104.16.52.91 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.16.52.91
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 8773
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.16.52.91.			IN	A

;; AUTHORITY SECTION:
.			578	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022032401 1800 900 604800 86400

;; Query time: 61 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Mar 25 05:54:13 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 91.52.16.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 91.52.16.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
212.83.163.170	attackspambots	[2020-09-07 20:35:52] NOTICE[1194] chan_sip.c: Registration from '"1040"' failed for '212.83.163.170:8767' - Wrong password [2020-09-07 20:35:52] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T20:35:52.435-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1040",SessionID="0x7f2ddce0c1b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/212.83.163.170/8767",Challenge="57a1c494",ReceivedChallenge="57a1c494",ReceivedHash="7d6afbed88a559789a67a68713f41f38" [2020-09-07 20:38:14] NOTICE[1194] chan_sip.c: Registration from '"1045"' failed for '212.83.163.170:9019' - Wrong password [2020-09-07 20:38:14] SECURITY[1233] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-09-07T20:38:14.493-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1045",SessionID="0x7f2ddc0da798",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/2 ...	2020-09-08 08:40:32
115.241.16.26	attack	Sep 7 18:50:57 ks10 sshd[894908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.241.16.26 Sep 7 18:51:00 ks10 sshd[894908]: Failed password for invalid user cablecom from 115.241.16.26 port 49624 ssh2 ...	2020-09-08 08:21:11
128.199.87.167	attackbotsspam	Lines containing failures of 128.199.87.167 Sep 7 05:30:04 www sshd[17671]: Invalid user oracle from 128.199.87.167 port 49250 Sep 7 05:30:04 www sshd[17671]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.87.167 Sep 7 05:30:06 www sshd[17671]: Failed password for invalid user oracle from 128.199.87.167 port 49250 ssh2 Sep 7 05:30:06 www sshd[17671]: Received disconnect from 128.199.87.167 port 49250:11: Bye Bye [preauth] Sep 7 05:30:06 www sshd[17671]: Disconnected from invalid user oracle 128.199.87.167 port 49250 [preauth] Sep 7 05:39:23 www sshd[19763]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.87.167 user=r.r Sep 7 05:39:25 www sshd[19763]: Failed password for r.r from 128.199.87.167 port 52140 ssh2 Sep 7 05:39:26 www sshd[19763]: Received disconnect from 128.199.87.167 port 52140:11: Bye Bye [preauth] Sep 7 05:39:26 www sshd[19763]: Disconnected from aut........ ------------------------------	2020-09-08 08:48:11
139.155.21.34	attack	Lines containing failures of 139.155.21.34 Sep 7 02:16:25 v2hgb sshd[5602]: Invalid user ubnt from 139.155.21.34 port 38778 Sep 7 02:16:25 v2hgb sshd[5602]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34 Sep 7 02:16:27 v2hgb sshd[5602]: Failed password for invalid user ubnt from 139.155.21.34 port 38778 ssh2 Sep 7 02:16:27 v2hgb sshd[5602]: Received disconnect from 139.155.21.34 port 38778:11: Bye Bye [preauth] Sep 7 02:16:27 v2hgb sshd[5602]: Disconnected from invalid user ubnt 139.155.21.34 port 38778 [preauth] Sep 7 02:37:10 v2hgb sshd[7634]: Connection closed by 139.155.21.34 port 39446 [preauth] Sep 7 02:41:12 v2hgb sshd[8175]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.21.34 user=r.r Sep 7 02:41:14 v2hgb sshd[8175]: Failed password for r.r from 139.155.21.34 port 58590 ssh2 Sep 7 02:41:15 v2hgb sshd[8175]: Received disconnect from 139.155.21.34 por........ ------------------------------	2020-09-08 08:24:38
201.211.77.197	attack	1599497458 - 09/07/2020 18:50:58 Host: 201.211.77.197/201.211.77.197 Port: 445 TCP Blocked	2020-09-08 08:20:48
201.140.110.78	attackspambots	Dovecot Invalid User Login Attempt.	2020-09-08 08:43:43
