217.112.142.21

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): Hungary

运营商(isp): 23VNet Kft.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attackspam	Jun 18 11:08:20 web01.agentur-b-2.de postfix/smtpd[1118960]: NOQUEUE: reject: RCPT from unknown[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 11:11:18 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from snake.wokoro.com[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 11:11:32 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from unknown[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo= Jun 18 11:12:26 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from unknow	2020-06-19 03:31:50
attack	postfix (unknown user, SPF fail or relay access denied)	2020-01-13 07:41:12

类型

评论内容

时间

attackspam

Jun 18 11:08:20 web01.agentur-b-2.de postfix/smtpd[1118960]: NOQUEUE: reject: RCPT from unknown[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 11:11:18 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from snake.wokoro.com[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 11:11:32 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from unknown[217.112.142.21]: 450 4.7.1 : Helo command rejected: Host not found; from= to= proto=ESMTP helo=
Jun 18 11:12:26 web01.agentur-b-2.de postfix/smtpd[1129340]: NOQUEUE: reject: RCPT from unknow

2020-06-19 03:31:50

attack

postfix (unknown user, SPF fail or relay access denied)

2020-01-13 07:41:12

相同子网IP讨论:

IP	类型	评论内容	时间
217.112.142.211	attackbotsspam	E-Mail Spam (RBL) [REJECTED]	2020-10-02 03:09:40
217.112.142.211	attackspam	E-Mail Spam (RBL) [REJECTED]	2020-10-01 19:21:08
217.112.142.252	attack	Email Spam	2020-09-30 09:54:47
217.112.142.252	attackspambots	Email Spam	2020-09-30 02:47:26
217.112.142.252	attack	E-Mail Spam (RBL) [REJECTED]	2020-09-29 18:50:37
217.112.142.227	attackspambots	E-Mail Spam (RBL) [REJECTED]	2020-09-28 04:02:01
217.112.142.227	attack	E-Mail Spam (RBL) [REJECTED]	2020-09-27 20:19:23
217.112.142.231	attackbotsspam	E-Mail Spam (RBL) [REJECTED]	2020-09-27 03:54:08
217.112.142.231	attack	E-Mail Spam (RBL) [REJECTED]	2020-09-26 19:56:08
217.112.142.97	attack	2020-09-10 1kGRvY-0000PW-Fg H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 1kGleA-0002Z6-4n H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] F=\ rejected RCPT \: Mail not accepted. 217.112.142.97 is listed at a DNSBL.	2020-09-13 03:11:51
217.112.142.97	attackbotsspam	2020-09-10 1kGRvY-0000PW-Fg H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 1kGleA-0002Z6-4n H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] rejected REMOVED : REJECTED - You seem to be a spammer! 2020-09-11 H=righteous.yarkaci.com \(righteous.hrajplus.com\) \[217.112.142.97\] F=\ rejected RCPT \: Mail not accepted. 217.112.142.97 is listed at a DNSBL.	2020-09-12 19:17:51
217.112.142.68	attackbots	E-Mail Spam (RBL) [REJECTED]	2020-08-31 02:46:14
217.112.142.22	attackspam	E-Mail Spam (RBL) [REJECTED]	2020-08-29 12:58:28
217.112.142.153	attackspambots	Postfix attempt blocked due to public blacklist entry	2020-08-28 23:05:09
217.112.142.221	attackbotsspam	Postfix attempt blocked due to public blacklist entry	2020-08-28 04:58:23

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 217.112.142.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 36362
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;217.112.142.21.			IN	A

;; AUTHORITY SECTION:
.			569	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020011201 1800 900 604800 86400

;; Query time: 113 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 13 07:41:09 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

21.142.112.217.in-addr.arpa domain name pointer snake.wokoro.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.142.112.217.in-addr.arpa	name = snake.wokoro.com.

Authoritative answers can be found from:

IP	类型	评论内容	时间
192.241.237.17	attackspam	Brute force attack stopped by firewall	2020-10-09 06:22:57
134.175.217.161	attackbotsspam	$f2bV_matches	2020-10-09 06:29:20
196.190.116.76	attackspambots	Attempted connection to port 445.	2020-10-09 06:09:31
201.71.159.248	attackbots	Unauthorized connection attempt from IP address 201.71.159.248 on Port 445(SMB)	2020-10-09 06:36:09
31.142.132.63	attackspambots	Unauthorized connection attempt from IP address 31.142.132.63 on Port 445(SMB)	2020-10-09 06:30:51
182.71.180.130	attackspam	Unauthorized connection attempt from IP address 182.71.180.130 on Port 445(SMB)	2020-10-09 06:23:17
221.207.138.245	attackspambots	TCP (SYN) 221.207.138.245:41588 -> port 6381, len 44	2020-10-09 06:43:31
162.243.128.94	attack	TCP port : 631	2020-10-09 06:31:46
203.192.219.7	attack	Oct 8 23:09:57 ns382633 sshd\[22409\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.219.7 user=root Oct 8 23:09:58 ns382633 sshd\[22409\]: Failed password for root from 203.192.219.7 port 47456 ssh2 Oct 8 23:16:29 ns382633 sshd\[23192\]: Invalid user oscar from 203.192.219.7 port 56232 Oct 8 23:16:29 ns382633 sshd\[23192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.192.219.7 Oct 8 23:16:31 ns382633 sshd\[23192\]: Failed password for invalid user oscar from 203.192.219.7 port 56232 ssh2	2020-10-09 06:31:17
129.208.84.28	attack	Attempted connection to port 445.	2020-10-09 06:19:28
192.241.239.135	attackspam	Icarus honeypot on github	2020-10-09 06:26:07
192.241.218.199	attack	TCP (SYN) 192.241.218.199:48980 -> port 139, len 40	2020-10-09 06:18:57
95.170.203.138	attackspambots	Unauthorized connection attempt from IP address 95.170.203.138 on Port 445(SMB)	2020-10-09 06:11:42
188.131.137.239	attackbotsspam	$f2bV_matches	2020-10-09 06:28:22
186.91.172.247	attack	1602103853 - 10/07/2020 22:50:53 Host: 186.91.172.247/186.91.172.247 Port: 445 TCP Blocked	2020-10-09 06:36:58

最近上报的IP列表

206.189.40.187	100.147.84.5	157.41.150.58	34.92.20.114
114.34.238.61	45.77.172.67	202.59.163.83	122.160.31.101
205.185.124.242	5.178.87.186	2.56.8.205	91.222.236.102
193.107.3.251	208.113.200.55	119.108.76.212	139.224.170.187
121.229.30.27	118.25.39.84	139.59.72.161	61.170.232.28