104.200.144.21

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): Total Server Solutions L.L.C.

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): Data Center/Web Hosting/Transit

用户上报:

点此参与IP信息讨论

类型	评论内容	时间
attack	Feb 12 00:33:21 mercury smtpd[14994]: 66a183f2249afe8f smtp event=failed-command address=104.200.144.21 host=sendpoker.com command="RCPT to:" result="550 Invalid recipient" ...	2020-03-04 02:42:53

相同子网IP讨论:

IP	类型	评论内容	时间
104.200.144.166	attackspam	SSH Brute Force	2020-04-29 13:37:26
104.200.144.166	attack	Feb 16 05:12:15 sachi sshd\[2133\]: Invalid user roz from 104.200.144.166 Feb 16 05:12:15 sachi sshd\[2133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 16 05:12:17 sachi sshd\[2133\]: Failed password for invalid user roz from 104.200.144.166 port 60464 ssh2 Feb 16 05:15:14 sachi sshd\[2427\]: Invalid user spencer from 104.200.144.166 Feb 16 05:15:14 sachi sshd\[2427\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166	2020-02-16 23:43:58
104.200.144.166	attackspam	Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:38:11 srv-ubuntu-dev3 sshd[69672]: Invalid user jtx from 104.200.144.166 Feb 9 06:38:13 srv-ubuntu-dev3 sshd[69672]: Failed password for invalid user jtx from 104.200.144.166 port 56382 ssh2 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Feb 9 06:41:17 srv-ubuntu-dev3 sshd[70089]: Invalid user eie from 104.200.144.166 Feb 9 06:41:19 srv-ubuntu-dev3 sshd[70089]: Failed password for invalid user eie from 104.200.144.166 port 58026 ssh2 Feb 9 06:44:27 srv-ubuntu-dev3 sshd[70413]: Invalid user uqk from 104.200.144.166 ...	2020-02-09 20:38:10
104.200.144.166	attack	Jan 3 21:23:48 ws25vmsma01 sshd[53744]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 Jan 3 21:23:50 ws25vmsma01 sshd[53744]: Failed password for invalid user jyd from 104.200.144.166 port 33162 ssh2 ...	2020-01-04 06:12:45
104.200.144.1	attack	SSH login attempts with user root at 2020-01-02.	2020-01-03 03:34:35
104.200.144.166	attack	2020-01-01T07:08:35.234788shield sshd\[22116\]: Invalid user freusen from 104.200.144.166 port 34482 2020-01-01T07:08:35.239076shield sshd\[22116\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 2020-01-01T07:08:37.103556shield sshd\[22116\]: Failed password for invalid user freusen from 104.200.144.166 port 34482 ssh2 2020-01-01T07:11:03.942293shield sshd\[23017\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.200.144.166 user=root 2020-01-01T07:11:05.455850shield sshd\[23017\]: Failed password for root from 104.200.144.166 port 33920 ssh2	2020-01-01 15:13:11
104.200.144.191	attack	Jul 22 11:50:26 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure Jul 22 11:50:27 warning: unknown[104.200.144.191]: SASL LOGIN authentication failed: authentication failure	2019-07-23 11:10:31

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.200.144.21
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 46697
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;104.200.144.21.			IN	A

;; AUTHORITY SECTION:
.			403	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2020030300 1800 900 604800 86400

;; Query time: 117 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Mar 04 02:42:49 CST 2020
;; MSG SIZE  rcvd: 118

HOST信息:

21.144.200.104.in-addr.arpa domain name pointer sendpoker.com.

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
21.144.200.104.in-addr.arpa	name = sendpoker.com.

Authoritative answers can be found from:

最新评论:

