114.234.216.221

基本信息:

城市(city): Xuzhou

省份(region): Jiangsu

国家(country): China

运营商(isp): ChinaNet Jiangsu Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-11-05 16:37:18 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[114.234.216.221]:2216 I=[192.147.25.65]:25 input="QUIT " 2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address 2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed ...	2019-11-06 07:45:50

类型

评论内容

时间

attackspam

2019-11-05 16:37:18 SMTP protocol synchronization error (input sent without waiting for greeting): rejected connection from H=[114.234.216.221]:2216 I=[192.147.25.65]:25 input="QUIT
"
2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 sender verify fail for : Unrouteable address
2019-11-05 16:37:30 H=(hxybgu.edu) [114.234.216.221]:2476 I=[192.147.25.65]:25 F= rejected RCPT : Sender verify failed
...

2019-11-06 07:45:50

相同子网IP讨论:

IP	类型	评论内容	时间
114.234.216.187	attackspambots	Feb 25 00:20:11 grey postfix/smtpd\[28391\]: NOQUEUE: reject: RCPT from unknown\[114.234.216.187\]: 554 5.7.1 Service unavailable\; Client host \[114.234.216.187\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.234.216.187\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-25 13:23:53
114.234.216.135	attackspam	[Aegis] @ 2019-07-20 12:37:09 0100 -> Sendmail rejected message.	2019-07-21 00:21:12

类型

评论内容

时间

114.234.216.187

attackspambots

Feb 25 00:20:11 grey postfix/smtpd\[28391\]: NOQUEUE: reject: RCPT from unknown\[114.234.216.187\]: 554 5.7.1 Service unavailable\; Client host \[114.234.216.187\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[114.234.216.187\]\; from=\ to=\ proto=ESMTP helo=\
...

2020-02-25 13:23:53

114.234.216.135

attackspam

[Aegis] @ 2019-07-20 12:37:09  0100 -> Sendmail rejected message.

2019-07-21 00:21:12

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 114.234.216.221
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 30986
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;114.234.216.221.		IN	A

;; AUTHORITY SECTION:
.			533	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019110501 1800 900 604800 86400

;; Query time: 112 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Nov 06 07:45:46 CST 2019
;; MSG SIZE  rcvd: 119

HOST信息:

221.216.234.114.in-addr.arpa domain name pointer 221.216.234.114.broad.xz.js.dynamic.163data.com.cn.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
221.216.234.114.in-addr.arpa	name = 221.216.234.114.broad.xz.js.dynamic.163data.com.cn.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
125.161.138.188	attackbotsspam	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 09:04:06,699 INFO [shellcode_manager] (125.161.138.188) no match, writing hexdump (4d0d6cea53e8cad65547464990b8562c :2116803) - MS17010 (EternalBlue)	2019-07-04 19:56:54
177.130.63.246	attackspambots	Absender hat Spam-Falle ausgel?st	2019-07-04 20:23:48
92.252.241.11	attackbots	Absender hat Spam-Falle ausgel?st	2019-07-04 20:34:58
195.210.172.42	attack	Absender hat Spam-Falle ausgel?st	2019-07-04 20:17:58
39.36.27.219	attackbots	2019-07-04 07:08:48 H=([39.36.27.219]) [39.36.27.219]:4575 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=39.36.27.219) 2019-07-04 07:08:49 unexpected disconnection while reading SMTP command from ([39.36.27.219]) [39.36.27.219]:4575 I=[10.100.18.20]:25 (error: Connection reset by peer) 2019-07-04 07:46:59 H=([39.36.27.219]) [39.36.27.219]:33137 I=[10.100.18.20]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=39.36.27.219) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=39.36.27.219	2019-07-04 20:05:19
5.196.124.125	attack	TCP src-port=59468 dst-port=25 dnsbl-sorbs abuseat-org barracuda (515)	2019-07-04 19:52:44
212.156.86.130	attackbots	Absender hat Spam-Falle ausgel?st	2019-07-04 20:15:15
113.23.31.249	attackbotsspam	2019-07-04 06:08:18 H=([113.23.31.249]) [113.23.31.249]:13839 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=113.23.31.249) 2019-07-04 06:08:20 unexpected disconnection while reading SMTP command from ([113.23.31.249]) [113.23.31.249]:13839 I=[10.100.18.23]:25 (error: Connection reset by peer) 2019-07-04 07:47:17 H=([113.23.31.249]) [113.23.31.249]:22271 I=[10.100.18.23]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=113.23.31.249) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=113.23.31.249	2019-07-04 20:07:30
121.136.156.51	attack	Multiport scan : 9 ports scanned 31089 31090 31093 31094 31096 31098 31099 33194 33199	2019-07-04 19:48:39
178.34.146.222	attackbots	Absender hat Spam-Falle ausgel?st	2019-07-04 20:22:40
103.95.97.178	attackspambots	Absender hat Spam-Falle ausgel?st	2019-07-04 20:33:02
158.69.23.53	attack	Jul 4 14:01:09 vps647732 sshd[28770]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.23.53 Jul 4 14:01:12 vps647732 sshd[28770]: Failed password for invalid user teamspeak3 from 158.69.23.53 port 55586 ssh2 ...	2019-07-04 20:12:15
177.107.50.18	attackspam	Absender hat Spam-Falle ausgel?st	2019-07-04 20:24:51
181.41.248.201	attackspambots	Jul 4 07:46:45 tamoto postfix/smtpd[11283]: connect from unknown[181.41.248.201] Jul 4 07:46:49 tamoto postfix/smtpd[11283]: warning: unknown[181.41.248.201]: SASL CRAM-MD5 authentication failed: authentication failure Jul 4 07:46:49 tamoto postfix/smtpd[11283]: warning: unknown[181.41.248.201]: SASL PLAIN authentication failed: authentication failure Jul 4 07:46:51 tamoto postfix/smtpd[11283]: warning: unknown[181.41.248.201]: SASL LOGIN authentication failed: authentication failure Jul 4 07:46:52 tamoto postfix/smtpd[11283]: disconnect from unknown[181.41.248.201] ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.41.248.201	2019-07-04 19:54:13
37.150.0.172	attackbots	2019-07-04 07:34:43 H=(37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50198 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=37.150.0.172) 2019-07-04 07:34:44 unexpected disconnection while reading SMTP command from (37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50198 I=[10.100.18.22]:25 (error: Connection reset by peer) 2019-07-04 07:48:45 H=(37.150.0.172.megaline.telecom.kz) [37.150.0.172]:50267 I=[10.100.18.22]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=37.150.0.172) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=37.150.0.172	2019-07-04 20:08:09

最近上报的IP列表

113.87.162.109	79.107.90.220	2607:fea8:60a0:392:5816:c451:e30b:428	89.163.242.228
162.158.255.226	79.79.57.190	5.139.94.178	134.73.51.118
104.238.37.147	167.99.232.18	24.161.6.50	177.189.73.81
190.164.77.161	190.100.219.67	23.95.25.76	178.156.202.128
189.151.227.175	187.65.248.198	200.166.197.34	93.120.130.33