必须是合法有效的IP地址, 可以是IPv4或者是IPv6, 例如127.0.0.1或者2001:DB8:0:0:8:800:200C:417A
基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:
暂无关于此IP的讨论, 沙发请点上方按钮
相同子网IP讨论:
IP 类型 评论内容 时间
104.21.75.2 spam
Spammer blacklist in https://www.projecthoneypot.org/ip_104.21.75.2 https://multirbl.valli.org/lookup/104.21.75.2.html
2022-12-29 00:00:44
WHOIS信息:
b
DIG信息:
; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.75.162
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 18080
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.75.162.			IN	A

;; AUTHORITY SECTION:
.			418	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022022201 1800 900 604800 86400

;; Query time: 59 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Wed Feb 23 04:04:45 CST 2022
;; MSG SIZE  rcvd: 106
HOST信息:
Host 162.75.21.104.in-addr.arpa. not found: 3(NXDOMAIN)
NSLOOKUP信息:
Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 162.75.21.104.in-addr.arpa: NXDOMAIN
相关IP信息:
最新评论:
IP 类型 评论内容 时间
189.93.26.195 attack
(sshd) Failed SSH login from 189.93.26.195 (BR/Brazil/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Sep  3 12:42:13 server5 sshd[22343]: Failed password for root from 189.93.26.195 port 35789 ssh2
Sep  3 12:42:16 server5 sshd[22415]: Failed password for root from 189.93.26.195 port 35790 ssh2
Sep  3 12:42:17 server5 sshd[22461]: Invalid user ubnt from 189.93.26.195
Sep  3 12:42:19 server5 sshd[22461]: Failed password for invalid user ubnt from 189.93.26.195 port 35791 ssh2
Sep  3 12:42:23 server5 sshd[22491]: Failed password for root from 189.93.26.195 port 35792 ssh2
2020-09-05 04:15:49
15.207.21.107 attackspam
xmlrpc attack
2020-09-05 04:01:06
41.92.107.180 attackbotsspam
Sep  3 18:42:22 mellenthin postfix/smtpd[19910]: NOQUEUE: reject: RCPT from unknown[41.92.107.180]: 554 5.7.1 Service unavailable; Client host [41.92.107.180] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/41.92.107.180; from= to= proto=ESMTP helo=<[41.92.107.180]>
2020-09-05 04:21:38
141.156.198.128 attack
Sep  3 18:13:45 kunden sshd[19183]: Address 141.156.198.128 maps to pool-141-156-198-128.washdc.fios.verizon.net, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Sep  3 18:13:45 kunden sshd[19183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.156.198.128  user=r.r
Sep  3 18:13:47 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:49 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:52 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:54 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:57 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:59 kunden sshd[19183]: Failed password for r.r from 141.156.198.128 port 33418 ssh2
Sep  3 18:13:59 kunden sshd[19183]: PAM 5 more authentication failu........
-------------------------------
2020-09-05 04:15:30
58.49.76.100 attackspambots
Sep  4 01:45:22 sso sshd[19623]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.49.76.100
Sep  4 01:45:24 sso sshd[19623]: Failed password for invalid user testftp from 58.49.76.100 port 48096 ssh2
...
2020-09-05 04:06:24
178.32.192.85 attackbotsspam
2020-09-03 09:28:43 server sshd[57030]: Failed password for invalid user db2 from 178.32.192.85 port 56664 ssh2
2020-09-05 04:05:32
202.72.225.17 attack
202.72.225.17 (IN/India/-), 3 distributed sshd attacks on account [admin] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  4 09:38:32 internal2 sshd[2943]: Invalid user admin from 202.72.225.17 port 46465
Sep  4 09:50:52 internal2 sshd[12371]: Invalid user admin from 64.227.88.245 port 33894
Sep  4 09:51:07 internal2 sshd[12550]: Invalid user admin from 64.227.88.245 port 35738

