123.25.21.101 Threat Intelligence and Host Information

General

This page contains threat intelligence information for the IPv4 address 123.25.21.101 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 39/100

Host and Network Information

• Mitre ATT&CK IDs: T1110 - Brute Force

• Tags: brute force, Bruteforce, Brute-Force, ssh, SSH

• View other sources: Spamhaus VirusTotal

• Country: Vietnam
• Network: AS45899 vnpt corp
• Noticed: 4 times
• Protocols Attacked: ssh
• Countries Attacked: Australia
• Passive DNS Results: internal.flima.io chung.test.cokhach.mmj.vn ngoisao1234.test.cokhach.mmj.vn test.bdsnhapho.vn huyentrang.test.cokhach.mmj.vn lock.test.cokhach.mmj.vn ohshop.test.cokhach.mmj.vn video.test.cokhach.mmj.vn botbot.test.cokhach.mmj.vn qc.test.cokhach.mmj.vn vy.test.cokhach.mmj.vn hero.so2.test.cokhach.mmj.vn test.bdslienke.vn bot-api.test.reiviet.com ads-api.test.reiviet.com ccnn.test.cokhach.mmj.vn imalp2.test.cokhach.mmj.vn permission1.test.cokhach.mmj.vn tutao.test.cokhach.mmj.vn toy.test.cokhach.mmj.vn mayi2.test.cokhach.mmj.vn abcd.test.cokhach.mmj.vn chungcuxphones.com imatest.test.cokhach.mmj.vn ima.test.cokhach.mmj.vn freedomain123.test.cokhach.mmj.vn freefreefreefreefreefreefreefreefreefree.test.cokhach.mmj.vn freedomain.test.cokhach.mmj.vn imaimatest.test.cokhach.mmj.vn testdomainlanthunhatmothaibabonnamsaubay.test.cokhach.mmj.vn yen-test-lan1.test.cokhach.mmj.vn ngoisao123.test.cokhach.mmj.vn ngoisao.test.cokhach.mmj.vn chungcu1.test.cokhach.mmj.vn newdomain.test.cokhach.mmj.vn imalp4.test.cokhach.mmj.vn imalp3.test.cokhach.mmj.vn test.bdsdatnen.vn test.bdscondotel.vn test.bdscanhochungcu.vn imalp.mmj.vn chatbot-api.test.reiviet.com x1x1.test.reiviet.com hanhtest6.test.reiviet.com ga.test.reiviet.com habbb.test.reiviet.com twotemplate.test.reiviet.com thutu1208.test.reiviet.com landing1.test.reiviet.com jay.test.reiviet.com bit.test.reiviet.com test.cokhach.vn land123.test.reiviet.com chc2.test.reiviet.com nd1.test.reiviet.com land730.test.reiviet.com hanhtest2.test.reiviet.com mung4.test.reiviet.com sentosaqc.test.reiviet.com cc1.test.reiviet.com hanoi.test.reiviet.com quoc.test.reiviet.com code.test.reiviet.com thunam1308.test.reiviet.com testtropicalhalong.test.reiviet.com ssdfd.test.reiviet.com sh.test.reiviet.com quocquoc.test.reiviet.com longdvh.test.reiviet.com check.test.reiviet.com binh.test.reiviet.com 22.test.reiviet.com duongtd.test.reiviet.com land866.test.reiviet.com hanhtest7.test.reiviet.com hanhtest5.test.reiviet.com hanhtest4.test.reiviet.com hanhtest3.test.reiviet.com mung3.test.reiviet.com landing222.test.reiviet.com qrcode.test.reiviet.com land3.test.reiviet.com hanoimoi.test.reiviet.com chatbot.test.reiviet.com hello2.test.reiviet.com the.test.reiviet.com mailthusau.test.reiviet.com jscode.test.reiviet.com hello1.test.reiviet.com hello.test.reiviet.com zai.test.reiviet.com x1x12.test.reiviet.com vinhome.test.reiviet.com type.test.reiviet.com today82020xxx.test.reiviet.com thutuapi.test.reiviet.com testland729.test.reiviet.com sunshineee.test.reiviet.com newlayout.test.reiviet.com luan123.test.reiviet.com lp1.test.reiviet.com land1223.test.reiviet.com landing2.test.reiviet.com land1.test.reiviet.com land.test.reiviet.com imperia.test.reiviet.com ddd.test.reiviet.com datnenhoalac23.test.reiviet.com ctaleft.test.reiviet.com condotel.test.reiviet.com codotel.test.reiviet.com chungcu1.test.reiviet.com buonlamchiemoi.test.reiviet.com bt2.test.reiviet.com bea.test.reiviet.com asdcwadvdfgrd.test.reiviet.com nd2.test.reiviet.com dn1.test.reiviet.com chungcu723.test.reiviet.com hay.test.reiviet.com lp04092.test.reiviet.com landingpage.test.reiviet.com db.test.reiviet.com analytics-api.test.reiviet.com socket.test.reiviet.com builder.test.reiviet.com tracking.test.reiviet.com upload-api.test.reiviet.com api.test.reiviet.com dashboard.test.reiviet.com nhap.test.reiviet.com mayi.test.reiviet.com hanoi19.test.reiviet.com taaaaaaa.test.reiviet.com hl1.test.reiviet.com chc1.test.reiviet.com hanoi27.test.reiviet.com vinhome278.test.reiviet.com hanoihomnay.test.reiviet.com condotelfbb.test.reiviet.com land11.test.reiviet.com thunghiem.test.reiviet.com sunshhhine.test.reiviet.com sakanaop.test.reiviet.com hanhtest1.test.reiviet.com condotelfb.test.reiviet.com noithat.test.reiviet.com longdoan123.test.reiviet.com analy3.test.reiviet.com ana2.test.reiviet.com abc1.test.reiviet.com abc.test.reiviet.com sa.test.reiviet.com saka.test.reiviet.com analytic.test.reiviet.com terra.test.reiviet.com mai.test.reiviet.com land729.test.reiviet.com lp200820.test.reiviet.com landing22.test.reiviet.com shophouse22.test.reiviet.com qq.test.reiviet.com chuan.test.reiviet.com shophouse11.test.reiviet.com today82020.test.reiviet.com chungcu2.test.reiviet.com button.test.reiviet.com ssdfd22.test.reiviet.com longdoan.test.reiviet.com hl.test.reiviet.com publish-api.test.reiviet.com mattroi4.test.reiviet.com next.test.reiviet.com cdt.test.reiviet.com news.test.reiviet.com twotemplate22.test.reiviet.com testpopup.test.reiviet.com shophouse1.test.reiviet.com checkpopup.test.reiviet.com component.test.reiviet.com test34.test.reiviet.com huonggggg.test.reiviet.com testss.test.reiviet.com ctaright.test.reiviet.com vankhe237.test.reiviet.com condo.test.reiviet.com tess.test.reiviet.com theterraanhung.test.reiviet.com uh.test.reiviet.com tetsts233.test.reiviet.com villatest22.test.reiviet.com cc2.test.reiviet.com x1.test.reiviet.com chung.test.reiviet.com nghi.test.reiviet.com popup.test.reiviet.com ascascss.test.reiviet.com ccmau.test.reiviet.com ecolife26056.test.reiviet.com hehe001.test.reiviet.com hahi.test.reiviet.com dnhl.test.reiviet.com shunshine1506.test.reiviet.com ciputra.test.reiviet.com chatbot1.test.reiviet.com mattroi3.test.reiviet.com

