212.112.113.27

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Kyrgyzstan

运营商(isp): AKNET Ltd.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Fixed Line ISP

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	2019-08-27T05:21:50.664170 X postfix/smtpd[35051]: NOQUEUE: reject: RCPT from unknown[212.112.113.27]: 554 5.7.1 Service unavailable; Client host [212.112.113.27] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?212.112.113.27; from= to= proto=ESMTP helo=	2019-08-27 12:33:38

类型

评论内容

时间

attackspam

2019-08-27T05:21:50.664170 X postfix/smtpd[35051]: NOQUEUE: reject: RCPT from unknown[212.112.113.27]: 554 5.7.1 Service unavailable; Client host [212.112.113.27] blocked using bl.spamcop.net; Blocked - see https://www.spamcop.net/bl.shtml?212.112.113.27; from= to= proto=ESMTP helo=

2019-08-27 12:33:38

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 212.112.113.27
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 23770
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;212.112.113.27.			IN	A

;; AUTHORITY SECTION:
.			3600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019082601 1800 900 604800 86400

;; Query time: 4 msec
;; SERVER: 67.207.67.2#53(67.207.67.2)
;; WHEN: Tue Aug 27 12:33:33 CST 2019
;; MSG SIZE  rcvd: 118

HOST信息:

27.113.112.212.in-addr.arpa domain name pointer kaf27.kaf-i.kg.

NSLOOKUP信息:

