116.21.18.1 - IPInfo

Basic Info

City: Guangzhou

Region: Guangdong

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
116.21.180.172	attackbotsspam	Feb 5 18:50:32 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:50:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\> Feb 5 18:50:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:33 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=116.21.180.17 ...	2020-02-06 03:33:31

Type

Details

Datetime

116.21.180.172

attackbotsspam

Feb  5 18:50:32 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\
Feb  5 18:50:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\>
Feb  5 18:50:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\
Feb  5 18:52:33 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\
Feb  5 18:52:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=116.21.180.17
...

2020-02-06 03:33:31

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 116.21.18.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58183
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;116.21.18.1.			IN	A

;; AUTHORITY SECTION:
.			474	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019121901 1800 900 604800 86400

;; Query time: 53 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Dec 20 03:19:59 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 1.18.21.116.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 1.18.21.116.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
14.141.64.104	attackbots	port scan and connect, tcp 1433 (ms-sql-s)	2020-02-24 04:29:16
89.41.41.122	attackspambots	Honeypot attack, port: 445, PTR: PTR record not found	2020-02-24 04:26:23
193.112.160.221	attack	Feb 23 17:04:47 [snip] sshd[9248]: Invalid user fujimura from 193.112.160.221 port 56364 Feb 23 17:04:47 [snip] sshd[9248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.160.221 Feb 23 17:04:49 [snip] sshd[9248]: Failed password for invalid user fujimura from 193.112.160.221 port 56364 ssh2[...]	2020-02-24 04:42:31
91.121.169.157	attackbotsspam	Feb 23 15:24:13 ncomp sshd[6259]: Invalid user redhat from 91.121.169.157 Feb 23 15:24:13 ncomp sshd[6259]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.169.157 Feb 23 15:24:13 ncomp sshd[6259]: Invalid user redhat from 91.121.169.157 Feb 23 15:24:15 ncomp sshd[6259]: Failed password for invalid user redhat from 91.121.169.157 port 35774 ssh2	2020-02-24 04:13:41
141.98.10.137	attackbotsspam	Rude login attack (75 tries in 1d)	2020-02-24 04:44:45
117.91.60.229	attack	Brute force blocker - service: proftpd1 - aantal: 66 - Mon Jun 11 18:20:16 2018	2020-02-24 04:23:41
51.159.35.94	attackspam	Feb 23 14:24:13 vpn01 sshd[32556]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.159.35.94 Feb 23 14:24:15 vpn01 sshd[32556]: Failed password for invalid user tanxjian from 51.159.35.94 port 55648 ssh2 ...	2020-02-24 04:14:34
107.172.198.110	attackspam	lfd: (smtpauth) Failed SMTP AUTH login from 107.172.198.110 (107-172-198-110-host.colocrossing.com): 5 in the last 3600 secs - Sat Jun 9 15:52:11 2018	2020-02-24 04:49:53
139.59.89.7	attackspam	Feb 23 15:26:07 server sshd[386150]: Failed password for invalid user weblogic from 139.59.89.7 port 58744 ssh2 Feb 23 15:29:33 server sshd[387968]: Failed password for invalid user liwenxuan from 139.59.89.7 port 59084 ssh2 Feb 23 15:33:06 server sshd[389966]: User postgres from 139.59.89.7 not allowed because not listed in AllowUsers	2020-02-24 04:12:52
189.223.183.236	attackspam	Honeypot attack, port: 81, PTR: 189.223.183.236.dsl.dyn.telnor.net.	2020-02-24 04:23:18
180.113.123.165	attackbots	lfd: (smtpauth) Failed SMTP AUTH login from 180.113.123.165 (-): 5 in the last 3600 secs - Sun Jun 10 01:14:32 2018	2020-02-24 04:46:58
112.3.30.123	attackspam	Invalid user nagios from 112.3.30.123 port 53300	2020-02-24 04:31:27
190.28.99.106	attackbots	Feb 21 16:44:36 nxxxxxxx sshd[2354]: Invalid user vps from 190.28.99.106 Feb 21 16:44:38 nxxxxxxx sshd[2354]: Failed password for invalid user vps from 190.28.99.106 port 51904 ssh2 Feb 21 16:44:39 nxxxxxxx sshd[2354]: Received disconnect from 190.28.99.106: 11: Bye Bye [preauth] Feb 21 17:03:19 nxxxxxxx sshd[4503]: Failed password for mail from 190.28.99.106 port 18775 ssh2 Feb 21 17:03:19 nxxxxxxx sshd[4503]: Received disconnect from 190.28.99.106: 11: Bye Bye [preauth] Feb 21 17:06:14 nxxxxxxx sshd[4811]: Invalid user edward from 190.28.99.106 Feb 21 17:06:16 nxxxxxxx sshd[4811]: Failed password for invalid user edward from 190.28.99.106 port 53492 ssh2 Feb 21 17:06:16 nxxxxxxx sshd[4811]: Received disconnect from 190.28.99.106: 11: Bye Bye [preauth] Feb 21 17:09:09 nxxxxxxx sshd[5123]: Invalid user pruebas from 190.28.99.106 Feb 21 17:09:11 nxxxxxxx sshd[5123]: Failed password for invalid user pruebas from 190.28.99.106 port 33145 ssh2 Feb 21 17:09:11 nxxxxxxx sshd[........ -------------------------------	2020-02-24 04:32:36
222.186.30.35	attackbotsspam	auto-add	2020-02-24 04:22:46
80.250.217.50	attackspambots	Invalid user kf2server from 80.250.217.50 port 48753	2020-02-24 04:11:22

Recently Reported IPs

124.232.108.137	222.176.94.237	148.217.173.212	68.12.62.9
62.243.35.249	176.195.37.37	3.106.248.201	166.148.30.114
165.84.176.77	152.219.69.232	102.39.53.58	202.179.55.113
201.192.8.31	41.121.247.8	52.156.25.89	152.65.150.171
87.127.195.214	130.80.253.38	95.242.185.62	60.161.64.224