IP	类型	评论内容	时间
192.241.175.48	attackbotsspam	2020-07-30 19:35:16,068 fail2ban.actions [18606]: NOTICE [sshd] Ban 192.241.175.48 2020-07-30 19:54:40,571 fail2ban.actions [18606]: NOTICE [sshd] Ban 192.241.175.48 2020-07-30 20:13:13,314 fail2ban.actions [18606]: NOTICE [sshd] Ban 192.241.175.48 2020-07-30 20:31:45,512 fail2ban.actions [18606]: NOTICE [sshd] Ban 192.241.175.48 2020-07-30 20:50:34,894 fail2ban.actions [18606]: NOTICE [sshd] Ban 192.241.175.48 ...	2020-09-04 18:33:24
201.63.224.82	attack	Honeypot attack, port: 445, PTR: 201-63-224-82.customer.tdatabrasil.net.br.	2020-09-04 18:42:22
128.14.230.12	attack	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-09-04T08:54:19Z and 2020-09-04T08:59:01Z	2020-09-04 18:31:05
179.95.39.41	attack	Honeypot attack, port: 445, PTR: 179.95.39.41.dynamic.adsl.gvt.net.br.	2020-09-04 19:07:46
61.155.2.142	attackspambots	Brute-force attempt banned	2020-09-04 18:47:50
180.242.177.179	attack	Lines containing failures of 180.242.177.179 Sep 2 22:06:19 newdogma sshd[8484]: Invalid user ssl from 180.242.177.179 port 40004 Sep 2 22:06:19 newdogma sshd[8484]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.242.177.179 Sep 2 22:06:21 newdogma sshd[8484]: Failed password for invalid user ssl from 180.242.177.179 port 40004 ssh2 Sep 2 22:06:23 newdogma sshd[8484]: Received disconnect from 180.242.177.179 port 40004:11: Bye Bye [preauth] Sep 2 22:06:23 newdogma sshd[8484]: Disconnected from invalid user ssl 180.242.177.179 port 40004 [preauth] Sep 2 22:23:11 newdogma sshd[12294]: Invalid user dg from 180.242.177.179 port 49156 Sep 2 22:23:11 newdogma sshd[12294]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.242.177.179 Sep 2 22:23:13 newdogma sshd[12294]: Failed password for invalid user dg from 180.242.177.179 port 49156 ssh2 Sep 2 22:23:14 newdogma sshd[12294]: Rec........ ------------------------------	2020-09-04 18:33:51
93.64.5.34	attackbots	2020-07-27 05:15:44,867 fail2ban.actions [18606]: NOTICE [sshd] Ban 93.64.5.34 2020-07-27 05:28:20,098 fail2ban.actions [18606]: NOTICE [sshd] Ban 93.64.5.34 2020-07-27 05:41:02,032 fail2ban.actions [18606]: NOTICE [sshd] Ban 93.64.5.34 2020-07-27 05:53:41,316 fail2ban.actions [18606]: NOTICE [sshd] Ban 93.64.5.34 2020-07-27 06:06:21,021 fail2ban.actions [18606]: NOTICE [sshd] Ban 93.64.5.34 ...	2020-09-04 19:01:02
39.153.252.94	attack	Sep 2 19:43:54 www3-7 sshd[25235]: Did not receive identification string from 39.153.252.94 port 40327 Sep 3 11:50:01 www3-7 sshd[13399]: Did not receive identification string from 39.153.252.94 port 48125 Sep 3 11:50:08 www3-7 sshd[13482]: Invalid user user from 39.153.252.94 port 54153 Sep 3 11:50:09 www3-7 sshd[13482]: Connection closed by 39.153.252.94 port 54153 [preauth] Sep 3 11:51:03 www3-7 sshd[13486]: Invalid user oracle from 39.153.252.94 port 38673 Sep 3 11:51:07 www3-7 sshd[13486]: Connection closed by 39.153.252.94 port 38673 [preauth] Sep 3 11:51:09 www3-7 sshd[13545]: Invalid user admin from 39.153.252.94 port 49882 Sep 3 11:51:10 www3-7 sshd[13545]: Connection closed by 39.153.252.94 port 49882 [preauth] Sep 3 11:51:19 www3-7 sshd[13547]: Invalid user test from 39.153.252.94 port 53810 Sep 3 11:51:27 www3-7 sshd[13547]: Connection closed by 39.153.252.94 port 53810 [preauth] Sep 3 11:51:50 www3-7 sshd[13554]: Invalid user hadoop from 39.153.2........ -------------------------------	2020-09-04 19:02:47
121.204.120.214	attack	Sep 3 21:21:54 m3 sshd[22254]: Failed password for r.r from 121.204.120.214 port 54144 ssh2 Sep 3 21:35:50 m3 sshd[23812]: Invalid user sispac from 121.204.120.214 Sep 3 21:35:53 m3 sshd[23812]: Failed password for invalid user sispac from 121.204.120.214 port 52848 ssh2 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=121.204.120.214	2020-09-04 19:07:06
165.90.239.203	attackbotsspam	Automatic report - Port Scan Attack	2020-09-04 18:55:03
181.114.70.201	attackbots	Lines containing failures of 181.114.70.201 Sep 3 18:39:46 omfg postfix/smtpd[15260]: connect from host-181-114-70-201.supernet.com.bo[181.114.70.201] Sep x@x ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=181.114.70.201	2020-09-04 19:05:21
13.76.212.215	attackspam	TCP ports : 13772 / 31765	2020-09-04 19:08:20
111.201.131.153	attackbots	Sep 4 13:19:56 root sshd[23011]: Invalid user a4 from 111.201.131.153 ...	2020-09-04 18:43:14
157.230.53.57	attack	TCP ports : 9076 / 10008 / 24560	2020-09-04 18:48:40
64.64.233.198	attackspam	2020-09-03 17:28:54,001 fail2ban.actions [1312]: NOTICE [sshd] Ban 64.64.233.198 2020-09-03 17:52:05,067 fail2ban.actions [1312]: NOTICE [sshd] Ban 64.64.233.198 2020-09-03 18:20:57,013 fail2ban.actions [1312]: NOTICE [sshd] Ban 64.64.233.198 2020-09-03 18:43:35,784 fail2ban.actions [1312]: NOTICE [sshd] Ban 64.64.233.198 2020-09-03 19:06:09,639 fail2ban.actions [1312]: NOTICE [sshd] Ban 64.64.233.198 ...	2020-09-04 19:06:10

最近上报的IP列表

113.173.50.157	45.143.223.40	105.12.2.92	103.12.161.196
49.145.235.132	171.35.172.44	132.144.178.222	162.223.226.188
115.216.56.39	47.103.9.234	115.207.107.147	101.51.59.228
95.47.49.250	208.33.226.110	103.136.43.174	49.235.21.109
45.183.172.20	103.119.141.203	103.100.83.238	101.108.4.36