城市(city): Santa Clara
省份(region): California
国家(country): United States
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 104.168.87.199 | attack | SSH brute force |
2020-01-15 04:07:33 |
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#
# start
NetRange: 104.168.0.0 - 104.168.127.255
CIDR: 104.168.0.0/17
NetName: CC-18
NetHandle: NET-104-168-0-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: HostPapa (HOSTP-7)
RegDate: 2014-08-27
Updated: 2024-02-02
Comment: Geofeed https://geofeeds.oniaas.io/geofeeds.csv
Ref: https://rdap.arin.net/registry/ip/104.168.0.0
OrgName: HostPapa
OrgId: HOSTP-7
Address: 325 Delaware Avenue
Address: Suite 300
City: Buffalo
StateProv: NY
PostalCode: 14202
Country: US
RegDate: 2016-06-06
Updated: 2025-10-05
Ref: https://rdap.arin.net/registry/entity/HOSTP-7
OrgAbuseHandle: NETAB23-ARIN
OrgAbuseName: NETABUSE
OrgAbusePhone: +1-905-315-3455
OrgAbuseEmail: net-abuse-global@hostpapa.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/NETAB23-ARIN
OrgTechHandle: NETTE9-ARIN
OrgTechName: NETTECH
OrgTechPhone: +1-905-315-3455
OrgTechEmail: net-tech-global@hostpapa.com
OrgTechRef: https://rdap.arin.net/registry/entity/NETTE9-ARIN
RAbuseHandle: NETAB27-ARIN
RAbuseName: NETABUSE-COLOCROSSING
RAbusePhone: +1-800-518-9716
RAbuseEmail: abuse@colocrossing.com
RAbuseRef: https://rdap.arin.net/registry/entity/NETAB27-ARIN
RTechHandle: NETTE11-ARIN
RTechName: NETTECH-COLOCROSSING
RTechPhone: +1-800-518-9716
RTechEmail: support@colocrossing.com
RTechRef: https://rdap.arin.net/registry/entity/NETTE11-ARIN
# end
# start
NetRange: 104.168.87.32 - 104.168.87.63
CIDR: 104.168.87.32/27
NetName: CC-104-168-87-0-27
NetHandle: NET-104-168-87-32-1
Parent: CC-18 (NET-104-168-0-0-1)
NetType: Reassigned
OriginAS:
Organization: RackNerd LLC (RL-872)
RegDate: 2023-08-22
Updated: 2023-08-22
Ref: https://rdap.arin.net/registry/ip/104.168.87.32
OrgName: RackNerd LLC
OrgId: RL-872
Address: 10602 N. Trademark Pkwy Suite 511
City: Rancho Cucamonga
StateProv: CA
PostalCode: 91730
Country: US
RegDate: 2021-10-20
Updated: 2022-03-02
Comment: https://www.racknerd.com
Comment: Support is available 24x7 at support@racknerd.com
Comment: Report abuse to: reportabuse@racknerd.com
Ref: https://rdap.arin.net/registry/entity/RL-872
OrgAbuseHandle: RAD128-ARIN
OrgAbuseName: RackNerd Abuse Department
OrgAbusePhone: +1-888-881-6373
OrgAbuseEmail: reportabuse@racknerd.com
OrgAbuseRef: https://rdap.arin.net/registry/entity/RAD128-ARIN
OrgTechHandle: RACKN3-ARIN
OrgTechName: RackNerd NOC
OrgTechPhone: +1-888-881-6373
OrgTechEmail: support@racknerd.com
OrgTechRef: https://rdap.arin.net/registry/entity/RACKN3-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/resources/registry/whois/tou/
#
# If you see inaccuracies in the results, please report at
# https://www.arin.net/resources/registry/whois/inaccuracy_reporting/
#
# Copyright 1997-2026, American Registry for Internet Numbers, Ltd.
#; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.168.87.41
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 63638
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;104.168.87.41. IN A
;; AUTHORITY SECTION:
. 29 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2026071601 1800 900 604800 86400
;; Query time: 29 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Jul 17 05:02:11 CST 2026
;; MSG SIZE rcvd: 10641.87.168.104.in-addr.arpa domain name pointer 104-168-87-41-host.colocrossing.com.Server: 183.60.83.19
Address: 183.60.83.19#53
Non-authoritative answer:
41.87.168.104.in-addr.arpa name = 104-168-87-41-host.colocrossing.com.
