104.21.73.239 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.73.239
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 14563
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.73.239.			IN	A

;; AUTHORITY SECTION:
.			599	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 57 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:52:14 CST 2022
;; MSG SIZE  rcvd: 106

HOST信息:

Host 239.73.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 239.73.21.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
106.75.215.121	attack	Nov 28 15:24:28 MainVPS sshd[24479]: Invalid user greg from 106.75.215.121 port 50306 Nov 28 15:24:28 MainVPS sshd[24479]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.215.121 Nov 28 15:24:28 MainVPS sshd[24479]: Invalid user greg from 106.75.215.121 port 50306 Nov 28 15:24:29 MainVPS sshd[24479]: Failed password for invalid user greg from 106.75.215.121 port 50306 ssh2 Nov 28 15:29:13 MainVPS sshd[1420]: Invalid user 123456 from 106.75.215.121 port 54630 ...	2019-11-29 04:34:21
37.49.230.63	attackbotsspam	\[2019-11-28 15:19:32\] NOTICE\[2754\] chan_sip.c: Registration from '"222" \' failed for '37.49.230.63:5667' - Wrong password \[2019-11-28 15:19:32\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:19:32.976-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222",SessionID="0x7f26c4a90648",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.230.63/5667",Challenge="0cc859a2",ReceivedChallenge="0cc859a2",ReceivedHash="2e6a039c3a9fa8e690bf7fc5e7a93ce0" \[2019-11-28 15:19:33\] NOTICE\[2754\] chan_sip.c: Registration from '"222" \' failed for '37.49.230.63:5667' - Wrong password \[2019-11-28 15:19:33\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:19:33.084-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="222",SessionID="0x7f26c40e0438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/37.49.2	2019-11-29 04:37:08
49.88.112.65	attack	Nov 28 17:12:11 hcbbdb sshd\[5928\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Nov 28 17:12:13 hcbbdb sshd\[5928\]: Failed password for root from 49.88.112.65 port 44445 ssh2 Nov 28 17:13:18 hcbbdb sshd\[6067\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root Nov 28 17:13:20 hcbbdb sshd\[6067\]: Failed password for root from 49.88.112.65 port 39023 ssh2 Nov 28 17:14:27 hcbbdb sshd\[6172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.65 user=root	2019-11-29 04:43:32
43.245.219.130	attackspambots	Nov 28 14:28:36 venus sshd\[30966\]: Invalid user admin from 43.245.219.130 port 48967 Nov 28 14:28:36 venus sshd\[30966\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.245.219.130 Nov 28 14:28:38 venus sshd\[30966\]: Failed password for invalid user admin from 43.245.219.130 port 48967 ssh2 ...	2019-11-29 04:50:02
66.249.66.24	attack	Automatic report - Banned IP Access	2019-11-29 04:39:49
5.228.232.101	attackbots	postfix (unknown user, SPF fail or relay access denied)	2019-11-29 05:01:37
185.74.5.170	attackspambots	Nov 28 21:19:12 mc1 kernel: \[6258575.581892\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=32881 PROTO=TCP SPT=56292 DPT=3296 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 21:20:12 mc1 kernel: \[6258636.189230\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=2163 PROTO=TCP SPT=56292 DPT=2581 WINDOW=1024 RES=0x00 SYN URGP=0 Nov 28 21:21:05 mc1 kernel: \[6258688.952959\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=185.74.5.170 DST=159.69.205.51 LEN=44 TOS=0x00 PREC=0x00 TTL=237 ID=57053 PROTO=TCP SPT=56292 DPT=137 WINDOW=1024 RES=0x00 SYN URGP=0 ...	2019-11-29 04:29:45