106.13.187.27	attack	2020-09-07T23:36:42.809392abusebot-8.cloudsearch.cf sshd[16256]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 user=root 2020-09-07T23:36:44.882528abusebot-8.cloudsearch.cf sshd[16256]: Failed password for root from 106.13.187.27 port 46956 ssh2 2020-09-07T23:41:12.478016abusebot-8.cloudsearch.cf sshd[16366]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 user=root 2020-09-07T23:41:13.946604abusebot-8.cloudsearch.cf sshd[16366]: Failed password for root from 106.13.187.27 port 41365 ssh2 2020-09-07T23:45:30.043166abusebot-8.cloudsearch.cf sshd[16426]: Invalid user squid from 106.13.187.27 port 35780 2020-09-07T23:45:30.049606abusebot-8.cloudsearch.cf sshd[16426]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.187.27 2020-09-07T23:45:30.043166abusebot-8.cloudsearch.cf sshd[16426]: Invalid user squid from 106.13.187.27 port 35780 ...	2020-09-08 08:08:53
218.92.0.133	attackbotsspam	Sep 8 02:51:01 vps1 sshd[11091]: Failed none for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:01 vps1 sshd[11091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.133 user=root Sep 8 02:51:03 vps1 sshd[11091]: Failed password for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:07 vps1 sshd[11091]: Failed password for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:11 vps1 sshd[11091]: Failed password for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:15 vps1 sshd[11091]: Failed password for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:18 vps1 sshd[11091]: Failed password for invalid user root from 218.92.0.133 port 44447 ssh2 Sep 8 02:51:19 vps1 sshd[11091]: error: maximum authentication attempts exceeded for invalid user root from 218.92.0.133 port 44447 ssh2 [preauth] ...	2020-09-08 08:53:38
46.146.240.185	attack	Sep 7 17:40:59 online-web-vs-1 sshd[633469]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185 user=r.r Sep 7 17:41:01 online-web-vs-1 sshd[633469]: Failed password for r.r from 46.146.240.185 port 44747 ssh2 Sep 7 17:41:02 online-web-vs-1 sshd[633469]: Received disconnect from 46.146.240.185 port 44747:11: Bye Bye [preauth] Sep 7 17:41:02 online-web-vs-1 sshd[633469]: Disconnected from 46.146.240.185 port 44747 [preauth] Sep 7 17:47:55 online-web-vs-1 sshd[633960]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185 user=r.r Sep 7 17:47:57 online-web-vs-1 sshd[633960]: Failed password for r.r from 46.146.240.185 port 36242 ssh2 Sep 7 17:47:57 online-web-vs-1 sshd[633960]: Received disconnect from 46.146.240.185 port 36242:11: Bye Bye [preauth] Sep 7 17:47:57 online-web-vs-1 sshd[633960]: Disconnected from 46.146.240.185 port 36242 [preauth] Sep 7 17:51:36 ........ -------------------------------	2020-09-08 08:30:15
200.233.163.65	attackbotsspam	Sep 7 18:50:50 ns381471 sshd[21700]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.233.163.65 Sep 7 18:50:53 ns381471 sshd[21700]: Failed password for invalid user beta from 200.233.163.65 port 35232 ssh2	2020-09-08 08:29:05
45.142.120.121	attack	proto=tcp . spt=6172 . dpt=25 . Found on Blocklist-de Strong List (6)	2020-09-08 08:14:36
111.92.73.156	attack	Honeypot attack, port: 445, PTR: 156.73.92.111.asianet.co.in.	2020-09-08 08:15:38
103.140.83.18	attackspam	(sshd) Failed SSH login from 103.140.83.18 (BD/Bangladesh/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep 7 12:17:27 server sshd[7264]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root Sep 7 12:17:28 server sshd[7264]: Failed password for root from 103.140.83.18 port 59810 ssh2 Sep 7 12:46:35 server sshd[25584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root Sep 7 12:46:36 server sshd[25584]: Failed password for root from 103.140.83.18 port 48836 ssh2 Sep 7 12:50:37 server sshd[29095]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.140.83.18 user=root	2020-09-08 08:44:23
173.225.103.130	attack	Fail2Ban Ban Triggered	2020-09-08 08:32:58
129.226.185.201	attackbotsspam	Sep 7 23:52:33 mellenthin sshd[23832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.185.201 Sep 7 23:52:34 mellenthin sshd[23832]: Failed password for invalid user test from 129.226.185.201 port 53444 ssh2	2020-09-08 08:49:37

最近上报的IP列表

104.16.51.91	104.16.53.91	104.16.54.91	104.16.55.91
104.16.58.120	104.16.64.15	104.16.8.177	104.16.90.16
104.160.173.147	104.160.180.43	104.160.23.131	104.160.23.157
155.161.97.118	104.160.23.159	104.160.23.181	104.160.26.207
104.160.27.202	104.160.72.252	143.201.219.178	104.161.20.73