123.27.254.228 Threat Intelligence and Host Information

Share on:

General

This page was generated as a result of this host being detected actively attacking or scanning another host. See below for information related to the host network, location, number of days noticed, protocols attacked and other information including reverse DNS and whois.

Host and Network Information

  • Tags: Malicious IP, amun, blacklist, botnet, conpot, cowrie, dionaea, elastichoney, glastopf, mirai, p0f, scan, smb, snort, suricata, tcp, wordpot
  • View other sources: Spamhaus VirusTotal

  • Country: Viet Nam
  • Network: AS45899 vnpt corp
  • Noticed: 22 times
  • Protcols Attacked: mssql
  • Passive DNS Results: dcevietnam.com haiants.direct.quickconnect.to nas-hap-01-2021.direct.quickconnect.to haiangroup.synology.me

Open Ports Detected

137 1723 21 4433 445 554

Map

Whois Information

  • inetnum: 123.16.0.0 - 123.31.255.255
  • netname: VNPT-VN
  • descr: Vietnam Posts and Telecommunications Group
  • descr: No 57, Huynh Thuc Khang Street, Lang Ha ward, Dong Da district, Ha Noi City
  • country: VN
  • admin-c: PTH13-AP
  • tech-c: PTH13-AP
  • status: ALLOCATED PORTABLE
  • mnt-by: MAINT-VN-VNNIC
  • mnt-lower: MAINT-VN-VNPT
  • mnt-routes: MAINT-VN-VNPT
  • last-modified: 2018-01-25T03:55:17Z
  • mnt-irt: IRT-VNNIC-AP
  • irt: IRT-VNNIC-AP
  • address: Ha Noi, VietNam
  • phone: +84-24-35564944
  • fax-no: +84-24-37821462
  • e-mail: [email protected]
  • abuse-mailbox: [email protected]
  • admin-c: NTTT1-AP
  • tech-c: NTTT1-AP
  • mnt-by: MAINT-VN-VNNIC
  • last-modified: 2017-11-08T09:40:06Z
  • person: Pham Tien Huy
  • address: VNPT-VN
  • country: VN
  • phone: +84-24-37741604
  • e-mail: [email protected]
  • nic-hdl: PTH13-AP
  • mnt-by: MAINT-VN-VNPT
  • last-modified: 2017-11-19T07:06:20Z
  • route: 123.27.224.0/19
  • descr: VietNam Post and Telecom Corporation (VNPT)
  • descr: VNPT-AS-AP
  • country: VN
  • origin: AS45899
  • notify: [email protected]
  • mnt-by: MAINT-VN-VNPT
  • last-modified: 2010-08-10T08:20:18Z

Links to attack logs

dolondon-mssql-bruteforce-ip-list-2021-11-25 dolondon-mssql-bruteforce-ip-list-2021-10-28 dolondon-mssql-bruteforce-ip-list-2021-11-08 dolondon-mssql-bruteforce-ip-list-2021-12-21 dolondon-mssql-bruteforce-ip-list-2021-12-22 dolondon-mssql-bruteforce-ip-list-2021-12-29 dolondon-mssql-bruteforce-ip-list-2021-11-13 dolondon-mssql-bruteforce-ip-list-2021-11-19 dolondon-mssql-bruteforce-ip-list-2021-12-27 dolondon-mssql-bruteforce-ip-list-2021-12-28 dolondon-mssql-bruteforce-ip-list-2021-11-22 dolondon-mssql-bruteforce-ip-list-2021-11-10 dolondon-mssql-bruteforce-ip-list-2021-12-31 dolondon-mssql-bruteforce-ip-list-2022-01-04 dolondon-mssql-bruteforce-ip-list-2021-10-27 dolondon-mssql-bruteforce-ip-list-2021-10-30 dolondon-mssql-bruteforce-ip-list-2021-11-01 dolondon-mssql-bruteforce-ip-list-2022-01-05 dolondon-mssql-bruteforce-ip-list-2021-10-26 dolondon-mssql-bruteforce-ip-list-2021-11-20