116.21.1.8 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 116.21.1.8 to port 23 [J]	2020-02-29 18:34:29

相同子网IP讨论:

IP	类型	评论内容	时间
116.21.124.109	attackspambots	Port Scan ...	2020-09-17 01:14:41
116.21.124.109	attack	Port Scan ...	2020-09-16 17:30:36
116.21.136.38	attackspambots	Fail2Ban Ban Triggered	2020-08-21 17:15:59
116.21.128.188	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-03 07:18:31
116.21.172.193	attack	Unauthorized connection attempt detected from IP address 116.21.172.193 to port 23	2020-05-30 01:23:12
116.21.146.5	attackspambots	Automatic report - Port Scan Attack	2020-05-25 01:43:49
116.21.125.72	attackspam	Unauthorized connection attempt detected from IP address 116.21.125.72 to port 8089 [T]	2020-04-01 05:20:10
116.21.180.172	attackbotsspam	Feb 5 18:50:32 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:50:41 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 9 secs$: user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\> Feb 5 18:50:56 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 13 secs$: user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:33 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 5 secs$: user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:42 journals dovecot: pop3-login: Aborted login $auth failed, 1 attempts in 8 secs$: user=\, method=PLAIN, rip=116.21.180.17 ...	2020-02-06 03:33:31
116.21.175.240	attackspam	Sep 17 17:09:43 mxgate1 postfix/postscreen[20426]: CONNECT from [116.21.175.240]:43322 to [176.31.12.44]:25 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20427]: addr 116.21.175.240 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20428]: addr 116.21.175.240 listed by domain bl.spamcop.net as 127.0.0.2 Sep 17 17:09:49 mxgate1 postfix/postscreen[20426]: DNSBL rank 4 for [116.21.175.240]:43322 Sep x@x Sep 17 17:09:50 mxgate1 postfix/postscreen[20426]: DISCONNECT [116.21.175.240]:43322 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.21.175.240	2019-09-17 23:25:48
116.21.127.96	attackbotsspam	port 23 attempt blocked	2019-09-14 23:07:41
116.21.132.6	attackbots	Sep 2 12:01:22 wp sshd[26875]: Invalid user gpq from 116.21.132.6 Sep 2 12:01:22 wp sshd[26875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:01:25 wp sshd[26875]: Failed password for invalid user gpq from 116.21.132.6 port 11204 ssh2 Sep 2 12:01:25 wp sshd[26875]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:03:20 wp sshd[26891]: Invalid user stas from 116.21.132.6 Sep 2 12:03:20 wp sshd[26891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:03:22 wp sshd[26891]: Failed password for invalid user stas from 116.21.132.6 port 10720 ssh2 Sep 2 12:03:22 wp sshd[26891]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:05:17 wp sshd[26914]: Invalid user admin from 116.21.132.6 Sep 2 12:05:17 wp sshd[26914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ -------------------------------	2019-09-03 15:30:19
116.21.133.180	attackbots	Aug 31 14:46:17 plex sshd[16050]: Invalid user nbsuser from 116.21.133.180 port 32038	2019-08-31 21:07:43
116.21.133.180	attackspambots	Aug 30 17:54:21 fv15 sshd[30006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 17:54:23 fv15 sshd[30006]: Failed password for r.r from 116.21.133.180 port 33154 ssh2 Aug 30 17:54:23 fv15 sshd[30006]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:18:06 fv15 sshd[26471]: Failed password for invalid user ftpuser from 116.21.133.180 port 32916 ssh2 Aug 30 18:18:06 fv15 sshd[26471]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:24:32 fv15 sshd[9809]: Failed password for invalid user dekahostname from 116.21.133.180 port 30796 ssh2 Aug 30 18:24:32 fv15 sshd[9809]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:30:58 fv15 sshd[24495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 18:31:00 fv15 sshd[24495]: Failed password for r.r from 116.21.133.180 po........ -------------------------------	2019-08-31 06:24:53
116.21.127.110	attackspam	Telnet Server BruteForce Attack	2019-07-31 22:57:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.21.1.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43252
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.21.1.8.			IN	A

