123.16.13.148 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackbots	unauthorized connection attempt	2020-01-09 20:55:44

相同子网IP讨论:

IP	类型	评论内容	时间
123.16.130.87	attackspambots	Unauthorized connection attempt from IP address 123.16.130.87 on Port 445(SMB)	2020-09-16 12:50:14
123.16.130.87	attack	Unauthorized connection attempt from IP address 123.16.130.87 on Port 445(SMB)	2020-09-16 04:35:32
123.16.13.240	attackbotsspam	(imapd) Failed IMAP login from 123.16.13.240 (VN/Vietnam/static.vnpt.vn): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Aug 6 17:47:01 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 4 secs): user=, method=PLAIN, rip=123.16.13.240, lip=5.63.12.44, TLS: Connection closed, session=	2020-08-07 05:48:23
123.16.135.136	attackspam	Port probing on unauthorized port 445	2020-08-06 16:03:08
123.16.133.126	attackspam	Jun 26 14:14:25 master sshd[28139]: Failed password for invalid user admin from 123.16.133.126 port 36162 ssh2	2020-06-26 21:13:10
123.16.133.153	attackbotsspam	Unauthorized connection attempt from IP address 123.16.133.153 on Port 445(SMB)	2020-06-10 22:55:28
123.16.13.150	attackbots	2020-05-3105:48:571jfEy0-00031G-TT\<=info@whatsup2013.chH=\(localhost\)[113.173.188.176]:44453P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3065id=2060d6858ea58f871b1ea804e397bda18af61d@whatsup2013.chT="tonandh862"fornandh862@gmail.commrevisholliday@gmail.commsbulldog70@yahoo.com2020-05-3105:49:341jfEyb-00033M-Jv\<=info@whatsup2013.chH=\(localhost\)[113.173.187.100]:59923P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=3036id=a44467ded5fe2bd8fb05f3a0ab7f46eac9239e817c@whatsup2013.chT="tohartsvillejohn007"forhartsvillejohn007@gmail.comfernandezgustav91ww@gmail.comgucigangbang23@gmail.com2020-05-3105:49:191jfEyM-00032L-Ka\<=info@whatsup2013.chH=\(localhost\)[123.16.13.150]:46707P=esmtpsaX=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256CV=noA=dovecot_login:info@whatsup2013.chS=2982id=005fe9bab19ab0b82421973bdca8829e69624f@whatsup2013.chT="tomeetrpatel02"formeetrpatel02@gmail.comadrian_nichols@bigpond.commccarthymichael952@gmail.c	2020-05-31 17:14:50
123.16.138.48	attackbots	Brute force SMTP login attempted. ...	2020-05-30 16:26:27
123.16.138.48	attackbotsspam	May 14 11:34:37 scivo sshd[18830]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:34:37 scivo sshd[18830]: Invalid user adriana from 123.16.138.48 May 14 11:34:37 scivo sshd[18830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:34:39 scivo sshd[18830]: Failed password for invalid user adriana from 123.16.138.48 port 49030 ssh2 May 14 11:34:39 scivo sshd[18830]: Received disconnect from 123.16.138.48: 11: Bye Bye [preauth] May 14 11:47:59 scivo sshd[19655]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:47:59 scivo sshd[19655]: Invalid user test from 123.16.138.48 May 14 11:47:59 scivo sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:48:01 scivo sshd[19655]: Failed passwor........ -------------------------------	2020-05-16 00:31:57
123.16.138.48	attack	May 14 11:34:37 scivo sshd[18830]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:34:37 scivo sshd[18830]: Invalid user adriana from 123.16.138.48 May 14 11:34:37 scivo sshd[18830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:34:39 scivo sshd[18830]: Failed password for invalid user adriana from 123.16.138.48 port 49030 ssh2 May 14 11:34:39 scivo sshd[18830]: Received disconnect from 123.16.138.48: 11: Bye Bye [preauth] May 14 11:47:59 scivo sshd[19655]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:47:59 scivo sshd[19655]: Invalid user test from 123.16.138.48 May 14 11:47:59 scivo sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:48:01 scivo sshd[19655]: Failed passwor........ -------------------------------	2020-05-15 18:07:24
123.16.138.48	attack	May 14 11:34:37 scivo sshd[18830]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:34:37 scivo sshd[18830]: Invalid user adriana from 123.16.138.48 May 14 11:34:37 scivo sshd[18830]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:34:39 scivo sshd[18830]: Failed password for invalid user adriana from 123.16.138.48 port 49030 ssh2 May 14 11:34:39 scivo sshd[18830]: Received disconnect from 123.16.138.48: 11: Bye Bye [preauth] May 14 11:47:59 scivo sshd[19655]: Address 123.16.138.48 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! May 14 11:47:59 scivo sshd[19655]: Invalid user test from 123.16.138.48 May 14 11:47:59 scivo sshd[19655]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.16.138.48 May 14 11:48:01 scivo sshd[19655]: Failed passwor........ -------------------------------	2020-05-14 18:04:36
123.16.134.157	attack	2020-04-05 14:25:20 plain_virtual_exim authenticator failed for ([127.0.0.1]) [123.16.134.157]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.16.134.157	2020-04-06 00:59:05
123.16.134.192	attackspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-26 03:28:00
123.16.136.161	attackbotsspam	445/tcp [2020-03-23]1pkt	2020-03-23 21:11:27
123.16.139.199	attack	SSH bruteforce more then 50 syn to 22 port per 10 seconds.	2020-03-10 20:07:15