Server:		67.207.67.2
Address:	67.207.67.2#53

Non-authoritative answer:
27.113.112.212.in-addr.arpa	name = kaf27.kaf-i.kg.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
188.166.251.87	attack	2020-10-04 14:51:08 wonderland sshd[10250]: Disconnected from invalid user root 188.166.251.87 port 48462 [preauth]	2020-10-04 21:53:49
112.85.42.81	attack	Oct 4 14:36:12 mavik sshd[7338]: Failed password for root from 112.85.42.81 port 2194 ssh2 Oct 4 14:36:16 mavik sshd[7338]: Failed password for root from 112.85.42.81 port 2194 ssh2 Oct 4 14:36:19 mavik sshd[7338]: Failed password for root from 112.85.42.81 port 2194 ssh2 Oct 4 14:36:23 mavik sshd[7338]: Failed password for root from 112.85.42.81 port 2194 ssh2 Oct 4 14:36:27 mavik sshd[7338]: Failed password for root from 112.85.42.81 port 2194 ssh2 ...	2020-10-04 21:41:31
85.209.0.99	attackbotsspam	TCP (SYN) 85.209.0.99:54252 -> port 3128, len 60	2020-10-04 21:47:35
80.82.77.227	attackspambots	"Found User-Agent associated with security scanner - Matched Data: zgrab found within REQUEST_HEADERS:User-Agent: mozilla/5.0 zgrab/0.x"	2020-10-04 21:37:41
118.97.38.170	attackspambots	Port probing on unauthorized port 8080	2020-10-04 21:44:46
40.69.101.92	attack	Oct 3 22:12:31 web01.agentur-b-2.de postfix/smtpd[1067123]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:14:31 web01.agentur-b-2.de postfix/smtpd[1067123]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:17:17 web01.agentur-b-2.de postfix/smtpd[1068527]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo= Oct 3 22:18:49 web01.agentur-b-2.de postfix/smtpd[1068527]: NOQUEUE: reject: RCPT from unknown[40.69.101.92]: 450 4.7.1 : Helo command rejected: Host not found; from=<> to= proto=ESMTP helo=	2020-10-04 21:36:27
51.91.99.233	attackspam	51.91.99.233 - - [04/Oct/2020:14:22:50 +0100] "POST /wp-login.php HTTP/1.1" 200 2861 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.91.99.233 - - [04/Oct/2020:14:22:51 +0100] "POST /wp-login.php HTTP/1.1" 200 2830 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" 51.91.99.233 - - [04/Oct/2020:14:22:51 +0100] "POST /xmlrpc.php HTTP/1.1" 403 219 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0" ...	2020-10-04 21:38:01
139.59.212.248	attackspambots	Oct 4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:04:42 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Oct 4 06:08:26 web01.agentur-b-2.de postfix/smtpd[1400041]: lost connection after AUTH from unknown[139.59.212.248] Oct 4 06:09:15 web01.agentur-b-2.de postfix/smtpd[1400041]: warning: unknown[139.59.212.248]: SASL LOGIN authentication failed: UGFzc3dvcmQ6	2020-10-04 21:26:15
222.223.160.18	attack	TCP (SYN) 222.223.160.18:2757 -> port 1433, len 44	2020-10-04 21:59:02
138.36.200.45	attackbotsspam	Oct 3 22:05:01 mail.srvfarm.net postfix/smtpd[660370]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:05:02 mail.srvfarm.net postfix/smtpd[660370]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:07:26 mail.srvfarm.net postfix/smtpd[656138]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed: Oct 3 22:07:27 mail.srvfarm.net postfix/smtpd[656138]: lost connection after AUTH from unknown[138.36.200.45] Oct 3 22:09:38 mail.srvfarm.net postfix/smtps/smtpd[658711]: warning: unknown[138.36.200.45]: SASL PLAIN authentication failed:	2020-10-04 21:27:01
181.174.128.64	attackspambots	Oct 3 22:17:49 mail.srvfarm.net postfix/smtpd[661692]: warning: unknown[181.174.128.64]: SASL PLAIN authentication failed: Oct 3 22:17:50 mail.srvfarm.net postfix/smtpd[661692]: lost connection after AUTH from unknown[181.174.128.64] Oct 3 22:22:54 mail.srvfarm.net postfix/smtps/smtpd[662244]: warning: unknown[181.174.128.64]: SASL PLAIN authentication failed: Oct 3 22:22:54 mail.srvfarm.net postfix/smtps/smtpd[662244]: lost connection after AUTH from unknown[181.174.128.64] Oct 3 22:24:31 mail.srvfarm.net postfix/smtpd[661691]: warning: unknown[181.174.128.64]: SASL PLAIN authentication failed:	2020-10-04 21:23:41
156.96.56.56	attackspam	2020-10-04 H=$BXXOXyXO$ \[156.96.56.56\] F=\<REMOVEDREMOVEDREMOVED_perl@REMOVED.de\> rejected RCPT \: relay not permitted 2020-10-04 dovecot_login authenticator failed for $6qYnLdL$ \[156.96.56.56\]: 535 Incorrect authentication data $set_id=REMOVEDREMOVEDREMOVED_perl$ 2020-10-04 dovecot_login authenticator failed for $srG4Gi82$ \[156.96.56.56\]: 535 Incorrect authentication data $set_id=REMOVEDREMOVEDREMOVED_perl$	2020-10-04 21:25:42
177.130.163.38	attackspambots	Oct 3 22:23:11 mail.srvfarm.net postfix/smtpd[661691]: warning: unknown[177.130.163.38]: SASL PLAIN authentication failed: Oct 3 22:23:11 mail.srvfarm.net postfix/smtpd[661691]: lost connection after AUTH from unknown[177.130.163.38] Oct 3 22:24:32 mail.srvfarm.net postfix/smtps/smtpd[659335]: warning: unknown[177.130.163.38]: SASL PLAIN authentication failed: Oct 3 22:24:32 mail.srvfarm.net postfix/smtps/smtpd[659335]: lost connection after AUTH from unknown[177.130.163.38] Oct 3 22:27:31 mail.srvfarm.net postfix/smtps/smtpd[662247]: warning: unknown[177.130.163.38]: SASL PLAIN authentication failed:	2020-10-04 21:24:20
193.169.254.109	attackbots	2020-10-04T04:37:39+02:00 exim[22421]: fixed_login authenticator failed for (217.116.47.120) [193.169.254.109]: 535 Incorrect authentication data (set_id=connie)	2020-10-04 21:48:58
192.241.134.101	attackspambots	$f2bV_matches	2020-10-04 21:57:45

最近上报的IP列表

98.33.21.17	186.97.57.81	60.250.52.221	65.146.196.3
134.73.76.147	165.231.133.170	51.83.234.51	82.211.9.104
43.163.134.215	226.245.143.96	45.94.235.98	165.22.3.32
195.231.7.217	193.34.145.252	191.32.46.143	103.38.215.11
77.81.104.124	198.126.47.203	189.79.253.5	104.172.235.175