IP Addresses Blocked:
2020-09-05 04:13:52
207.58.170.145 attackspambots
Received: from netlemonger.com (207.58.170.145.nettlemonger.com. [207.58.170.145])
        by mx.google.com with ESMTPS id e1si823792qka.206.2020.09.03.00.00.11
        for <>
        (version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);
        Thu, 03 Sep 2020 00:00:11 -0700 (PDT)
Received-SPF: neutral (google.com: 207.58.170.145 is neither permitted nor denied by best guess record for domain of return@restojob.lp) client-ip=207.58.170.145;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@nettlemonger.com header.s=key1 header.b=VfrF941Y;
       spf=neutral (google.com: 207.58.170.145 is neither permitted nor denied by best guess record for domain of return@restojob.lp) smtp.mailfrom=return@restojob.lp;
       dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=nettlemonger.com
2020-09-05 04:07:09
128.199.169.90 attackbotsspam
firewall-block, port(s): 31341/tcp
2020-09-05 04:08:09
94.132.0.248 attackbots
SMB Server BruteForce Attack
2020-09-05 04:03:43
123.180.60.235 attack
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: connect from unknown[123.180.60.235]
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: lost connection after EHLO from unknown[123.180.60.235]
Sep  3 17:32:18 nirvana postfix/smtpd[31178]: disconnect from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: connect from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: lost connection after CONNECT from unknown[123.180.60.235]
Sep  3 17:35:46 nirvana postfix/smtpd[24554]: disconnect from unknown[123.180.60.235]
Sep  3 17:39:15 nirvana postfix/smtpd[25407]: connect from unknown[123.180.60.235]
Sep  3 17:39:15 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SASL LOGIN authentication failed: authentication failure
Sep  3 17:39:17 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SASL LOGIN authentication failed: authentication failure
Sep  3 17:39:19 nirvana postfix/smtpd[25407]: warning: unknown[123.180.60.235]: SA........
-------------------------------
2020-09-05 04:11:45
139.99.120.130 attack
5x Failed Password
2020-09-05 04:15:07
200.229.193.149 attackspambots
Sep  4 19:52:47 vps-51d81928 sshd[214417]: Failed password for root from 200.229.193.149 port 57492 ssh2
Sep  4 19:56:58 vps-51d81928 sshd[214475]: Invalid user gix from 200.229.193.149 port 34764
Sep  4 19:56:58 vps-51d81928 sshd[214475]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.229.193.149 
Sep  4 19:56:58 vps-51d81928 sshd[214475]: Invalid user gix from 200.229.193.149 port 34764
Sep  4 19:57:01 vps-51d81928 sshd[214475]: Failed password for invalid user gix from 200.229.193.149 port 34764 ssh2
...
2020-09-05 04:16:47
185.220.102.240 attackspambots
Sep  4 21:04:44 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:47 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:50 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
Sep  4 21:04:52 piServer sshd[9624]: Failed password for root from 185.220.102.240 port 14996 ssh2
...
2020-09-05 04:24:33
185.228.228.166 attack
Sep  3 18:42:48 mellenthin postfix/smtpd[20267]: NOQUEUE: reject: RCPT from unknown[185.228.228.166]: 554 5.7.1 Service unavailable; Client host [185.228.228.166] blocked using zen.spamhaus.org; https://www.spamhaus.org/query/ip/185.228.228.166; from= to= proto=ESMTP helo=<[185.228.228.166]>
2020-09-05 04:03:56

最近上报的IP列表

104.21.75.158 104.21.76.123 104.21.76.160 133.5.81.71
104.21.76.209 104.21.77.253 104.21.79.112 104.21.79.215
104.21.8.14 104.21.8.21 104.21.80.11 104.21.80.199
104.21.81.130 104.21.81.168 15.29.123.244 104.21.81.179
104.21.81.38 104.21.81.47 104.21.81.60 104.21.82.14