;; AUTHORITY SECTION:
.			446	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022900 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 29 18:34:22 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 8.1.21.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.1.21.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
203.195.159.135	attackbotsspam	SSH bruteforce	2020-02-12 05:54:22
206.189.98.225	attackspambots	Feb 11 14:14:29 master sshd[14903]: Failed password for invalid user vxl from 206.189.98.225 port 39364 ssh2	2020-02-12 05:56:00
58.22.61.221	attackbotsspam	(sshd) Failed SSH login from 58.22.61.221 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Feb 11 13:53:56 elude sshd[3366]: Invalid user ddg from 58.22.61.221 port 50173 Feb 11 13:53:58 elude sshd[3366]: Failed password for invalid user ddg from 58.22.61.221 port 50173 ssh2 Feb 11 14:34:46 elude sshd[5884]: Invalid user pkq from 58.22.61.221 port 14994 Feb 11 14:34:48 elude sshd[5884]: Failed password for invalid user pkq from 58.22.61.221 port 14994 ssh2 Feb 11 14:39:32 elude sshd[6253]: Invalid user dyq from 58.22.61.221 port 24450	2020-02-12 05:49:20
113.162.128.134	attackspam	Brute-force general attack.	2020-02-12 05:27:46
54.37.69.251	attack	Feb 11 07:36:38 hpm sshd\[19408\]: Invalid user fdm from 54.37.69.251 Feb 11 07:36:38 hpm sshd\[19408\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=251.ip-54-37-69.eu Feb 11 07:36:40 hpm sshd\[19408\]: Failed password for invalid user fdm from 54.37.69.251 port 53790 ssh2 Feb 11 07:39:57 hpm sshd\[19951\]: Invalid user cyy from 54.37.69.251 Feb 11 07:39:57 hpm sshd\[19951\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=251.ip-54-37-69.eu	2020-02-12 06:02:16
37.113.176.22	attackspambots	WEB SPAM: Мои фото здесь	2020-02-12 05:50:27
46.101.149.19	attackbotsspam	Feb 11 11:33:09 plusreed sshd[31956]: Invalid user fca from 46.101.149.19 ...	2020-02-12 05:36:24
54.37.105.222	attackbots	ssh failed login	2020-02-12 05:49:35
110.167.168.10	attackspambots	1433/tcp 1433/tcp 1433/tcp... [2019-12-12/2020-02-11]4pkt,1pt.(tcp)	2020-02-12 05:24:46
113.180.106.26	attackbots	1581428369 - 02/11/2020 14:39:29 Host: 113.180.106.26/113.180.106.26 Port: 445 TCP Blocked	2020-02-12 05:32:48
59.115.228.93	attackspam	Port probing on unauthorized port 23	2020-02-12 05:43:40
189.112.228.153	attack	ssh brute force	2020-02-12 05:56:33
218.92.0.200	attackspam	$f2bV_matches \| Triggered by Fail2Ban at Vostok web server	2020-02-12 05:29:49
1.194.239.202	attackbots	Feb 11 10:50:11 web1 sshd\[24544\]: Invalid user com from 1.194.239.202 Feb 11 10:50:12 web1 sshd\[24544\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.239.202 Feb 11 10:50:14 web1 sshd\[24544\]: Failed password for invalid user com from 1.194.239.202 port 50563 ssh2 Feb 11 10:54:02 web1 sshd\[24938\]: Invalid user cicely1 from 1.194.239.202 Feb 11 10:54:02 web1 sshd\[24938\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.239.202	2020-02-12 05:26:56
60.248.79.18	attackbots	445/tcp 1433/tcp [2019-12-16/2020-02-11]2pkt	2020-02-12 05:37:34

最近上报的IP列表

112.234.72.203	123.124.79.147	221.229.196.61	115.216.58.155
180.241.46.77	112.218.31.82	90.73.33.137	112.197.230.60
186.43.86.229	141.36.222.212	122.170.47.218	35.247.179.106
107.170.168.63	64.225.49.220	165.22.252.73	178.128.123.200
162.251.140.142	115.133.203.146	134.126.166.221	185.242.4.206

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表