221.13.12.128 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): China

运营商(isp): China Unicom Guizhou Province Network

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Unauthorized connection attempt detected from IP address 221.13.12.128 to port 8081 [J]	2020-01-27 00:12:34

相同子网IP讨论:

IP	类型	评论内容	时间
221.13.12.79	attack	Unauthorized connection attempt detected from IP address 221.13.12.79 to port 123	2020-06-13 06:05:18
221.13.12.19	attack	Web Server Scan. RayID: 592aa77abd9b0256, UA: Mozilla/4.049897920 Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729), Country: CN	2020-05-21 03:47:26
221.13.12.222	attackspam	China's GFW probe	2020-05-15 17:35:44
221.13.12.235	attack	Unauthorized connection attempt detected from IP address 221.13.12.235 to port 992 [T]	2020-04-15 02:25:36
221.13.12.179	attackspam	Unauthorized connection attempt detected from IP address 221.13.12.179 to port 3389 [J]	2020-03-03 02:05:51
221.13.12.142	attackspam	Unauthorized connection attempt detected from IP address 221.13.12.142 to port 8899 [J]	2020-03-02 20:47:11
221.13.12.187	attack	Unauthorized connection attempt detected from IP address 221.13.12.187 to port 22 [J]	2020-03-02 19:21:12
221.13.12.104	attackbots	Unauthorized connection attempt detected from IP address 221.13.12.104 to port 22 [J]	2020-03-02 17:29:07
221.13.12.65	attack	Unauthorized connection attempt detected from IP address 221.13.12.65 to port 8081 [J]	2020-03-02 16:58:59
221.13.12.133	attackspam	Unauthorized connection attempt detected from IP address 221.13.12.133 to port 8082 [J]	2020-03-02 16:29:37
221.13.12.98	attack	Unauthorized connection attempt detected from IP address 221.13.12.98 to port 8118 [J]	2020-03-02 14:47:39
221.13.12.91	attack	Unauthorized connection attempt detected from IP address 221.13.12.91 to port 8000 [J]	2020-03-02 14:14:42
221.13.12.97	attackbots	Unauthorized connection attempt detected from IP address 221.13.12.97 to port 8443 [J]	2020-02-05 09:04:55
221.13.12.118	attackbots	Unauthorized connection attempt detected from IP address 221.13.12.118 to port 443 [J]	2020-01-31 22:42:35
221.13.12.224	attackspam	Unauthorized connection attempt detected from IP address 221.13.12.224 to port 9011 [T]	2020-01-29 10:16:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 221.13.12.128
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 33370
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;221.13.12.128.			IN	A

;; AUTHORITY SECTION:
.			525	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020012600 1800 900 604800 86400

;; Query time: 36 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Mon Jan 27 00:12:28 CST 2020
;; MSG SIZE  rcvd: 117

HOST信息:

Host 128.12.13.221.in-addr.arpa not found: 2(SERVFAIL)

NSLOOKUP信息:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 128.12.13.221.in-addr.arpa: SERVFAIL

最新评论:

