LINE South

04:25:33 /24 DATACENTER Attacked NTP 1 min 23 sec Africa

Page 3
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2024-01-07 156.250.131.0 POWER LINE South

03:10:32 /24 DATACENTER Attacked NTP 0 min 7 sec Africa

2024-01-06 156.251.51.0/
15:22:17 24 TERAEXCH Attacked NTP 1 min 24 sec Hong Kong

2024-01-06 156.250.131.0 POWER LINE South

15:09:49 /24 DATACENTER Attacked NTP 1 min 23 sec Africa

2024-01-06 156.251.51.0/
14:37:41 24 TERAEXCH Attacked NTP 3 min 5 sec Hong Kong

2024-01-06 156.250.131.0 POWER LINE South

08:57:03 /24 DATACENTER Attacked NTP 1 min 23 sec Africa

2024-01-06 156.250.131.0 POWER LINE South

08:45:19 /24 DATACENTER Attacked NTP 1 min 14 sec Africa

2024-01-06 156.255.210.0
08:27:03 /24 MOACK.Co.LTD Attacked NTP 0 min 30 sec Hong Kong

2024-01-06 156.255.180.0
08:18:48 /24 MOACK.Co.LTD Attacked NTP 4 min 45 sec Hong Kong

2024-01-06 156.250.131.0 POWER LINE South

08:01:29 /24 DATACENTER Attacked NTP 1 min 36 sec Africa

2024-01-06 156.255.180.0
06:58:20 /24 MOACK.Co.LTD Attacked NTP 9 min 17 sec Hong Kong

2024-01-06 156.250.131.0 POWER LINE South

06:52:03 /24 DATACENTER Attacked NTP 3 min 5 sec Africa

2024-01-06 156.255.210.0
06:44:40 /24 MOACK.Co.LTD Attacked NTP 2 min 58 sec Hong Kong

2024-01-06 156.250.131.0 POWER LINE South

05:25:40 /24 DATACENTER Attacked NTP 11 min 54 sec Africa

2024-01-06 156.250.131.0 POWER LINE South

04:24:18 /24 DATACENTER Attacked NTP 1 min 31 sec Africa

2024-01-05 156.250.131.0 POWER LINE South

15:43:41 /24 DATACENTER Attacked NTP 3 min 0 sec Africa

2024-01-05 156.255.210.0
13:36:40 /24 MOACK.Co.LTD Attacked NTP 2 min 42 sec Hong Kong

Page 4
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2024-01-05 156.255.180.0
13:08:37 /24 MOACK.Co.LTD Attacked NTP 6 min 33 sec Hong Kong

2024-01-05 156.255.180.0
12:36:58 /24 MOACK.Co.LTD Attacked NTP 3 min 48 sec Hong Kong

2024-01-05 156.255.180.0
11:52:46 /24 MOACK.Co.LTD Attacked NTP 1 min 24 sec Hong Kong

2024-01-05 156.255.180.0
09:57:19 /24 MOACK.Co.LTD Attacked NTP 1 min 23 sec Hong Kong

2024-01-05 156.255.180.0
09:46:02 /24 MOACK.Co.LTD Attacked NTP 1 min 43 sec Hong Kong

2024-01-05 156.255.210.0
09:24:18 /24 MOACK.Co.LTD Attacked NTP 2 min 58 sec Hong Kong

2024-01-05 156.255.180.0
01:21:20 /24 MOACK.Co.LTD Attacked NTP 0 min 10 sec Hong Kong

2024-01-04 156.251.25.0/ United

18:43:20 24 TERAEXCH Attacked NTP 1 min 25 sec States

2024-01-04 156.255.180.0
17:50:25 /24 MOACK.Co.LTD Attacked NTP 1 min 43 sec Hong Kong

2024-01-04 156.255.180.0
12:36:44 /24 MOACK.Co.LTD Attacked NTP 4 min 47 sec Hong Kong

2024-01-04 156.255.180.0
11:58:02 /24 MOACK.Co.LTD Attacked NTP 3 min 0 sec Hong Kong

2024-01-04 156.255.210.0
09:21:45 /24 MOACK.Co.LTD Attacked NTP 3 min 9 sec Hong Kong

2023-12-29 156.251.239.0 United

14:43:08 /24 CNSERVERS Attacked NTP 3 min 34 sec States

2023-12-27 156.253.11.0/ HK AISI CLOUD

14:48:13 24 COMPUTING LIMITED Attacked NTP 0 min 10 sec Hong Kong

2023-12-26 156.251.51.0/
13:38:50 24 TERAEXCH Attacked CHARGEN 3 min 20 sec Hong Kong

