104.21.23.70 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

IP	类型	评论内容	时间
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:19:00
104.21.23.233	spam	https://www.projecthoneypot.org/ip_104.21.23.233 https://multirbl.valli.org/lookup/104.21.23.233.html https://cleantalk.org/blacklists/104.21.23.233#anc140146	2022-12-29 00:13:51

类型

评论内容

时间

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:19:00

104.21.23.233

spam

https://www.projecthoneypot.org/ip_104.21.23.233
https://multirbl.valli.org/lookup/104.21.23.233.html
https://cleantalk.org/blacklists/104.21.23.233#anc140146

2022-12-29 00:13:51

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.23.70
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 26619
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.23.70.			IN	A

;; AUTHORITY SECTION:
.			593	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021801 1800 900 604800 86400

;; Query time: 137 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 03:29:26 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 70.23.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 70.23.21.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
182.61.170.213	attack	Nov 18 20:22:33 OPSO sshd\[26665\]: Invalid user http from 182.61.170.213 port 43900 Nov 18 20:22:33 OPSO sshd\[26665\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213 Nov 18 20:22:35 OPSO sshd\[26665\]: Failed password for invalid user http from 182.61.170.213 port 43900 ssh2 Nov 18 20:26:30 OPSO sshd\[27358\]: Invalid user buffer from 182.61.170.213 port 51810 Nov 18 20:26:30 OPSO sshd\[27358\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.170.213	2019-11-19 03:45:53
113.104.242.213	attack	Nov 18 19:54:05 root sshd[20985]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=113.104.242.213 Nov 18 19:54:07 root sshd[20985]: Failed password for invalid user famine from 113.104.242.213 port 35880 ssh2 Nov 18 19:58:30 root sshd[21059]: Failed password for root from 113.104.242.213 port 35853 ssh2 ...	2019-11-19 03:52:50
163.172.206.78	attackspam	Nov 11 00:43:17 woltan sshd[1983]: Failed password for invalid user ftpuser from 163.172.206.78 port 55096 ssh2	2019-11-19 04:07:09
41.242.1.163	attackspam	Wordpress login attempts	2019-11-19 04:12:11
23.251.87.187	attack	Lines containing failures of 23.251.87.187 Nov 18 19:15:47 shared12 sshd[18999]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.87.187 user=r.r Nov 18 19:15:49 shared12 sshd[18999]: Failed password for r.r from 23.251.87.187 port 50936 ssh2 Nov 18 19:15:49 shared12 sshd[18999]: Received disconnect from 23.251.87.187 port 50936:11: Bye Bye [preauth] Nov 18 19:15:49 shared12 sshd[18999]: Disconnected from authenticating user r.r 23.251.87.187 port 50936 [preauth] Nov 18 19:36:30 shared12 sshd[24743]: Invalid user guest7 from 23.251.87.187 port 36334 Nov 18 19:36:30 shared12 sshd[24743]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=23.251.87.187 Nov 18 19:36:32 shared12 sshd[24743]: Failed password for invalid user guest7 from 23.251.87.187 port 36334 ssh2 Nov 18 19:36:32 shared12 sshd[24743]: Received disconnect from 23.251.87.187 port 36334:11: Bye Bye [preauth] Nov 18 19:36:32 sha........ ------------------------------	2019-11-19 03:56:24
45.143.221.15	attackspam	\[2019-11-18 14:45:21\] NOTICE\[2601\] chan_sip.c: Registration from '"948" \' failed for '45.143.221.15:5646' - Wrong password \[2019-11-18 14:45:21\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-18T14:45:21.097-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="948",SessionID="0x7fdf2c411158",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.15/5646",Challenge="157c5ca2",ReceivedChallenge="157c5ca2",ReceivedHash="031bcaf686e3fdd8508bbdfda106827f" \[2019-11-18 14:45:21\] NOTICE\[2601\] chan_sip.c: Registration from '"948" \' failed for '45.143.221.15:5646' - Wrong password \[2019-11-18 14:45:21\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-18T14:45:21.228-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="948",SessionID="0x7fdf2c3f5928",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.1	2019-11-19 03:47:39
118.70.233.163	attack	Nov 18 15:26:35 ovpn sshd[9424]: Invalid user dgabruck from 118.70.233.163 Nov 18 15:26:35 ovpn sshd[9424]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.163 Nov 18 15:26:37 ovpn sshd[9424]: Failed password for invalid user dgabruck from 118.70.233.163 port 37634 ssh2 Nov 18 15:26:37 ovpn sshd[9424]: Received disconnect from 118.70.233.163 port 37634:11: Bye Bye [preauth] Nov 18 15:26:37 ovpn sshd[9424]: Disconnected from 118.70.233.163 port 37634 [preauth] Nov 18 15:48:05 ovpn sshd[14247]: Invalid user spiderman from 118.70.233.163 Nov 18 15:48:05 ovpn sshd[14247]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.70.233.163 ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=118.70.233.163	2019-11-19 04:11:07
132.247.172.26	attack	Nov 18 20:36:43 sauna sshd[78545]: Failed password for root from 132.247.172.26 port 53776 ssh2 ...	2019-11-19 04:14:29
223.198.169.239	attackspambots	The%20IP%20has%20triggered%20Cloudflare%20WAF.%20Report%20generated%20by%20Cloudflare-WAF-to-AbuseIPDB%20(https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)	2019-11-19 04:20:07
112.85.42.237	attack	SSH Brute Force, server-1 sshd[22508]: Failed password for root from 112.85.42.237 port 16740 ssh2	2019-11-19 04:08:34
111.202.100.31	attackbots	The IP has triggered Cloudflare WAF. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB)	2019-11-19 04:19:16
174.91.86.214	attackspambots	Automatic report - Port Scan Attack	2019-11-19 03:50:04
46.37.215.176	attack	1574088495 - 11/18/2019 15:48:15 Host: 46.37.215.176/46.37.215.176 Port: 6001 TCP Blocked	2019-11-19 04:00:19
192.144.140.20	attack	ssh failed login	2019-11-19 04:01:21
201.191.113.201	attackbots	Automatic report - Port Scan Attack	2019-11-19 04:16:57

最近上报的IP列表

104.21.233.144	104.21.234.221	104.21.234.220	104.21.234.90
104.21.234.91	104.21.24.146	104.21.24.102	104.21.24.212
104.21.24.188	104.21.24.206	104.21.25.138	104.21.24.88
104.21.24.154	104.21.25.151	104.21.24.227	104.21.25.239
104.21.25.221	104.21.25.248	104.21.26.70	104.21.26.72