Authoritative answers can be found from:| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 117.102.68.188 | attackspambots | Unauthorized connection attempt detected from IP address 117.102.68.188 to port 22 |
2020-01-11 07:19:59 |
| 90.73.243.149 | attack | Lines containing failures of 90.73.243.149 Jan 7 14:45:00 icinga sshd[30047]: Invalid user mb from 90.73.243.149 port 41602 Jan 7 14:45:00 icinga sshd[30047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.73.243.149 Jan 7 14:45:01 icinga sshd[30047]: Failed password for invalid user mb from 90.73.243.149 port 41602 ssh2 Jan 7 14:45:01 icinga sshd[30047]: Received disconnect from 90.73.243.149 port 41602:11: Bye Bye [preauth] Jan 7 14:45:01 icinga sshd[30047]: Disconnected from invalid user mb 90.73.243.149 port 41602 [preauth] Jan 7 15:39:57 icinga sshd[12414]: Invalid user jira from 90.73.243.149 port 36032 Jan 7 15:39:57 icinga sshd[12414]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=90.73.243.149 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=90.73.243.149 |
2020-01-11 07:05:23 |
| 49.235.216.174 | attack | Failed password for root from 49.235.216.174 port 43386 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.216.174 user=root Failed password for root from 49.235.216.174 port 44678 ssh2 pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.235.216.174 user=root Failed password for root from 49.235.216.174 port 45968 ssh2 |
2020-01-11 07:34:21 |
| 202.90.33.185 | attackbotsspam | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-11 07:18:19 |
| 112.118.20.30 | attackbots | Honeypot attack, port: 5555, PTR: n11211820030.netvigator.com. |
2020-01-11 07:34:07 |
| 190.143.39.211 | attackspambots | Jan 10 22:10:08 odroid64 sshd\[16648\]: User root from 190.143.39.211 not allowed because not listed in AllowUsers Jan 10 22:10:08 odroid64 sshd\[16648\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.143.39.211 user=root ... |
2020-01-11 06:59:44 |
| 178.18.209.137 | attack | Honeypot attack, port: 445, PTR: PTR record not found |
2020-01-11 07:29:01 |
| 192.55.128.254 | attackspam | (sshd) Failed SSH login from 192.55.128.254 (US/United States/California/Redwood City/host1.minervanetworks.com/[AS393553 Minerva Networks, Inc.]): 1 in the last 3600 secs |
2020-01-11 07:04:15 |
| 204.154.111.113 | attack | "MALWARE-CNC known malicious SSL certificate - Odinaff C&C" |
2020-01-11 07:07:44 |
| 107.182.187.34 | attackspam | Jan 10 21:58:50 xeon sshd[10292]: Failed password for root from 107.182.187.34 port 36860 ssh2 |
2020-01-11 07:08:26 |
| 122.51.57.78 | attackbotsspam | Jan 10 23:56:09 vps58358 sshd\[31086\]: Invalid user 0 from 122.51.57.78Jan 10 23:56:11 vps58358 sshd\[31086\]: Failed password for invalid user 0 from 122.51.57.78 port 41842 ssh2Jan 10 23:59:31 vps58358 sshd\[31109\]: Invalid user q1w2e3r4t5y6 from 122.51.57.78Jan 10 23:59:33 vps58358 sshd\[31109\]: Failed password for invalid user q1w2e3r4t5y6 from 122.51.57.78 port 40326 ssh2Jan 11 00:02:42 vps58358 sshd\[31130\]: Invalid user ruijie from 122.51.57.78Jan 11 00:02:45 vps58358 sshd\[31130\]: Failed password for invalid user ruijie from 122.51.57.78 port 38744 ssh2 ... |
2020-01-11 07:16:44 |
| 60.246.129.203 | attackbotsspam | Honeypot attack, port: 5555, PTR: nz129l203.bb60246.ctm.net. |
2020-01-11 07:07:05 |
| 46.249.13.73 | attackbots | 20/1/10@16:10:05: FAIL: Alarm-Network address from=46.249.13.73 20/1/10@16:10:06: FAIL: Alarm-Network address from=46.249.13.73 ... |
2020-01-11 07:03:12 |
| 183.251.107.68 | attackbots | Honeypot attack, port: 5555, PTR: PTR record not found |
2020-01-11 07:25:02 |
| 111.225.204.32 | attack | Fail2Ban - FTP Abuse Attempt |
2020-01-11 07:22:36 |