121.16.4.217 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

No discussion about this IP yet. Click above link to make one.

Comments on same subnet:

IP	Type	Details	Datetime
121.16.41.82	attack	Unauthorised access (Oct 12) SRC=121.16.41.82 LEN=40 TTL=49 ID=4912 TCP DPT=8080 WINDOW=6278 SYN Unauthorised access (Oct 12) SRC=121.16.41.82 LEN=40 TTL=49 ID=53069 TCP DPT=8080 WINDOW=36109 SYN Unauthorised access (Oct 10) SRC=121.16.41.82 LEN=40 TTL=49 ID=23431 TCP DPT=8080 WINDOW=6278 SYN Unauthorised access (Oct 10) SRC=121.16.41.82 LEN=40 TTL=49 ID=33626 TCP DPT=8080 WINDOW=6278 SYN Unauthorised access (Oct 9) SRC=121.16.41.82 LEN=40 TTL=49 ID=31535 TCP DPT=8080 WINDOW=6278 SYN Unauthorised access (Oct 8) SRC=121.16.41.82 LEN=40 TTL=49 ID=12907 TCP DPT=8080 WINDOW=6278 SYN Unauthorised access (Oct 8) SRC=121.16.41.82 LEN=40 TTL=49 ID=683 TCP DPT=8080 WINDOW=36109 SYN	2019-10-12 18:43:01
121.16.47.103	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2019-08-12 02:34:54

Type

Details

Datetime

121.16.41.82

attack

Unauthorised access (Oct 12) SRC=121.16.41.82 LEN=40 TTL=49 ID=4912 TCP DPT=8080 WINDOW=6278 SYN 
Unauthorised access (Oct 12) SRC=121.16.41.82 LEN=40 TTL=49 ID=53069 TCP DPT=8080 WINDOW=36109 SYN 
Unauthorised access (Oct 10) SRC=121.16.41.82 LEN=40 TTL=49 ID=23431 TCP DPT=8080 WINDOW=6278 SYN 
Unauthorised access (Oct 10) SRC=121.16.41.82 LEN=40 TTL=49 ID=33626 TCP DPT=8080 WINDOW=6278 SYN 
Unauthorised access (Oct  9) SRC=121.16.41.82 LEN=40 TTL=49 ID=31535 TCP DPT=8080 WINDOW=6278 SYN 
Unauthorised access (Oct  8) SRC=121.16.41.82 LEN=40 TTL=49 ID=12907 TCP DPT=8080 WINDOW=6278 SYN 
Unauthorised access (Oct  8) SRC=121.16.41.82 LEN=40 TTL=49 ID=683 TCP DPT=8080 WINDOW=36109 SYN

2019-10-12 18:43:01

121.16.47.103

attackbots

Honeypot attack, port: 5555, PTR: PTR record not found

2019-08-12 02:34:54

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 121.16.4.217
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31279
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;121.16.4.217.			IN	A

;; AUTHORITY SECTION:
.			443	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022030800 1800 900 604800 86400

;; Query time: 125 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Mar 08 20:02:18 CST 2022
;; MSG SIZE  rcvd: 105

Host info

Host 217.4.16.121.in-addr.arpa not found: 2(SERVFAIL)

Nslookup info:

;; Got SERVFAIL reply from 183.60.83.19, trying next server
Server:		183.60.82.98
Address:	183.60.82.98#53

** server can't find 217.4.16.121.in-addr.arpa: SERVFAIL

Related IP info:

Related comments:

IP	Type	Details	Datetime
183.80.0.0	attack	Unauthorized connection attempt detected from IP address 183.80.0.0 to port 80 [J]	2020-02-06 03:36:50
173.242.134.243	attackbots	Unauthorized connection attempt detected from IP address 173.242.134.243 to port 23 [J]	2020-02-06 03:38:42
181.226.217.114	attackbots	Unauthorized connection attempt detected from IP address 181.226.217.114 to port 81 [J]	2020-02-06 03:56:22
192.255.189.254	attackspam	Feb 5 02:57:38 finn sshd[22656]: Invalid user rummel from 192.255.189.254 port 41156 Feb 5 02:57:38 finn sshd[22656]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.255.189.254 Feb 5 02:57:40 finn sshd[22656]: Failed password for invalid user rummel from 192.255.189.254 port 41156 ssh2 Feb 5 02:57:40 finn sshd[22656]: Received disconnect from 192.255.189.254 port 41156:11: Bye Bye [preauth] Feb 5 02:57:40 finn sshd[22656]: Disconnected from 192.255.189.254 port 41156 [preauth] Feb 5 03:07:40 finn sshd[24978]: Invalid user deploy from 192.255.189.254 port 46484 Feb 5 03:07:40 finn sshd[24978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.255.189.254 Feb 5 03:07:42 finn sshd[24978]: Failed password for invalid user deploy from 192.255.189.254 port 46484 ssh2 Feb 5 03:07:42 finn sshd[24978]: Received disconnect from 192.255.189.254 port 46484:11: Bye Bye [preauth] Feb 5 03........ -------------------------------	2020-02-06 03:25:41
113.22.244.59	attackbots	Unauthorized connection attempt detected from IP address 113.22.244.59 to port 80 [J]	2020-02-06 04:04:45
167.114.98.96	attackspambots	Unauthorized connection attempt detected from IP address 167.114.98.96 to port 2220 [J]	2020-02-06 03:59:38
116.21.180.172	attackbotsspam	Feb 5 18:50:32 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:50:41 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 9 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\<9sFt9NadeLl0FbSs\> Feb 5 18:50:56 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 13 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:33 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 5 secs\): user=\, method=PLAIN, rip=116.21.180.172, lip=212.111.212.230, session=\ Feb 5 18:52:42 journals dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 8 secs\): user=\, method=PLAIN, rip=116.21.180.17 ...	2020-02-06 03:33:31
121.145.138.110	attackspam	Unauthorized connection attempt detected from IP address 121.145.138.110 to port 5555 [J]	2020-02-06 04:02:22
187.178.146.102	attackspambots	Unauthorized connection attempt detected from IP address 187.178.146.102 to port 23 [J]	2020-02-06 03:36:31
218.208.170.25	attack	Unauthorized connection attempt detected from IP address 218.208.170.25 to port 8080 [J]	2020-02-06 03:51:20
135.23.228.145	attackspambots	Unauthorized connection attempt detected from IP address 135.23.228.145 to port 5555 [J]	2020-02-06 03:40:07
124.156.64.236	attack	Unauthorized connection attempt detected from IP address 124.156.64.236 to port 1471 [J]	2020-02-06 04:01:56
87.237.235.176	attackspambots	Unauthorized connection attempt detected from IP address 87.237.235.176 to port 21 [J]	2020-02-06 03:45:11
101.251.197.238	attackbots	Unauthorized connection attempt detected from IP address 101.251.197.238 to port 2220 [J]	2020-02-06 03:44:20
37.72.52.149	attackspam	Unauthorized connection attempt detected from IP address 37.72.52.149 to port 23 [J]	2020-02-06 03:50:00

Recently Reported IPs

121.16.31.27	121.16.90.122	121.16.63.25	121.16.80.27
121.16.90.58	121.16.90.2	121.160.11.119	121.160.3.111
121.160.88.75	121.160.91.59	115.124.114.234	121.161.20.10
121.161.152.7	121.160.142.13	115.164.200.91	115.186.148.250
115.186.189.30	115.37.89.161	115.73.79.98	115.97.48.114