104.21.76.57 - IPInfo

基本信息:

城市(city): unknown

省份(region): unknown

国家(country): United States

运营商(isp): unknown

主机名(hostname): unknown

机构(organization): unknown

使用类型(Usage Type): unknown

用户上报:

点此参与IP信息讨论

暂无关于此IP的讨论, 沙发请点上方按钮

相同子网IP讨论:

暂无关于此IP所属子网相关IP的讨论.

WHOIS信息:

DIG信息:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 104.21.76.57
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27485
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;104.21.76.57.			IN	A

;; AUTHORITY SECTION:
.			600	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022021701 1800 900 604800 86400

;; Query time: 17 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Feb 18 02:55:50 CST 2022
;; MSG SIZE  rcvd: 105

HOST信息:

Host 57.76.21.104.in-addr.arpa. not found: 3(NXDOMAIN)

NSLOOKUP信息:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 57.76.21.104.in-addr.arpa: NXDOMAIN

最新评论:

IP	类型	评论内容	时间
116.228.53.173	attackspambots	Jul 5 06:25:59 mail sshd\[16835\]: Invalid user workshop from 116.228.53.173 Jul 5 06:25:59 mail sshd\[16835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=116.228.53.173 Jul 5 06:26:01 mail sshd\[16835\]: Failed password for invalid user workshop from 116.228.53.173 port 41463 ssh2 ...	2019-07-05 13:39:40
128.199.83.103	attackspam	2019-07-05T04:56:17.207500cavecanem sshd[21691]: Invalid user andes from 128.199.83.103 port 33506 2019-07-05T04:56:17.209904cavecanem sshd[21691]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.83.103 2019-07-05T04:56:17.207500cavecanem sshd[21691]: Invalid user andes from 128.199.83.103 port 33506 2019-07-05T04:56:19.155385cavecanem sshd[21691]: Failed password for invalid user andes from 128.199.83.103 port 33506 ssh2 2019-07-05T04:58:53.610968cavecanem sshd[22335]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.83.103 user=root 2019-07-05T04:58:55.305156cavecanem sshd[22335]: Failed password for root from 128.199.83.103 port 58214 ssh2 2019-07-05T05:01:26.291755cavecanem sshd[23051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.83.103 user=tomcat 2019-07-05T05:01:28.322725cavecanem sshd[23051]: Failed password for tomcat from 128.199 ...	2019-07-05 13:39:10
46.166.142.35	attack	\[2019-07-05 01:27:07\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-05T01:27:07.409-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441244739005",SessionID="0x7f02f81b2088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.142.35/60685",ACLName="no_extension_match" \[2019-07-05 01:27:14\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-05T01:27:14.773-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441254929805",SessionID="0x7f02f8335788",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.142.35/55250",ACLName="no_extension_match" \[2019-07-05 01:27:16\] SECURITY\[13451\] res_security_log.c: SecurityEvent="FailedACL",EventTV="2019-07-05T01:27:16.693-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="011441294507632",SessionID="0x7f02f869b578",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/46.166.142.35/58058",ACLName="no_	2019-07-05 13:41:17
217.112.128.144	attack	Postfix DNSBL listed. Trying to send SPAM.	2019-07-05 14:04:10
219.233.194.178	attackbots	Jul 5 01:40:54 plusreed sshd[5397]: Invalid user oe from 219.233.194.178 ...	2019-07-05 13:58:09
186.219.25.38	attack	ssh failed login	2019-07-05 13:49:09
45.121.29.254	attackbotsspam	Login attack in my domain	2019-07-05 14:05:41
144.76.98.234	attackbots	(sshd) Failed SSH login from 144.76.98.234 (static.234.98.76.144.clients.your-server.de): 5 in the last 3600 secs	2019-07-05 13:55:59
190.133.161.3	attack	2019-07-04 22:50:55 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:8410 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-07-04 22:51:24 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:54803 I=[10.100.18.21]:25 (error: Connection reset by peer) 2019-07-05 00:21:34 unexpected disconnection while reading SMTP command from r190-133-161-3.dialup.adsl.anteldata.net.uy [190.133.161.3]:24308 I=[10.100.18.21]:25 (error: Connection reset by peer) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=190.133.161.3	2019-07-05 14:10:52
92.118.37.81	attackbotsspam	05.07.2019 05:05:03 Connection to port 22156 blocked by firewall	2019-07-05 14:17:34
200.123.2.171	attack	timhelmke.de 200.123.2.171 \[05/Jul/2019:00:45:58 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4067 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36" timhelmke.de 200.123.2.171 \[05/Jul/2019:00:46:00 +0200\] "POST /xmlrpc.php HTTP/1.1" 200 4067 "-" "Mozilla/5.0 \(Windows NT 6.1\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/59.0.3071.109 Safari/537.36"	2019-07-05 13:38:22
220.77.119.92	attackbots	Telnet Server BruteForce Attack	2019-07-05 13:46:47
113.161.162.52	attack	@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-07-03 15:45:40,533 INFO [shellcode_manager] (113.161.162.52) no match, writing hexdump (c016e418339a471a76b4f77e9eae8708 :2078615) - MS17010 (EternalBlue)	2019-07-05 14:01:38
41.212.28.227	attack	2019-07-04 18:37:41 H=(41.212.28.227.wananchi.com) [41.212.28.227]:48802 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=41.212.28.227) 2019-07-04 18:37:42 unexpected disconnection while reading SMTP command from (41.212.28.227.wananchi.com) [41.212.28.227]:48802 I=[10.100.18.25]:25 (error: Connection reset by peer) 2019-07-04 19:41:19 H=(41.212.28.227.wananchi.com) [41.212.28.227]:24712 I=[10.100.18.25]:25 F=: Host/domain is listed in RBL cbl.abuseat.org (Blocked - see hxxp://www.abuseat.org/lookup.cgi?ip=41.212.28.227) ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.212.28.227	2019-07-05 13:25:01
64.31.33.70	attackspambots	\[2019-07-05 01:38:44\] NOTICE\[13443\] chan_sip.c: Registration from '"5555" \' failed for '64.31.33.70:5206' - Wrong password \[2019-07-05 01:38:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-05T01:38:44.260-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5555",SessionID="0x7f02f81b2088",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/64.31.33.70/5206",Challenge="53055166",ReceivedChallenge="53055166",ReceivedHash="40fdad59034cc110665fbc9876ed2ca3" \[2019-07-05 01:38:44\] NOTICE\[13443\] chan_sip.c: Registration from '"5555" \' failed for '64.31.33.70:5206' - Wrong password \[2019-07-05 01:38:44\] SECURITY\[13451\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-07-05T01:38:44.356-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5555",SessionID="0x7f02f81c5a28",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/	2019-07-05 13:46:24

最近上报的IP列表

104.21.76.61	104.21.76.58	104.21.76.62	104.21.76.68
104.21.76.67	104.21.76.65	104.21.76.64	104.21.76.7
104.21.76.63	104.21.76.75	104.21.76.69	104.21.76.76
104.21.76.77	104.21.76.72	104.21.76.74	104.21.76.70
104.21.76.79	104.21.76.78	104.21.76.8	104.21.76.80