104.21.2.249 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:19:00
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:13:51

类型

评论内容

时间

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:19:00

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:13:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.2.249
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 61023
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.2.249.			IN	A

;; AUTHORITY SECTION:
.			179	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021700 1800 900 604800 86400

;; Query time: 19 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:14:51 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 249.2.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 249.2.21.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
122.51.211.131	attackspambots	Jul 23 13:34:35 santamaria sshd\[13484\]: Invalid user admin from 122.51.211.131 Jul 23 13:34:35 santamaria sshd\[13484\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.51.211.131 Jul 23 13:34:37 santamaria sshd\[13484\]: Failed password for invalid user admin from 122.51.211.131 port 45940 ssh2 ...	2020-07-23 19:45:27
123.207.94.252	attackspam	Invalid user mn from 123.207.94.252 port 62841	2020-07-23 19:27:30
139.162.102.46	attackbotsspam	port scan and connect, tcp 3128 (squid-http)	2020-07-23 19:32:48
178.128.248.121	attackbots	k+ssh-bruteforce	2020-07-23 19:16:30
150.136.101.56	attackspambots	Invalid user jmu from 150.136.101.56 port 51126	2020-07-23 19:12:47
118.27.4.225	attackspambots	Invalid user hw from 118.27.4.225 port 38416	2020-07-23 19:28:08
185.176.27.198	attackbotsspam	Jul 23 13:18:48 debian-2gb-nbg1-2 kernel: \[17761653.943662\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=185.176.27.198 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=245 ID=39270 PROTO=TCP SPT=57011 DPT=12007 WINDOW=1024 RES=0x00 SYN URGP=0	2020-07-23 19:34:47
106.12.59.23	attack	Invalid user ella from 106.12.59.23 port 43576	2020-07-23 19:44:06
103.145.12.170	attack	[2020-07-23 07:13:30] NOTICE[1277] chan_sip.c: Registration from '' failed for '103.145.12.170:62689' - Wrong password [2020-07-23 07:13:30] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-23T07:13:30.167-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="722",SessionID="0x7f17545b1d48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.170/62689",Challenge="5c9969c5",ReceivedChallenge="5c9969c5",ReceivedHash="1b11190150999e2443037f782d04e2d2" [2020-07-23 07:16:43] NOTICE[1277] chan_sip.c: Registration from '' failed for '103.145.12.170:56764' - Wrong password [2020-07-23 07:16:43] SECURITY[1295] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-07-23T07:16:43.816-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="733",SessionID="0x7f175452b198",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.170 ...	2020-07-23 19:29:04
49.235.119.150	attackbots	Jul 23 06:20:58 Tower sshd[12318]: Connection from 49.235.119.150 port 60996 on 192.168.10.220 port 22 rdomain "" Jul 23 06:21:01 Tower sshd[12318]: Invalid user lighttpd from 49.235.119.150 port 60996 Jul 23 06:21:01 Tower sshd[12318]: error: Could not get shadow information for NOUSER Jul 23 06:21:01 Tower sshd[12318]: Failed password for invalid user lighttpd from 49.235.119.150 port 60996 ssh2 Jul 23 06:21:01 Tower sshd[12318]: Received disconnect from 49.235.119.150 port 60996:11: Bye Bye [preauth] Jul 23 06:21:01 Tower sshd[12318]: Disconnected from invalid user lighttpd 49.235.119.150 port 60996 [preauth]	2020-07-23 19:21:39
188.44.34.95	attack	firewall-block, port(s): 139/tcp	2020-07-23 19:20:25
93.107.187.162	attackbots	Invalid user maxx from 93.107.187.162 port 49826	2020-07-23 19:29:37
138.197.175.236	attack	TCP (SYN) 138.197.175.236:59358 -> port 32614, len 44	2020-07-23 19:16:54
46.209.153.46	attack	firewall-block, port(s): 445/tcp	2020-07-23 19:41:30
165.22.186.178	attack	Invalid user rich from 165.22.186.178 port 39096	2020-07-23 19:13:45

最近上报的IP列表

104.21.2.27	104.21.2.233	104.21.2.3	104.21.2.31
104.21.2.32	104.21.2.41	104.21.2.4	104.21.2.49
104.21.2.48	104.21.2.42	104.21.2.38	104.21.68.13
104.21.2.6	104.21.2.47	104.21.2.52	104.21.2.50
104.21.2.60	104.21.2.71	104.21.2.74	104.21.68.130