113.172.165.49	attack	Nov 28 15:15:42 mxgate1 postfix/postscreen[9658]: CONNECT from [113.172.165.49]:56442 to [176.31.12.44]:25 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9670]: addr 113.172.165.49 listed by domain cbl.abuseat.org as 127.0.0.2 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9661]: addr 113.172.165.49 listed by domain zen.spamhaus.org as 127.0.0.11 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9661]: addr 113.172.165.49 listed by domain zen.spamhaus.org as 127.0.0.4 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9661]: addr 113.172.165.49 listed by domain zen.spamhaus.org as 127.0.0.3 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9659]: addr 113.172.165.49 listed by domain bl.spamcop.net as 127.0.0.2 Nov 28 15:15:42 mxgate1 postfix/dnsblog[9662]: addr 113.172.165.49 listed by domain b.barracudacentral.org as 127.0.0.2 Nov 28 15:15:48 mxgate1 postfix/postscreen[9658]: DNSBL rank 5 for [113.172.165.49]:56442 Nov 28 15:15:48 mxgate1 postfix/tlsproxy[9849]: CONNECT from [113.172.165.49]:56442 Nov x@x ........ ------------------------------------	2019-11-29 04:32:29
82.77.134.150	attack	Automatic report - Port Scan Attack	2019-11-29 04:48:40
182.52.90.164	attackspam	Invalid user chocs from 182.52.90.164 port 33942	2019-11-29 05:02:30
62.90.235.90	attack	Invalid user geister from 62.90.235.90 port 45950	2019-11-29 04:33:37
178.156.202.83	attackbots	HTTP SQL Injection Attempt	2019-11-29 04:41:09
80.82.65.60	attack	11/28/2019-15:46:26.873621 80.82.65.60 Protocol: 6 ET DROP Dshield Block Listed Source group 1	2019-11-29 04:46:46
45.143.221.25	attack	\[2019-11-28 15:42:14\] NOTICE\[2754\] chan_sip.c: Registration from '"40" \' failed for '45.143.221.25:5689' - Wrong password \[2019-11-28 15:42:14\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:42:14.205-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="40",SessionID="0x7f26c445f668",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221.25/5689",Challenge="37b7eb6e",ReceivedChallenge="37b7eb6e",ReceivedHash="b79a9479737ce55837caee0e05ea28a5" \[2019-11-28 15:42:14\] NOTICE\[2754\] chan_sip.c: Registration from '"40" \' failed for '45.143.221.25:5689' - Wrong password \[2019-11-28 15:42:14\] SECURITY\[2765\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-28T15:42:14.403-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="40",SessionID="0x7f26c40e0438",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/45.143.221	2019-11-29 04:52:06
24.63.224.206	attackbots	Nov 28 19:41:32 microserver sshd[6179]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 user=root Nov 28 19:41:34 microserver sshd[6179]: Failed password for root from 24.63.224.206 port 39088 ssh2 Nov 28 19:50:29 microserver sshd[7399]: Invalid user kylo from 24.63.224.206 port 37600 Nov 28 19:50:29 microserver sshd[7399]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 Nov 28 19:50:31 microserver sshd[7399]: Failed password for invalid user kylo from 24.63.224.206 port 37600 ssh2 Nov 28 20:08:06 microserver sshd[9528]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.63.224.206 user=root Nov 28 20:08:08 microserver sshd[9528]: Failed password for root from 24.63.224.206 port 47574 ssh2 Nov 28 20:17:09 microserver sshd[10800]: Invalid user wwwrun from 24.63.224.206 port 39890 Nov 28 20:17:09 microserver sshd[10800]: pam_unix(sshd:auth): authentication failure	2019-11-29 04:47:59

最近上报的IP列表

104.21.73.237	104.21.73.24	104.21.73.238	104.21.73.241
104.21.73.242	104.21.73.246	104.21.73.247	104.21.73.243
104.21.73.244	104.21.73.248	104.21.73.251	104.21.73.240
104.21.73.252	104.21.73.254	104.21.73.26	104.21.73.27
104.21.73.250	104.21.73.3	104.21.73.30	104.21.73.28