Open Ports Detected

443 80

CVEs Detected

CVE-2021-23017 CVE-2021-3618 CVE-2023-44487

Map

Whois Information

• inetnum: 123.16.0.0 - 123.31.255.255
• netname: VNPT-VN
• descr: Vietnam Posts and Telecommunications Group
• descr: No 57, Huynh Thuc Khang Street, Lang Ha ward, Dong Da district, Ha Noi City
• country: VN
• admin-c: PTH13-AP
• tech-c: PTH13-AP
• status: ALLOCATED PORTABLE
• mnt-by: MAINT-VN-VNNIC
• mnt-lower: MAINT-VN-VNPT
• mnt-routes: MAINT-VN-VNPT
• last-modified: 2018-01-25T03:55:17Z
• mnt-irt: IRT-VNNIC-AP
• irt: IRT-VNNIC-AP
• address: Ha Noi, VietNam
• phone: +84-24-35564944
• fax-no: +84-24-37821462
• e-mail: [email protected]
• abuse-mailbox: [email protected]
• admin-c: NTTT1-AP
• tech-c: NTTT1-AP
• mnt-by: MAINT-VN-VNNIC
• last-modified: 2017-11-08T09:40:06Z
• person: Pham Tien Huy
• address: VNPT-VN
• country: VN
• phone: +84-24-37741604
• e-mail: [email protected]
• nic-hdl: PTH13-AP
• mnt-by: MAINT-VN-VNPT
• last-modified: 2017-11-19T07:06:20Z
• route: 123.25.0.0/19
• descr: VietNam Post and Telecom Corporation (VNPT)
• descr: VNPT-AS-AP
• country: VN
• origin: AS45899
• notify: [email protected]
• mnt-by: MAINT-VN-VNPT
• last-modified: 2010-08-10T08:20:05Z

Links to attack logs

digitaloceansingapore-ssh-bruteforce-ip-list-2024-03-10 ** vultrparis-ssh-bruteforce-ip-list-2024-03-24