116.21.1.8 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): ChinaNet Guangdong Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 116.21.1.8 to port 23 [J]	2020-02-29 18:34:29

相同子网IP讨论:

IP	类型	评论内容	时间
116.21.124.109	attackspambots	Port Scan ...	2020-09-17 01:14:41
116.21.124.109	attack	Port Scan ...	2020-09-16 17:30:36
116.21.136.38	attackspambots	Fail2Ban Ban Triggered	2020-08-21 17:15:59
116.21.128.188	attackbots	Too many connections or unauthorized access detected from Arctic banned ip	2020-08-03 07:18:31
116.21.172.193	attack	Unauthorized connection attempt detected from IP address 116.21.172.193 to port 23	2020-05-30 01:23:12
116.21.146.5	attackspambots	Automatic report - Port Scan Attack	2020-05-25 01:43:49
116.21.125.72	attackspam	Unauthorized connection attempt detected from IP address 116.21.125.72 to port 8089 [T]	2020-04-01 05:20:10
116.21.180.172	attackbotsspam	Feb 5 18:50:32 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:50:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\> Feb 5 18:50:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:33 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=116.21.180.17 ...	2020-02-06 03:33:31
116.21.175.240	attackspam	Sep 17 17:09:43 mxgate1 postfix/postscreen[20426]: CONNECT from [116.21.175.240]:43322 to [176.31.12.44]:25 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20427]: addr 116.21.175.240 listed by domain cbl.abuseat.org as 127.0.0.2 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.11 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20430]: addr 116.21.175.240 listed by domain zen.spamhaus.org as 127.0.0.4 Sep 17 17:09:43 mxgate1 postfix/dnsblog[20428]: addr 116.21.175.240 listed by domain bl.spamcop.net as 127.0.0.2 Sep 17 17:09:49 mxgate1 postfix/postscreen[20426]: DNSBL rank 4 for [116.21.175.240]:43322 Sep x@x Sep 17 17:09:50 mxgate1 postfix/postscreen[20426]: DISCONNECT [116.21.175.240]:43322 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=116.21.175.240	2019-09-17 23:25:48
116.21.127.96	attackbotsspam	port 23 attempt blocked	2019-09-14 23:07:41
116.21.132.6	attackbots	Sep 2 12:01:22 wp sshd[26875]: Invalid user gpq from 116.21.132.6 Sep 2 12:01:22 wp sshd[26875]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:01:25 wp sshd[26875]: Failed password for invalid user gpq from 116.21.132.6 port 11204 ssh2 Sep 2 12:01:25 wp sshd[26875]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:03:20 wp sshd[26891]: Invalid user stas from 116.21.132.6 Sep 2 12:03:20 wp sshd[26891]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.132.6 Sep 2 12:03:22 wp sshd[26891]: Failed password for invalid user stas from 116.21.132.6 port 10720 ssh2 Sep 2 12:03:22 wp sshd[26891]: Received disconnect from 116.21.132.6: 11: Bye Bye [preauth] Sep 2 12:05:17 wp sshd[26914]: Invalid user admin from 116.21.132.6 Sep 2 12:05:17 wp sshd[26914]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost........ -------------------------------	2019-09-03 15:30:19
116.21.133.180	attackbots	Aug 31 14:46:17 plex sshd[16050]: Invalid user nbsuser from 116.21.133.180 port 32038	2019-08-31 21:07:43
116.21.133.180	attackspambots	Aug 30 17:54:21 fv15 sshd[30006]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 17:54:23 fv15 sshd[30006]: Failed password for r.r from 116.21.133.180 port 33154 ssh2 Aug 30 17:54:23 fv15 sshd[30006]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:18:06 fv15 sshd[26471]: Failed password for invalid user ftpuser from 116.21.133.180 port 32916 ssh2 Aug 30 18:18:06 fv15 sshd[26471]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:24:32 fv15 sshd[9809]: Failed password for invalid user dekahostname from 116.21.133.180 port 30796 ssh2 Aug 30 18:24:32 fv15 sshd[9809]: Received disconnect from 116.21.133.180: 11: Bye Bye [preauth] Aug 30 18:30:58 fv15 sshd[24495]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.21.133.180 user=r.r Aug 30 18:31:00 fv15 sshd[24495]: Failed password for r.r from 116.21.133.180 po........ -------------------------------	2019-08-31 06:24:53
116.21.127.110	attackspam	Telnet Server BruteForce Attack	2019-07-31 22:57:00

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.21.1.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43252
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.21.1.8.			IN	A

;; AUTHORITY SECTION:
.			446	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020022900 1800 900 604800 86400

;; Query time: 89 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 29 18:34:22 CST 2020
;; MSG SIZE  rcvd: 114

HOST信息:

