104.200.144.21

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Total Server Solutions L.L.C.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Feb 12 00:33:21 mercury smtpd[14994]: 66a183f2249afe8f smtp event=failed-command address=104.200.144.21 host=sendpoker.com command="RCPT to:" result="550 Invalid recipient" ...	2020-03-04 02:42:53

相同子网IP讨论:

IP	类型	评论内容	时间
104.200.144.166	attackspam	SSH Brute Force	2020-04-29 13:37:26
104.200.144.166	attack	Feb 16 05:12:15 sachi sshd\[2133\]: Invalid user roz from 104.200.144.166 Feb 16 05:12:15 sachi sshd\[2133\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 16 05:12:17 sachi sshd\[2133\]: Failed password for invalid user roz from 104.200.144.166 port 60464 ssh2 Feb 16 05:15:14 sachi sshd\[2427\]: Invalid user spencer from 104.200.144.166 Feb 16 05:15:14 sachi sshd\[2427\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166	2020-02-16 23:43:58
104.200.144.166	attackspam	Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:13 srv-ubuntu-dev3 sshd[69672]: Failed password for invalid user jtx from 104.200.144.166 port 56382 ssh2 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:19 srv-ubuntu-dev3 sshd[70089]: Failed password for invalid user eie from 104.200.144.166 port 58026 ssh2 Feb 9 06:44:27 srv-ubuntu-dev3 sshd[70413]: Invalid user uqk from 104.200.144.166 ...	2020-02-09 20:38:10
104.200.144.166	attack	Jan 3 21:23:48 ws25vmsma01 sshd[53744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Jan 3 21:23:50 ws25vmsma01 sshd[53744]: Failed password for invalid user jyd from 104.200.144.166 port 33162 ssh2 ...	2020-01-04 06:12:45
104.200.144.1	attack	SSH login attempts with user root at 2020-01-02.	2020-01-03 03:34:35
104.200.144.166	attack	2020-01-01T07:08:35.234788shield sshd\[22116\]: Invalid user freusen from 104.200.144.166 port 34482 2020-01-01T07:08:35.239076shield sshd\[22116\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 2020-01-01T07:08:37.103556shield sshd\[22116\]: Failed password for invalid user freusen from 104.200.144.166 port 34482 ssh2 2020-01-01T07:11:03.942293shield sshd\[23017\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 user=root 2020-01-01T07:11:05.455850shield sshd\[23017\]: Failed password for root from 104.200.144.166 port 33920 ssh2	2020-01-01 15:13:11
104.200.144.191	attack	Jul 22 11:50:26 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure	2019-07-23 11:10:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.200.144.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46697
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.200.144.21.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030300 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 04 02:42:49 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

21.144.200.104.in-addr.arpa domain name pointer sendpoker.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.144.200.104.in-addr.arpa	name = sendpoker.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
172.93.123.39	attack	Automatic report - XMLRPC Attack	2020-01-14 21:57:04
110.53.234.16	attack	ICMP MH Probe, Scan /Distributed -	2020-01-14 22:10:26
110.53.234.226	attack	ICMP MH Probe, Scan /Distributed -	2020-01-14 21:45:50
110.53.234.187	attackbotsspam	ICMP MH Probe, Scan /Distributed -	2020-01-14 22:08:05
177.221.57.10	attack	Automatic report - Banned IP Access	2020-01-14 22:22:06
117.96.246.146	attackspam	Autoban 117.96.246.146 AUTH/CONNECT	2020-01-14 21:47:39
121.139.225.144	attack	Unauthorized connection attempt detected from IP address 121.139.225.144 to port 22 [J]	2020-01-14 21:49:05
177.66.118.20	attackspam	postfix	2020-01-14 21:36:09
186.67.248.8	attack	Jan 14 09:58:31 firewall sshd[2899]: Failed password for invalid user monitor from 186.67.248.8 port 35300 ssh2 Jan 14 10:04:43 firewall sshd[3053]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.67.248.8 user=root Jan 14 10:04:45 firewall sshd[3053]: Failed password for root from 186.67.248.8 port 56613 ssh2 ...	2020-01-14 21:45:25
128.199.141.184	attackspambots	$f2bV_matches	2020-01-14 21:43:31
151.20.85.226	attackspambots	Unauthorized connection attempt detected from IP address 151.20.85.226 to port 85	2020-01-14 21:59:36
200.106.100.55	attackbotsspam	Jan 14 14:04:03 mail postfix/smtpd\[21742\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server Jan 14 14:04:15 mail postfix/smtpd\[24529\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server Jan 14 14:04:32 mail postfix/smtpd\[23752\]: warning: unknown\[200.106.100.55\]: SASL PLAIN authentication failed: Connection lost to authentication server	2020-01-14 21:55:31
110.53.234.221	attackspambots	ICMP MH Probe, Scan /Distributed -	2020-01-14 21:48:29
110.53.234.191	attackbotsspam	ICMP MH Probe, Scan /Distributed -	2020-01-14 22:04:52
213.59.119.14	attackbots	Jan 14 08:04:12 Tower sshd[10146]: Connection from 213.59.119.14 port 36250 on 192.168.10.220 port 22 rdomain "" Jan 14 08:04:12 Tower sshd[10146]: Invalid user vinicius from 213.59.119.14 port 36250 Jan 14 08:04:12 Tower sshd[10146]: error: Could not get shadow information for NOUSER Jan 14 08:04:12 Tower sshd[10146]: Failed password for invalid user vinicius from 213.59.119.14 port 36250 ssh2 Jan 14 08:04:12 Tower sshd[10146]: Received disconnect from 213.59.119.14 port 36250:11: Bye Bye [preauth] Jan 14 08:04:12 Tower sshd[10146]: Disconnected from invalid user vinicius 213.59.119.14 port 36250 [preauth]	2020-01-14 21:57:32

最近上报的IP列表

113.173.50.157	45.143.223.40	105.12.2.92	103.12.161.196
49.145.235.132	171.35.172.44	132.144.178.222	162.223.226.188
115.216.56.39	47.103.9.234	115.207.107.147	101.51.59.228
95.47.49.250	208.33.226.110	103.136.43.174	49.235.21.109
45.183.172.20	103.119.141.203	103.100.83.238	101.108.4.36