171.12.180.21 - IPInfo

基本信息:

城市(city): unknown

省份(region): Henan

国家(country): China

运营商(isp): Henan Telecom Corporation

主机名(hostname): unknown

机构(organization): No.31,Jin-rong Street

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Jul 14 20:26:44 localhost postfix/smtpd\[11898\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 20:27:02 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 20:27:17 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 20:27:32 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Jul 14 20:27:47 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ...	2019-07-15 04:23:02

类型

评论内容

时间

attack

Jul 14 20:26:44 localhost postfix/smtpd\[11898\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 14 20:27:02 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 14 20:27:17 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 14 20:27:32 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jul 14 20:27:47 localhost postfix/smtpd\[11911\]: warning: unknown\[171.12.180.21\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

2019-07-15 04:23:02

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 171.12.180.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 43431
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;171.12.180.21.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019071400 1800 900 604800 86400

;; Query time: 2 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Mon Jul 15 04:22:55 CST 2019
;; MSG SIZE  rcvd: 117

HOST信息:

Host 21.180.12.171.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 67.207.67.2, trying next server
Server:		67.207.67.3
Address:	67.207.67.3#53

** server can't find 21.180.12.171.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
45.138.101.207	attackspambots	pinterest spam	2020-06-14 02:07:31
5.182.39.63	attackbots	Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-13T17:30:44Z and 2020-06-13T18:00:17Z	2020-06-14 02:24:40
222.128.6.194	attackspambots	Jun 13 15:25:41 server sshd[25150]: User smmsp from 222.128.6.194 not allowed because not listed in AllowUsers Jun 13 15:25:43 server sshd[25150]: Failed password for invalid user smmsp from 222.128.6.194 port 24338 ssh2 Jun 13 15:30:35 server sshd[28872]: Failed password for invalid user crisanto1 from 222.128.6.194 port 23962 ssh2	2020-06-14 02:18:41
176.37.60.16	attackbots	Jun 13 17:52:44 XXX sshd[64139]: Invalid user fa from 176.37.60.16 port 46933	2020-06-14 02:14:46
31.129.162.122	attackspam	TCP (SYN) 31.129.162.122:51577 -> port 23, len 44	2020-06-14 02:10:31
187.150.50.132	attack	$f2bV_matches	2020-06-14 01:57:24
139.59.66.101	attack	$f2bV_matches	2020-06-14 02:09:43
190.145.192.106	attackbotsspam	Auto Fail2Ban report, multiple SSH login attempts.	2020-06-14 02:03:06
222.186.30.76	attackbotsspam	2020-06-13T19:40:07.210186vps751288.ovh.net sshd\[31514\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root 2020-06-13T19:40:08.944659vps751288.ovh.net sshd\[31514\]: Failed password for root from 222.186.30.76 port 40404 ssh2 2020-06-13T19:40:10.514276vps751288.ovh.net sshd\[31514\]: Failed password for root from 222.186.30.76 port 40404 ssh2 2020-06-13T19:40:13.849470vps751288.ovh.net sshd\[31514\]: Failed password for root from 222.186.30.76 port 40404 ssh2 2020-06-13T19:40:16.273689vps751288.ovh.net sshd\[31516\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76 user=root	2020-06-14 01:42:39
139.199.59.31	attackspam	2020-06-13T12:17:39.164667abusebot.cloudsearch.cf sshd[9128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root 2020-06-13T12:17:41.091632abusebot.cloudsearch.cf sshd[9128]: Failed password for root from 139.199.59.31 port 25567 ssh2 2020-06-13T12:20:11.589356abusebot.cloudsearch.cf sshd[9317]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 user=root 2020-06-13T12:20:13.716941abusebot.cloudsearch.cf sshd[9317]: Failed password for root from 139.199.59.31 port 52073 ssh2 2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078 2020-06-13T12:22:46.905643abusebot.cloudsearch.cf sshd[9466]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.59.31 2020-06-13T12:22:46.899166abusebot.cloudsearch.cf sshd[9466]: Invalid user teampspeak3 from 139.199.59.31 port 22078 2020-06- ...	2020-06-14 02:11:39
133.167.123.176	attack	[Sat Jun 13 02:03:33 2020 GMT] "chamber of commerce" [], Subject: BANNED GOODS DUE TO COVID 19 PANDEMIC	2020-06-14 01:54:55
202.83.57.198	attackbotsspam	Port scan detected on ports: 8000[TCP], 8000[TCP], 8000[TCP]	2020-06-14 02:09:24
49.233.216.158	attackspambots	2020-06-13T16:35:56.041398mail.standpoint.com.ua sshd[10558]: Invalid user xqf from 49.233.216.158 port 35252 2020-06-13T16:35:56.046033mail.standpoint.com.ua sshd[10558]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.233.216.158 2020-06-13T16:35:56.041398mail.standpoint.com.ua sshd[10558]: Invalid user xqf from 49.233.216.158 port 35252 2020-06-13T16:35:58.123106mail.standpoint.com.ua sshd[10558]: Failed password for invalid user xqf from 49.233.216.158 port 35252 ssh2 2020-06-13T16:37:28.389125mail.standpoint.com.ua sshd[10761]: Invalid user ljr from 49.233.216.158 port 51882 ...	2020-06-14 02:04:55
222.186.173.154	attack	2020-06-13T20:48:29.291927lavrinenko.info sshd[20790]: Failed password for root from 222.186.173.154 port 50774 ssh2 2020-06-13T20:48:34.472760lavrinenko.info sshd[20790]: Failed password for root from 222.186.173.154 port 50774 ssh2 2020-06-13T20:48:38.829935lavrinenko.info sshd[20790]: Failed password for root from 222.186.173.154 port 50774 ssh2 2020-06-13T20:48:43.057100lavrinenko.info sshd[20790]: Failed password for root from 222.186.173.154 port 50774 ssh2 2020-06-13T20:48:43.460080lavrinenko.info sshd[20790]: error: maximum authentication attempts exceeded for root from 222.186.173.154 port 50774 ssh2 [preauth] ...	2020-06-14 01:50:19
218.92.0.171	attackspam	2020-06-13T17:15:42.418564shield sshd\[30428\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171 user=root 2020-06-13T17:15:44.366865shield sshd\[30428\]: Failed password for root from 218.92.0.171 port 23935 ssh2 2020-06-13T17:15:48.253530shield sshd\[30428\]: Failed password for root from 218.92.0.171 port 23935 ssh2 2020-06-13T17:15:51.063917shield sshd\[30428\]: Failed password for root from 218.92.0.171 port 23935 ssh2 2020-06-13T17:15:54.285689shield sshd\[30428\]: Failed password for root from 218.92.0.171 port 23935 ssh2	2020-06-14 01:46:48

最近上报的IP列表

225.145.210.223	58.18.77.185	234.19.187.42	50.191.58.106
95.214.189.6	226.85.116.142	102.18.236.50	185.92.165.234
233.254.15.76	85.194.49.149	184.82.98.218	134.232.43.180
17.128.167.22	187.177.245.99	62.10.72.66	47.171.130.144
173.102.118.125	78.142.49.169	221.235.165.86	220.60.13.158