2023-12-24 156.251.239.0 United

15:44:46 /24 CNSERVERS Attacked NTP 2 min 7 sec States

Page 5
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-12-24 156.253.13.0/ HK AISI CLOUD

14:02:58 24 COMPUTING LIMITED Attacked NTP 1 min 38 sec Hong Kong

2023-12-24 156.251.51.0/
10:13:44 24 TERAEXCH Attacked NTP 1 min 27 sec Hong Kong

2023-12-24 156.251.51.0/ Dahua-378

05:39:32 24 TERAEXCH Attacked 10 1 min 2 sec Hong Kong

2023-12-23 156.251.239.0 United

16:33:01 /24 CNSERVERS Attacked NTP 4 min 18 sec States

2023-12-23 156.251.239.0 United

16:17:07 /24 CNSERVERS Attacked NTP 0 min 59 sec States

2023-12-23 156.251.51.0/
03:42:07 24 TERAEXCH Attacked NTP 2 min 22 sec Hong Kong

2023-12-22 156.251.51.0/
08:14:56 24 TERAEXCH Attacked NTP 3 min 49 sec Hong Kong

2023-12-22 156.251.51.0/
07:35:16 24 TERAEXCH Attacked NTP 0 min 0 sec Hong Kong

2023-12-21 156.251.164.0 United

07:22:00 /24 CNSERVERS Attacked NTP 1 min 29 sec States

2023-12-21 156.253.100.0 LUOGELANG FRANCE South

07:10:24 /24 LIMITED Attacked CLDAP 2 min 20 sec Africa

2023-12-19 156.251.51.0/
10:24:42 24 TERAEXCH Attacked NTP 2 min 59 sec Hong Kong

2023-12-19 156.251.51.0/
08:57:17 24 TERAEXCH Attacked NTP 1 min 38 sec Hong Kong

2023-12-18 156.251.51.0/
16:16:12 24 TERAEXCH Attacked NTP 3 min 12 sec Hong Kong

2023-12-18 156.251.179.0 United

14:33:49 /24 CNSERVERS Attacked NTP 2 min 0 sec States

2023-12-18 156.251.51.0/
11:31:56 24 TERAEXCH Attacked NTP 2 min 7 sec Hong Kong

2023-12-18 156.251.51.0/
10:45:32 24 TERAEXCH Attacked NTP 2 min 5 sec Hong Kong

Page 6
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-12-15 156.251.164.0 United

03:18:27 /24 CNSERVERS Attacked NTP 1 min 25 sec States

2023-12-11 156.250.76.0/ LUOGELANG FRANCE South

14:46:28 24 LIMITED Attacked NTP 1 min 42 sec Africa

2023-12-11 156.250.76.0/ LUOGELANG FRANCE South

10:10:37 24 LIMITED Attacked NTP 1 min 58 sec Africa

2023-12-11 156.251.51.0/
05:05:09 24 TERAEXCH Attacked NTP 4 min 44 sec Hong Kong

2023-12-10 156.251.182.0 United

04:18:18 /24 CNSERVERS Attacked NTP 1 min 36 sec States

2023-12-09 156.251.182.0 United

15:32:08 /24 CNSERVERS Attacked NTP 0 min 11 sec States

2023-12-06 156.251.153.0 United

07:00:14 /24 CNSERVERS Attacked NTP 1 min 31 sec States

2023-12-05 156.253.13.0/ HK AISI CLOUD

17:04:11 24 COMPUTING LIMITED Attacked NTP 1 min 26 sec Hong Kong

2023-12-05 156.249.28.0/ HONG KONG Megalayer United

13:13:51 24 Technology Co.,Limited Attacked NTP 1 min 0 sec States

2023-12-05 156.251.179.0 United

02:28:26 /24 CNSERVERS Attacked NTP 1 min 26 sec States

2023-12-05 156.251.51.0/
02:01:04 24 TERAEXCH Attacked NTP 3 min 23 sec Hong Kong

2023-12-01 156.251.173.0 United

06:56:14 /24 CNSERVERS Attacked NTP 1 min 28 sec States

2023-12-01 156.251.173.0 United

06:28:37 /24 CNSERVERS Attacked NTP 1 min 29 sec States

2023-11-29 156.251.239.0 United

17:42:02 /24 CNSERVERS Attacked NTP 1 min 27 sec States

2023-11-29 156.251.51.0/
17:19:02 24 TERAEXCH Attacked NTP 0 min 10 sec Hong Kong

