123.16.255.244

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Viet Nam

运营商(isp): Vietnam Posts and Telecommunications Group

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Oct 2 04:51:39 f201 sshd[15822]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 04:51:41 f201 sshd[15822]: Connection closed by 123.16.255.244 [preauth] Oct 2 05:39:21 f201 sshd[28029]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT! Oct 2 05:39:22 f201 sshd[28029]: Connection closed by 123.16.255.244 [preauth] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=123.16.255.244	2019-10-02 16:07:07

类型

评论内容

时间

attack

Oct  2 04:51:39 f201 sshd[15822]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  2 04:51:41 f201 sshd[15822]: Connection closed by 123.16.255.244 [preauth]
Oct  2 05:39:21 f201 sshd[28029]: Address 123.16.255.244 maps to static.vnpt.vn, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Oct  2 05:39:22 f201 sshd[28029]: Connection closed by 123.16.255.244 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=123.16.255.244

2019-10-02 16:07:07

相同子网IP讨论:

IP	类型	评论内容	时间
123.16.255.140	attackbots	Attempt to attack host OS, exploiting network vulnerabilities, on 08-11-2019 14:35:22.	2019-11-09 03:12:23
123.16.255.96	attack	Unauthorised access (Oct 15) SRC=123.16.255.96 LEN=52 TTL=116 ID=29798 DF TCP DPT=445 WINDOW=8192 SYN	2019-10-15 12:24:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 123.16.255.244
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 54547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;123.16.255.244.			IN	A

;; AUTHORITY SECTION:
.			511	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019100200 1800 900 604800 86400

;; Query time: 98 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Oct 02 16:06:51 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

244.255.16.123.in-addr.arpa domain name pointer static.vnpt.vn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
244.255.16.123.in-addr.arpa	name = static.vnpt.vn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
211.213.149.239	attackspambots	Brute-force attempt banned	2020-09-23 12:04:04
123.30.149.92	attackspambots	2020-09-22T00:51:52.539467morrigan.ad5gb.com sshd[2093287]: Failed password for invalid user alumni from 123.30.149.92 port 63654 ssh2	2020-09-23 12:30:00
195.204.16.82	attackspam	2020-09-23T02:08:42.296904randservbullet-proofcloud-66.localdomain sshd[13164]: Invalid user administrator from 195.204.16.82 port 43206 2020-09-23T02:08:42.301117randservbullet-proofcloud-66.localdomain sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=195.204.16.82 2020-09-23T02:08:42.296904randservbullet-proofcloud-66.localdomain sshd[13164]: Invalid user administrator from 195.204.16.82 port 43206 2020-09-23T02:08:44.280973randservbullet-proofcloud-66.localdomain sshd[13164]: Failed password for invalid user administrator from 195.204.16.82 port 43206 ssh2 ...	2020-09-23 12:04:21
118.98.72.91	attack	Sep 23 00:09:52 srv1 postfix/smtpd[18459]: warning: unknown[118.98.72.91]: SASL PLAIN authentication failed: authentication failure Sep 23 00:09:54 srv1 postfix/smtpd[18459]: warning: unknown[118.98.72.91]: SASL PLAIN authentication failed: authentication failure Sep 23 00:09:58 srv1 postfix/smtpd[18445]: warning: unknown[118.98.72.91]: SASL PLAIN authentication failed: authentication failure Sep 23 00:10:01 srv1 postfix/smtpd[18448]: warning: unknown[118.98.72.91]: SASL PLAIN authentication failed: authentication failure Sep 23 00:10:05 srv1 postfix/smtpd[18459]: warning: unknown[118.98.72.91]: SASL PLAIN authentication failed: authentication failure ...	2020-09-23 12:16:39
75.112.68.166	attackbots	21 attempts against mh-ssh on pcx	2020-09-23 12:15:53
52.172.38.185	attackspambots	Sep 22 20:52:43 r.ca sshd[27564]: Failed password for invalid user ftp1 from 52.172.38.185 port 53878 ssh2	2020-09-23 12:19:26
31.209.21.17	attack	Sep 23 06:09:09 vpn01 sshd[31232]: Failed password for root from 31.209.21.17 port 46244 ssh2 ...	2020-09-23 12:19:45
194.150.215.78	attackbotsspam	Sep 23 06:00:21 web01.agentur-b-2.de postfix/smtpd[1659745]: NOQUEUE: reject: RCPT from unknown[194.150.215.78]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 06:01:22 web01.agentur-b-2.de postfix/smtpd[1666341]: NOQUEUE: reject: RCPT from unknown[194.150.215.78]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 06:02:29 web01.agentur-b-2.de postfix/smtpd[1659745]: NOQUEUE: reject: RCPT from unknown[194.150.215.78]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Sep 23 06:03:29 web01.agentur-b-2.de postfix/smtpd[1666341]: NOQUEUE: reject: RCPT from unknown[194.150.215.78]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-09-23 12:22:11
180.76.151.90	attack	Brute-force attempt banned	2020-09-23 12:17:51
200.118.57.190	attack	2020-09-22T20:40:59.7658601495-001 sshd[4707]: Invalid user ashish from 200.118.57.190 port 49722 2020-09-22T20:41:01.9006781495-001 sshd[4707]: Failed password for invalid user ashish from 200.118.57.190 port 49722 ssh2 2020-09-22T20:43:38.2957181495-001 sshd[4893]: Invalid user main from 200.118.57.190 port 60168 2020-09-22T20:43:38.2987041495-001 sshd[4893]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.118.57.190 2020-09-22T20:43:38.2957181495-001 sshd[4893]: Invalid user main from 200.118.57.190 port 60168 2020-09-22T20:43:39.9236601495-001 sshd[4893]: Failed password for invalid user main from 200.118.57.190 port 60168 ssh2 ...	2020-09-23 12:14:37
112.173.239.113	attack	Listed on zen-spamhaus also abuseat.org / proto=6 . srcport=52560 . dstport=23 . (3093)	2020-09-23 12:11:55
15.228.49.89	attackspam	Web Spam	2020-09-23 12:05:43
203.124.49.64	attackbots	Sep 22 18:05:46 l02a sshd[23950]: Invalid user admin from 203.124.49.64 Sep 22 18:05:47 l02a sshd[23949]: Invalid user admin from 203.124.49.64	2020-09-23 12:06:20
77.120.172.196	attackbots	20/9/22@15:04:24: FAIL: Alarm-Network address from=77.120.172.196 ...	2020-09-23 08:58:48
190.143.125.12	attackspambots	Unauthorized connection attempt from IP address 190.143.125.12 on Port 445(SMB)	2020-09-23 09:01:04

最近上报的IP列表

36.153.23.177	8.9.36.31	179.235.240.189	177.27.5.133
35.160.87.31	139.85.200.197	205.140.109.235	215.20.220.137
48.44.54.157	39.224.6.253	132.251.253.138	189.1.92.236
39.131.159.47	216.0.138.177	154.204.60.127	165.22.174.186
144.138.46.229	164.146.115.207	142.232.213.253	112.199.177.106