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.16.13.148
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 10340
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.16.13.148.			IN	A

;; AUTHORITY SECTION:
.			199	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010900 1800 900 604800 86400

;; Query time: 107 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Thu Jan 09 20:55:38 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

148.13.16.123.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
148.13.16.123.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

IP	类型	评论内容	时间
212.145.227.244	attack	$f2bV_matches	2020-02-27 00:05:05
162.243.8.135	attackspambots	DigitalOcean BotNet attack - 10s of requests to non-existent pages - :443/app-ads.txt - typically bursts of 8 requests per second - undefined, XSS attacks node-superagent/4.1.0	2020-02-27 00:13:23
93.174.93.123	attackbots	5500/tcp 8800/tcp 3500/tcp... [2020-02-21/26]132pkt,120pt.(tcp)	2020-02-27 00:25:47
222.186.180.9	attackspam	$f2bV_matches	2020-02-27 00:38:04
83.48.29.116	attackbotsspam	port	2020-02-27 00:06:33
212.170.50.203	attack	$f2bV_matches	2020-02-26 23:57:18
222.186.180.223	attackspambots	Feb 26 16:26:08 ip-172-31-62-245 sshd\[3567\]: Failed password for root from 222.186.180.223 port 11134 ssh2\ Feb 26 16:26:20 ip-172-31-62-245 sshd\[3567\]: Failed password for root from 222.186.180.223 port 11134 ssh2\ Feb 26 16:26:24 ip-172-31-62-245 sshd\[3567\]: Failed password for root from 222.186.180.223 port 11134 ssh2\ Feb 26 16:26:37 ip-172-31-62-245 sshd\[3571\]: Failed password for root from 222.186.180.223 port 32400 ssh2\ Feb 26 16:26:55 ip-172-31-62-245 sshd\[3571\]: Failed password for root from 222.186.180.223 port 32400 ssh2\	2020-02-27 00:31:33
52.231.72.147	attackbotsspam	Feb 26 16:39:53 lukav-desktop sshd\[9142\]: Invalid user mella from 52.231.72.147 Feb 26 16:39:53 lukav-desktop sshd\[9142\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.231.72.147 Feb 26 16:39:55 lukav-desktop sshd\[9142\]: Failed password for invalid user mella from 52.231.72.147 port 45372 ssh2 Feb 26 16:43:14 lukav-desktop sshd\[9168\]: Invalid user otrs from 52.231.72.147 Feb 26 16:43:14 lukav-desktop sshd\[9168\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=52.231.72.147	2020-02-27 00:09:36
80.82.77.132	attackspam	Feb 26 15:22:17 TCP Attack: SRC=80.82.77.132 DST=[Masked] LEN=40 TOS=0x08 PREC=0x20 TTL=246 PROTO=TCP SPT=50533 DPT=7777 WINDOW=1024 RES=0x00 SYN URGP=0	2020-02-27 00:22:22
212.129.140.89	attack	suspicious action Wed, 26 Feb 2020 10:51:38 -0300	2020-02-27 00:07:42
77.247.110.92	attack	Port 5205 scan denied	2020-02-27 00:08:36
142.93.212.85	attack	RDP Brute-Force (honeypot 9)	2020-02-27 00:20:31
103.117.193.65	attackbotsspam	Feb 26 09:49:12 askasleikir sshd[147178]: Failed password for guest from 103.117.193.65 port 55120 ssh2	2020-02-27 00:19:21
193.31.24.113	attackspam	02/26/2020-17:26:21.032586 193.31.24.113 Protocol: 6 SURICATA TLS invalid record/traffic	2020-02-27 00:28:50
92.118.37.70	attack	Port 3389 (MS RDP) access denied	2020-02-27 00:16:07

最近上报的IP列表

165.212.76.232	81.165.108.55	220.134.134.77	220.75.233.224
189.154.63.29	163.203.27.52	113.254.69.66	103.48.251.37
103.238.69.65	239.141.248.173	85.204.88.229	222.103.57.99
219.78.164.67	194.132.236.215	189.244.137.12	183.149.151.139
181.174.18.253	142.141.120.215	179.159.221.253	177.38.243.174