2023-11-29 156.251.239.0 United

10:39:36 /24 CNSERVERS Attacked ARM 2 min 0 sec States

Page 7
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-11-28 156.253.4.0/2 NETEASE HONG KONG

16:39:27 4 LIMITED Attacked NTP 2 min 38 sec Hong Kong

2023-11-21 156.254.236.0 LUOGELANG FRANCE

05:32:49 /24 LIMITED Attacked NTP 1 min 54 sec Hong Kong

2023-11-19 156.248.48.0/ Hong Kong FireLine

10:38:06 24 Network LTD Attacked NTP 0 min 50 sec Hong Kong

2023-11-19 156.248.48.0/ Hong Kong FireLine

06:40:50 24 Network LTD Attacked NTP 0 min 0 sec Hong Kong

2023-11-19 156.248.40.0/ Hong Kong FireLine

03:38:14 24 Network LTD Attacked NTP 0 min 32 sec Hong Kong

2023-11-19 156.248.42.0/ Hong Kong FireLine

03:34:07 24 Network LTD Attacked NTP 0 min 36 sec Hong Kong

2023-11-19 156.248.43.0/ Hong Kong FireLine

03:27:52 24 Network LTD Attacked NTP 0 min 34 sec Hong Kong

2023-11-18 156.248.42.0/ Hong Kong FireLine

10:42:28 24 Network LTD Attacked NTP 0 min 30 sec Hong Kong

2023-11-18 156.248.49.0/ Hong Kong FireLine

09:38:20 24 Network LTD Attacked NTP 0 min 36 sec Hong Kong

2023-11-18 156.248.49.0/ Hong Kong FireLine

07:37:21 24 Network LTD Attacked NTP 3 min 10 sec Hong Kong

2023-11-18 156.248.42.0/ Hong Kong FireLine

04:21:35 24 Network LTD Attacked NTP 1 min 11 sec Hong Kong

2023-11-17 156.251.239.0 United

05:42:56 /24 CNSERVERS Attacked NTP 1 min 2 sec States

2023-11-16 156.251.239.0 United

13:04:05 /24 CNSERVERS Attacked NTP 1 min 28 sec States

2023-11-16 156.251.239.0 United

12:37:34 /24 CNSERVERS Attacked NTP 4 min 56 sec States

2023-11-16 156.251.239.0 United

12:02:11 /24 CNSERVERS Attacked NTP 3 min 40 sec States

2023-11-15 156.251.239.0 United

14:30:03 /24 CNSERVERS Attacked NTP 7 min 9 sec States

Page 8
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-11-13 156.251.239.0 United

14:22:50 /24 CNSERVERS Attacked NTP 10 min 44 sec States

2023-11-12 156.250.2.0/2 NETEASE HONG KONG

08:11:02 4 LIMITED Attacked ARM 1 min 0 sec Hong Kong

2023-11-12 156.253.123.0 LUOGELANG FRANCE South

04:49:15 /24 LIMITED Attacked NTP 0 min 42 sec Africa

2023-11-11 156.253.122.0 LUOGELANG FRANCE South

09:18:50 /24 LIMITED Attacked NTP 0 min 46 sec Africa

2024-01-04
16:43:08 81.21.11.0/24 Muhammet Ugur Ozturk Attacked ARM 2 min 16 sec Jordan

2024-01-02
00:40:31 81.21.11.0/24 Muhammet Ugur Ozturk Attacked ARM 0 min 29 sec Jordan

2024-01-01 81.16.133.0/2 First Abu Dhabi Bank United Arab

10:05:13 4 P.j.s.c Attacked ARM 1 min 54 sec Emirates

2024-01-01 81.16.132.0/2 First Abu Dhabi Bank United Arab

09:48:00 4 P.j.s.c Attacked ARM 2 min 3 sec Emirates

2023-12-27
21:11:03 81.18.88.0/24 RCS & RDS Attacked ARM 3 min 29 sec Romania

2023-12-26 81.16.177.0/2 United

18:52:19 4 Daniel Jackson Attacked DTLS 59 min 38 sec Kingdom

2023-12-24
23:14:00 81.21.11.0/24 Muhammet Ugur Ozturk Attacked ARM 1 min 14 sec Jordan