Host 8.1.21.116.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 8.1.21.116.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
23.102.166.114	attackbots	xmlrpc attack	2019-09-15 04:10:53
68.183.36.63	attack	IP: 68.183.36.63 ASN: AS14061 DigitalOcean LLC Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 14/09/2019 6:20:50 PM UTC	2019-09-15 04:39:59
178.34.190.39	attackbotsspam	Sep 14 21:25:30 OPSO sshd\[29727\]: Invalid user test3 from 178.34.190.39 port 50154 Sep 14 21:25:30 OPSO sshd\[29727\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.34.190.39 Sep 14 21:25:32 OPSO sshd\[29727\]: Failed password for invalid user test3 from 178.34.190.39 port 50154 ssh2 Sep 14 21:29:50 OPSO sshd\[30450\]: Invalid user c from 178.34.190.39 port 34640 Sep 14 21:29:50 OPSO sshd\[30450\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.34.190.39	2019-09-15 04:15:38
61.227.185.22	attack	Honeypot attack, port: 23, PTR: 61-227-185-22.dynamic-ip.hinet.net.	2019-09-15 04:10:02
181.65.125.133	attackspambots	IP: 181.65.125.133 ASN: AS6147 Telefonica del Peru S.A.A. Port: Simple Mail Transfer 25 Found in one or more Blacklists Date: 14/09/2019 6:20:47 PM UTC	2019-09-15 04:43:50
139.59.26.27	attack	Sep 14 22:21:09 markkoudstaal sshd[12597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.26.27 Sep 14 22:21:12 markkoudstaal sshd[12597]: Failed password for invalid user cool from 139.59.26.27 port 46314 ssh2 Sep 14 22:25:27 markkoudstaal sshd[13010]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.26.27	2019-09-15 04:35:40
103.115.227.2	attackspam	Sep 14 20:06:08 web8 sshd\[14787\]: Invalid user !QAZ2wsx from 103.115.227.2 Sep 14 20:06:08 web8 sshd\[14787\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.227.2 Sep 14 20:06:09 web8 sshd\[14787\]: Failed password for invalid user !QAZ2wsx from 103.115.227.2 port 53258 ssh2 Sep 14 20:10:40 web8 sshd\[17107\]: Invalid user c123 from 103.115.227.2 Sep 14 20:10:40 web8 sshd\[17107\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.115.227.2	2019-09-15 04:12:04
206.189.233.154	attackbots	Sep 14 10:08:37 aiointranet sshd\[27160\]: Invalid user av from 206.189.233.154 Sep 14 10:08:37 aiointranet sshd\[27160\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.233.154 Sep 14 10:08:40 aiointranet sshd\[27160\]: Failed password for invalid user av from 206.189.233.154 port 33795 ssh2 Sep 14 10:12:13 aiointranet sshd\[27507\]: Invalid user bronic from 206.189.233.154 Sep 14 10:12:13 aiointranet sshd\[27507\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.233.154	2019-09-15 04:25:53
68.183.218.185	attack	Sep 14 10:20:18 friendsofhawaii sshd\[17047\]: Invalid user frank from 68.183.218.185 Sep 14 10:20:18 friendsofhawaii sshd\[17047\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.218.185 Sep 14 10:20:20 friendsofhawaii sshd\[17047\]: Failed password for invalid user frank from 68.183.218.185 port 59160 ssh2 Sep 14 10:24:32 friendsofhawaii sshd\[17433\]: Invalid user viorel from 68.183.218.185 Sep 14 10:24:32 friendsofhawaii sshd\[17433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=68.183.218.185	2019-09-15 04:29:18
138.68.18.232	attackspam	Sep 14 21:43:57 vps647732 sshd[2028]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.18.232 Sep 14 21:43:58 vps647732 sshd[2028]: Failed password for invalid user libuuid from 138.68.18.232 port 51546 ssh2 ...	2019-09-15 04:02:51
119.172.107.113	attack	" "	2019-09-15 04:24:37
58.47.177.158	attackbotsspam	F2B jail: sshd. Time: 2019-09-14 22:25:03, Reported by: VKReport	2019-09-15 04:41:29
95.88.108.58	attackspam	Sep 14 20:30:15 meumeu sshd[9711]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=95.88.108.58 Sep 14 20:30:17 meumeu sshd[9711]: Failed password for invalid user admin from 95.88.108.58 port 47348 ssh2 Sep 14 20:30:22 meumeu sshd[9712]: Failed password for root from 95.88.108.58 port 47356 ssh2 ...	2019-09-15 04:07:16
198.108.66.83	attackbotsspam	firewall-block, port(s): 88/tcp	2019-09-15 04:39:19
54.38.33.178	attackbots	Sep 14 22:18:18 SilenceServices sshd[10198]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.33.178 Sep 14 22:18:19 SilenceServices sshd[10198]: Failed password for invalid user mia from 54.38.33.178 port 57396 ssh2 Sep 14 22:22:14 SilenceServices sshd[11680]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.38.33.178	2019-09-15 04:37:29

最近上报的IP列表

112.234.72.203	123.124.79.147	221.229.196.61	115.216.58.155
180.241.46.77	112.218.31.82	90.73.33.137	112.197.230.60
186.43.86.229	141.36.222.212	122.170.47.218	35.247.179.106
107.170.168.63	64.225.49.220	165.22.252.73	178.128.123.200
162.251.140.142	115.133.203.146	134.126.166.221	185.242.4.206

基本信息:

用户上报:

相同子网IP讨论:

WHOIS信息:

DIG信息:

HOST信息:

NSLOOKUP信息:

相关IP信息:

最新评论:

最近上报的IP列表