必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.21.23.233 spam
https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146
2022-12-29 00:19:00
104.21.23.233 spam
https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146
2022-12-29 00:13:51
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.2.196
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 56125
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.2.196.			IN	A

;; AUTHORITY SECTION:
.			240	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:14:42 CST 2022
;; MSG SIZE  rcvd: 105
HOST信息:
Host 196.2.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 196.2.21.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
138.197.105.79 attackspam
2019-07-07T01:14:47.880322abusebot-2.cloudsearch.cf sshd\[9320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.197.105.79  user=root
2019-07-07 10:13:13
182.75.201.82 attack
Jul  7 03:58:30 bouncer sshd\[28977\]: Invalid user he from 182.75.201.82 port 46546
Jul  7 03:58:30 bouncer sshd\[28977\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.75.201.82 
Jul  7 03:58:32 bouncer sshd\[28977\]: Failed password for invalid user he from 182.75.201.82 port 46546 ssh2
...
2019-07-07 10:49:57
114.40.166.122 attackbotsspam
Honeypot attack, port: 23, PTR: 114-40-166-122.dynamic-ip.hinet.net.
2019-07-07 10:42:21
89.231.11.25 attack
2019-07-07T02:19:57.199544cavecanem sshd[23551]: Invalid user tf from 89.231.11.25 port 51090
2019-07-07T02:19:57.202117cavecanem sshd[23551]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.231.11.25
2019-07-07T02:19:57.199544cavecanem sshd[23551]: Invalid user tf from 89.231.11.25 port 51090
2019-07-07T02:19:59.534056cavecanem sshd[23551]: Failed password for invalid user tf from 89.231.11.25 port 51090 ssh2
2019-07-07T02:23:36.457377cavecanem sshd[24432]: Invalid user abc from 89.231.11.25 port 47474
2019-07-07T02:23:36.459926cavecanem sshd[24432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.231.11.25
2019-07-07T02:23:36.457377cavecanem sshd[24432]: Invalid user abc from 89.231.11.25 port 47474
2019-07-07T02:23:38.857041cavecanem sshd[24432]: Failed password for invalid user abc from 89.231.11.25 port 47474 ssh2
2019-07-07T02:27:09.853564cavecanem sshd[25345]: pam_unix(sshd:auth): authenticatio
...
2019-07-07 10:22:33
54.37.157.82 attackspam
Jul  7 02:53:10 lnxweb62 sshd[28895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.157.82
Jul  7 02:53:12 lnxweb62 sshd[28895]: Failed password for invalid user spamfilter from 54.37.157.82 port 54598 ssh2
Jul  7 02:57:25 lnxweb62 sshd[31343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=54.37.157.82
2019-07-07 10:50:24
139.59.181.7 attackbotsspam
Jul  7 01:04:55 *** sshd[17633]: User root from 139.59.181.7 not allowed because not listed in AllowUsers
2019-07-07 10:05:20
192.241.204.70 attackspambots
110/tcp 2086/tcp 53790/tcp...
[2019-05-10/07-06]60pkt,46pt.(tcp),2pt.(udp)
2019-07-07 10:12:55
129.211.24.70 attackspam
2019-07-07T02:16:26.052948hub.schaetter.us sshd\[14175\]: Invalid user erpnext from 129.211.24.70
2019-07-07T02:16:26.087401hub.schaetter.us sshd\[14175\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.70
2019-07-07T02:16:27.887224hub.schaetter.us sshd\[14175\]: Failed password for invalid user erpnext from 129.211.24.70 port 51296 ssh2
2019-07-07T02:23:09.635628hub.schaetter.us sshd\[14211\]: Invalid user red5 from 129.211.24.70
2019-07-07T02:23:09.668145hub.schaetter.us sshd\[14211\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.211.24.70
...
2019-07-07 10:42:55
132.232.51.143 attackspambots
firewall-block, port(s): 80/tcp, 1433/tcp, 8088/tcp, 9200/tcp
2019-07-07 10:32:14
49.150.103.92 attack
Jul  6 19:10:25 localhost kernel: [13698818.402687] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=49.150.103.92 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=26209 DF PROTO=TCP SPT=11577 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul  6 19:10:25 localhost kernel: [13698818.402718] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:a8:41:08:00 SRC=49.150.103.92 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=26209 DF PROTO=TCP SPT=11577 DPT=8291 SEQ=1983425347 ACK=0 WINDOW=8192 RES=0x00 SYN URGP=0 OPT (0204058C0103030201010402) 
Jul  6 19:10:29 localhost kernel: [13698822.441968] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=49.150.103.92 DST=[mungedIP2] LEN=52 TOS=0x00 PREC=0x00 TTL=117 ID=19919 DF PROTO=TCP SPT=11586 DPT=8291 WINDOW=8192 RES=0x00 SYN URGP=0 
Jul  6 19:10:29 localhost kernel: [13698822.441978] iptables_INPUT_denied: IN=eth0 OUT= MAC=f2:3c:91:84:83:95:84:78:ac:57:aa:c1:08:00 SRC=49.150
2019-07-07 10:17:47
185.173.35.33 attackspam
5289/tcp 47808/udp 5906/tcp...
[2019-05-06/07-06]80pkt,42pt.(tcp),8pt.(udp)
2019-07-07 10:15:16
185.211.245.198 attackbots
Jul  7 02:10:43 mail postfix/smtpd\[27755\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  7 02:10:57 mail postfix/smtpd\[27755\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  7 02:14:20 mail postfix/smtpd\[27813\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
Jul  7 02:58:14 mail postfix/smtpd\[28323\]: warning: unknown\[185.211.245.198\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6\
2019-07-07 10:04:26
220.231.47.58 attack
Brute force attempt
2019-07-07 10:31:52
121.228.54.213 attack
Jul  7 01:01:51 mxgate1 postfix/postscreen[31845]: CONNECT from [121.228.54.213]:59362 to [176.31.12.44]:25
Jul  7 01:01:51 mxgate1 postfix/dnsblog[31890]: addr 121.228.54.213 listed by domain zen.spamhaus.org as 127.0.0.11
Jul  7 01:01:57 mxgate1 postfix/postscreen[31845]: DNSBL rank 2 for [121.228.54.213]:59362
Jul x@x
Jul  7 01:01:59 mxgate1 postfix/postscreen[31845]: DISCONNECT [121.228.54.213]:59362


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=121.228.54.213
2019-07-07 10:49:17
35.200.120.201 attackbotsspam
Jul  7 02:35:04 web2 sshd[1393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.200.120.201
Jul  7 02:35:05 web2 sshd[1393]: Failed password for invalid user zb from 35.200.120.201 port 54082 ssh2
2019-07-07 10:11:41

最近上报的IP列表

104.21.2.172 104.21.2.189 104.21.2.198 104.21.2.199
104.21.2.20 104.21.2.206 104.21.68.127 104.21.2.222
104.21.2.213 104.21.2.207 104.21.2.205 104.21.2.225
104.21.2.202 104.21.2.2 104.21.2.224 104.21.2.23
104.21.68.128 104.21.2.231 104.21.2.235 104.21.2.226