2023-12-23 81.16.177.0/2 United

17:26:12 4 Daniel Jackson Attacked DTLS 1 min 1 sec Kingdom

2023-12-22
19:14:07 81.21.11.0/24 Muhammet Ugur Ozturk Attacked NTP 1 min 25 sec Jordan

2023-12-21 81.16.177.0/2 United

22:39:40 4 Daniel Jackson Attacked DTLS 2 min 0 sec Kingdom

2023-12-21 81.16.177.0/2 United

22:13:12 4 Daniel Jackson Attacked DTLS 0 min 30 sec Kingdom

2023-12-20 81.16.177.0/2 United

02:56:22 4 Daniel Jackson Attacked DTLS 11 min 26 sec Kingdom

Page 9
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-12-20 81.16.177.0/2 United

02:27:12 4 Daniel Jackson Attacked DTLS 13 min 26 sec Kingdom

2023-12-19 81.16.177.0/2 United

00:17:11 4 Daniel Jackson Attacked DTLS 1 min 53 sec Kingdom

2023-12-18 81.16.177.0/2 United

17:10:25 4 Daniel Jackson Attacked DTLS 180 min 3 sec Kingdom

2023-12-18 81.16.177.0/2 United

15:39:00 4 Daniel Jackson Attacked DTLS 5 min 20 sec Kingdom

2023-12-18 81.16.177.0/2 United

01:59:42 4 Daniel Jackson Attacked DTLS 6 min 6 sec Kingdom

2023-12-18 81.16.177.0/2 United

01:20:50 4 Daniel Jackson Attacked DTLS 22 min 17 sec Kingdom

2023-12-17 81.16.177.0/2 United

23:33:27 4 Daniel Jackson Attacked DTLS 6 min 0 sec Kingdom

2023-12-15 81.16.177.0/2 United

14:40:43 4 Daniel Jackson Attacked DTLS 2 min 17 sec Kingdom

2023-12-15 81.16.177.0/2 United

14:40:43 4 Daniel Jackson Attacked DTLS 2 min 16 sec Kingdom

2023-12-13 81.16.177.0/2 United

02:22:46 4 Daniel Jackson Attacked DTLS 41 min 19 sec Kingdom

2023-12-13 81.16.177.0/2 United

01:37:11 4 Daniel Jackson Attacked DTLS 3 min 17 sec Kingdom

2023-12-13 81.16.177.0/2 United

01:22:54 4 Daniel Jackson Attacked DTLS 7 min 37 sec Kingdom

2023-12-13 81.16.134.0/2 First Abu Dhabi Bank United Arab

01:03:05 4 P.j.s.c Attacked ARM 1 min 59 sec Emirates

2023-12-01 Rambler Internet Holding

11:50:23 81.19.72.0/24 LLC Attacked CLDAP 1 min 13 sec Russia

2023-10-22 81.19.134.0/2 GZ REMITTANCE CHINA

19:26:55 4 INDUSTRY LIMITED Attacked ARM 1 min 25 sec Russia

2023-10-21 81.22.131.0/2
16:24:04 4 Myweb Limited Attacked SSDP 1 min 59 sec Ukraine

Page 10
 Time period: 2023-10-11T18:38:00 - 2024-01-09T18:38:00
Report on A10 Defend Threat Control - Periodic IP Check
Generated on 2024-01-09T18:38:00

Periodic IP Check

Victim IP AS Attack
Time Status Attack Type Country
Range Organization Duration

2023-10-21 81.22.131.0/2
16:23:49 4 Myweb Limited Attacked ARM 2 min 12 sec Ukraine

2023-10-19 81.19.137.0/2
17:02:47 4 Aeza International Ltd Attacked ARM 1 min 6 sec France

2023-10-18 81.22.131.0/2
19:00:50 4 Myweb Limited Attacked ARM 3 min 19 sec Ukraine

2023-10-15 81.22.131.0/2
23:58:18 4 Myweb Limited Attacked SSDP 4 min 45 sec Ukraine

2023-10-15 81.22.131.0/2
23:58:14 4 Myweb Limited Attacked ARM 12 min 21 sec Ukraine

2023-10-15 81.16.176.0/2 United

20:13:48 4 Daniel Jackson Attacked SSDP 0 min 59 sec Kingdom

2023-10-14
22:40:10 81.21.1.0/24 Noah Kolossa Attacked SSDP 0 min 3 sec Jordan

Page 11
DISARMING DDOS
Sophisticated DDoS threat intelligence, real-time threat detection,
and automated signature extraction can help protect your
organization against even the largest DDoS attacks.

Learn more at https://threats.a10networks.com