IP	类型	评论内容	时间
14.6.200.22	attackbotsspam	Sep 9 08:06:03 s64-1 sshd[31840]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.6.200.22 Sep 9 08:06:04 s64-1 sshd[31840]: Failed password for invalid user developer from 14.6.200.22 port 45018 ssh2 Sep 9 08:13:11 s64-1 sshd[32018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.6.200.22 ...	2019-09-09 14:29:15
137.74.166.77	attackbots	$f2bV_matches	2019-09-09 15:02:50
103.219.61.3	attackspam	Sep 9 06:12:35 hcbbdb sshd\[17851\]: Invalid user tester from 103.219.61.3 Sep 9 06:12:35 hcbbdb sshd\[17851\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.61.3 Sep 9 06:12:36 hcbbdb sshd\[17851\]: Failed password for invalid user tester from 103.219.61.3 port 36270 ssh2 Sep 9 06:17:35 hcbbdb sshd\[18419\]: Invalid user reynold from 103.219.61.3 Sep 9 06:17:35 hcbbdb sshd\[18419\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.219.61.3	2019-09-09 14:29:58
132.145.162.191	attackbots	2019-09-09T06:28:09.463368abusebot-8.cloudsearch.cf sshd\[13829\]: Invalid user sammy from 132.145.162.191 port 48114	2019-09-09 14:33:50
159.89.188.167	attack	Sep 9 08:45:10 dedicated sshd[29842]: Invalid user 12345 from 159.89.188.167 port 36952	2019-09-09 14:47:04
51.77.201.36	attackbots	Sep 9 07:58:43 legacy sshd[30244]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.201.36 Sep 9 07:58:44 legacy sshd[30244]: Failed password for invalid user demo3 from 51.77.201.36 port 35226 ssh2 Sep 9 08:03:56 legacy sshd[30427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.201.36 ...	2019-09-09 14:36:10
1.224.163.125	attackbots	firewall-block, port(s): 445/tcp	2019-09-09 14:27:02
5.62.41.170	attackspambots	\[2019-09-09 07:38:37\] NOTICE\[9368\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.170:13190' $callid: 1203170097-675946563-208547998$ - Failed to authenticate \[2019-09-09 07:38:37\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-09-09T07:38:37.048+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1203170097-675946563-208547998",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/5.62.41.170/13190",Challenge="1568007516/caeaab6b3dc8e42027bf21bcce7af2a7",Response="6285afb57c0c154f3ebf9a6c9ab9cf39",ExpectedResponse="" \[2019-09-09 07:38:37\] NOTICE\[1168\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '5.62.41.170:13190' $callid: 1203170097-675946563-208547998$ - Failed to authenticate \[2019-09-09 07:38:37\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",	2019-09-09 14:17:30
206.189.108.59	attackbots	Sep 8 20:21:27 hcbb sshd\[11353\]: Invalid user passw0rd from 206.189.108.59 Sep 8 20:21:27 hcbb sshd\[11353\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59 Sep 8 20:21:29 hcbb sshd\[11353\]: Failed password for invalid user passw0rd from 206.189.108.59 port 37160 ssh2 Sep 8 20:27:31 hcbb sshd\[12503\]: Invalid user gmod from 206.189.108.59 Sep 8 20:27:31 hcbb sshd\[12503\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.108.59	2019-09-09 14:31:56
219.136.250.36	attackspam	Sep 7 17:44:08 localhost kernel: [1630464.745763] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=219.136.250.36 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=4756 PROTO=TCP SPT=57482 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 7 17:44:08 localhost kernel: [1630464.745788] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=219.136.250.36 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=4756 PROTO=TCP SPT=57482 DPT=445 SEQ=1048081239 ACK=0 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 9 00:40:06 localhost kernel: [1741823.205602] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=219.136.250.36 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0x20 TTL=236 ID=7608 PROTO=TCP SPT=56704 DPT=445 WINDOW=1024 RES=0x00 SYN URGP=0 Sep 9 00:40:06 localhost kernel: [1741823.205624] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=219.136.250.36 DST=[mungedIP2] LEN=40 TOS=0x08 PREC=0	2019-09-09 14:17:49
190.213.75.241	attackbotsspam	Automatic report - Port Scan Attack	2019-09-09 14:35:39
0.0.0.63	attack	masters-of-media.de 2404:f080:1101:318:150:95:105:63 \[09/Sep/2019:06:39:08 +0200\] "POST /wp-login.php HTTP/1.1" 200 5855 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0" masters-of-media.de 2404:f080:1101:318:150:95:105:63 \[09/Sep/2019:06:39:10 +0200\] "POST /wp-login.php HTTP/1.1" 200 5854 "-" "Mozilla/5.0 $X11\; Ubuntu\; Linux x86_64\; rv:62.0$ Gecko/20100101 Firefox/62.0"	2019-09-09 14:57:40
109.167.98.27	attackspam	Sep 9 02:00:56 ny01 sshd[16457]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.98.27 Sep 9 02:00:58 ny01 sshd[16457]: Failed password for invalid user 106 from 109.167.98.27 port 39336 ssh2 Sep 9 02:06:40 ny01 sshd[17427]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.167.98.27	2019-09-09 14:41:52
54.38.47.28	attackbots	Sep 8 19:57:31 eddieflores sshd\[3145\]: Invalid user web from 54.38.47.28 Sep 8 19:57:31 eddieflores sshd\[3145\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3115987.ip-54-38-47.eu Sep 8 19:57:33 eddieflores sshd\[3145\]: Failed password for invalid user web from 54.38.47.28 port 58000 ssh2 Sep 8 20:03:04 eddieflores sshd\[3604\]: Invalid user daniel from 54.38.47.28 Sep 8 20:03:04 eddieflores sshd\[3604\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ns3115987.ip-54-38-47.eu	2019-09-09 14:08:18
89.133.126.19	attackspam	Sep 9 08:08:15 mail sshd\[12076\]: Invalid user whmcs from 89.133.126.19 port 34406 Sep 9 08:08:15 mail sshd\[12076\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.133.126.19 Sep 9 08:08:18 mail sshd\[12076\]: Failed password for invalid user whmcs from 89.133.126.19 port 34406 ssh2 Sep 9 08:14:49 mail sshd\[13323\]: Invalid user ts3server from 89.133.126.19 port 39646 Sep 9 08:14:49 mail sshd\[13323\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.133.126.19	2019-09-09 14:15:38

最近上报的IP列表

251.52.250.234	179.93.214.101	162.45.62.179	167.203.156.91
23.53.202.99	156.202.17.77	141.136.44.113	124.225.43.190
123.207.52.78	123.163.114.64	192.2.224.205	123.145.37.225
119.118.26.193	211.138.116.230	114.33.132.172	133.71.23.62
254.255.60.177	106.45.0.77	172.67.197.16	56.173.104.36