123.16.134.125

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	1578373023 - 01/07/2020 05:57:03 Host: 123.16.134.125/123.16.134.125 Port: 445 TCP Blocked	2020-01-07 13:23:48

相同子网IP讨论:

IP	类型	评论内容	时间
123.16.134.157	attack	2020-04-05 14:25:20 plain_virtual_exim authenticator failed for ([127.0.0.1]) [123.16.134.157]: 535 Incorrect authentication data ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.16.134.157	2020-04-06 00:59:05
123.16.134.192	attackspam	Honeypot attack, port: 445, PTR: static.vnpt.vn.	2020-03-26 03:28:00
123.16.134.44	attackbotsspam	Unauthorized connection attempt from IP address 123.16.134.44 on Port 445(SMB)	2020-01-03 18:07:16

类型

评论内容

时间

123.16.134.157

attack

2020-04-05 14:25:20 plain_virtual_exim authenticator failed for ([127.0.0.1]) [123.16.134.157]: 535 Incorrect authentication data


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.16.134.157

2020-04-06 00:59:05

123.16.134.192

attackspam

Honeypot attack, port: 445, PTR: static.vnpt.vn.

2020-03-26 03:28:00

123.16.134.44

attackbotsspam

Unauthorized connection attempt from IP address 123.16.134.44 on Port 445(SMB)

2020-01-03 18:07:16

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.16.134.125
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 44930
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.16.134.125.			IN	A

;; AUTHORITY SECTION:
.			536	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020010602 1800 900 604800 86400

;; Query time: 102 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Jan 07 13:23:45 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

125.134.16.123.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
125.134.16.123.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
139.59.14.210	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-02-28 19:30:18
51.158.120.100	attackbotsspam	51.158.120.100 - - \[28/Feb/2020:08:57:05 +0100\] "POST /wp-login.php HTTP/1.0" 200 6509 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 51.158.120.100 - - \[28/Feb/2020:08:57:18 +0100\] "POST /wp-login.php HTTP/1.0" 200 6322 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0" 51.158.120.100 - - \[28/Feb/2020:08:57:21 +0100\] "POST /xmlrpc.php HTTP/1.0" 200 736 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"	2020-02-28 19:58:00
159.203.30.120	attackbots	Portscan or hack attempt detected by psad/fwsnort	2020-02-28 19:35:39
223.244.236.232	attack	(Feb 28) LEN=40 TTL=53 ID=16363 TCP DPT=8080 WINDOW=8474 SYN (Feb 28) LEN=40 TTL=53 ID=28712 TCP DPT=8080 WINDOW=42588 SYN (Feb 28) LEN=40 TTL=53 ID=34695 TCP DPT=8080 WINDOW=5162 SYN (Feb 27) LEN=40 TTL=53 ID=48330 TCP DPT=8080 WINDOW=8474 SYN (Feb 27) LEN=40 TTL=53 ID=51781 TCP DPT=8080 WINDOW=8474 SYN (Feb 27) LEN=40 TTL=53 ID=65467 TCP DPT=8080 WINDOW=42588 SYN (Feb 26) LEN=40 TTL=53 ID=39462 TCP DPT=8080 WINDOW=42588 SYN (Feb 26) LEN=40 TTL=53 ID=55856 TCP DPT=8080 WINDOW=8474 SYN (Feb 25) LEN=40 TTL=53 ID=52948 TCP DPT=8080 WINDOW=42588 SYN (Feb 25) LEN=40 TTL=53 ID=34173 TCP DPT=8080 WINDOW=42588 SYN	2020-02-28 19:37:57
14.240.65.255	attackbots	Telnet/23 MH Probe, Scan, BF, Hack -	2020-02-28 19:46:32
45.143.220.164	attack	[2020-02-28 06:45:44] NOTICE[1148] chan_sip.c: Registration from '"6001" ' failed for '45.143.220.164:5515' - Wrong password [2020-02-28 06:45:44] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-28T06:45:44.239-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6001",SessionID="0x7fd82c4d9f48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.220.164/5515",Challenge="7f26d9f1",ReceivedChallenge="7f26d9f1",ReceivedHash="2e086fae27d0fb766877a387195cd6b9" [2020-02-28 06:45:44] NOTICE[1148] chan_sip.c: Registration from '"6001" ' failed for '45.143.220.164:5515' - Wrong password [2020-02-28 06:45:44] SECURITY[1163] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-02-28T06:45:44.341-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="6001",SessionID="0x7fd82c538db8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP ...	2020-02-28 19:50:56
217.111.239.37	attackspambots	Feb 28 12:33:32 silence02 sshd[4468]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.111.239.37 Feb 28 12:33:34 silence02 sshd[4468]: Failed password for invalid user deb from 217.111.239.37 port 48466 ssh2 Feb 28 12:40:37 silence02 sshd[4821]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.111.239.37	2020-02-28 19:51:24
94.243.57.138	attackspambots	Honeypot attack, port: 445, PTR: subscriber-94-243-57-138.mts-chita.ru.	2020-02-28 19:55:10
31.211.122.18	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 19:59:50
58.69.147.92	attackspam	firewall-block, port(s): 445/tcp	2020-02-28 19:45:59
178.219.123.76	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 19:32:01
167.71.242.140	attackspam	Feb 27 20:49:10 web1 sshd\[25668\]: Invalid user info from 167.71.242.140 Feb 27 20:49:10 web1 sshd\[25668\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.242.140 Feb 27 20:49:12 web1 sshd\[25668\]: Failed password for invalid user info from 167.71.242.140 port 38256 ssh2 Feb 27 20:52:06 web1 sshd\[25936\]: Invalid user server from 167.71.242.140 Feb 27 20:52:06 web1 sshd\[25936\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.242.140	2020-02-28 19:58:24
31.132.143.21	attackbotsspam	Honeypot attack, port: 81, PTR: 31-132-143-21.bks-tv.ru.	2020-02-28 19:37:42
58.33.31.82	attack	"SSH brute force auth login attempt."	2020-02-28 19:52:03
64.227.16.31	attack	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-28 19:42:09

最近上报的IP列表

136.125.216.160	144.174.36.127	145.124.221.83	71.52.218.229
231.110.188.113	8.147.70.91	11.224.238.51	69.229.6.7
137.69.18.191	62.24.109.33	191.142.224.143	117.67.234.90
58.217.18.16	54.38.242.248	36.81.177.93	225.139.46.114
14.207.73.125	134.253.123.88	253.72.206.146	126.231.62.221